RFR: 8360564: Implement JEP 524: PEM Encodings of Cryptographic Objects (Second Preview) [v13]

Anthony Scarpino ascarpino at openjdk.org
Fri Oct 31 21:57:56 UTC 2025


> Hi
> 
> Please review the [Second Preview](https://openjdk.org/jeps/8360563) for the PEM API.  The most significant changes from [JEP 470](https://openjdk.org/jeps/470) are:
> 
> - Renamed the name of `PEMRecord` class to `PEM`.
> - Revised the new `encryptKey` methods of the `EncryptedPrivateKeyInfo` class to accept `DEREncodable` objects rather than just `PrivateKey` objects so that cryptographic objects with public keys, i.e., `KeyPair` and `PKCS8EncodedKeySpec`, can also be encrypted.
> - Enhanced the `PEMEncoder` and `PEMDecoder` classes to support the encryption and decryption of `KeyPair` and `PKCS8EncodedKeySpec` objects.
> 
> thanks
> 
> Tony

Anthony Scarpino has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains 25 additional commits since the last revision:

 - mistakes
 - Merge branch 'master' into pem26
 - minor doc updates, fix some bugs, PEM set to 26
 - more docs, remove runtimeexception
 - EKPI has a lot of @link's
 - docs
 - more doc updates and zeroing
 - fix non-pbe
 - doc updates, zeroing, fix unencrypted keypair encoding, exception mods
 - updates
 - ... and 15 more: https://git.openjdk.org/jdk/compare/c8aec9a3...0d95043c

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/27147/files
  - new: https://git.openjdk.org/jdk/pull/27147/files/e1405c06..0d95043c

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=27147&range=12
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=27147&range=11-12

  Stats: 107595 lines in 2015 files changed: 60449 ins; 35343 del; 11803 mod
  Patch: https://git.openjdk.org/jdk/pull/27147.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/27147/head:pull/27147

PR: https://git.openjdk.org/jdk/pull/27147


More information about the security-dev mailing list