RFR: 8360564: Implement JEP 524: PEM Encodings of Cryptographic Objects (Second Preview) [v3]

Anthony Scarpino ascarpino at openjdk.org
Thu Sep 25 22:44:03 UTC 2025


> Hi
> 
> Please review the [Second Preview](https://openjdk.org/jeps/8360563) for the PEM API.  The most significant changes from [JEP 470](https://openjdk.org/jeps/470) are:
> 
> - Renamed the name of `PEMRecord` class to `PEM`.
> - Revised the new `encryptKey` methods of the `EncryptedPrivateKeyInfo` class to accept `DEREncodable` objects rather than just `PrivateKey` objects so that cryptographic objects with public keys, i.e., `KeyPair` and `PKCS8EncodedKeySpec`, can also be encrypted.
> - Enhanced the `PEMEncoder` and `PEMDecoder` classes to support the encryption and decryption of `KeyPair` and `PKCS8EncodedKeySpec` objects.
> 
> thanks
> 
> Tony

Anthony Scarpino has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains 12 additional commits since the last revision:

 - review comments and bug fixes
 - Merge branch 'master' into pem26
 - rework test & commented out code.
 - fix test
 - simplify
 - doc and code updates
 - Merge branch 'master' into pem26
 - doc and code updates
 - Merge branch 'master' into pem26
 - Initial
 - ... and 2 more: https://git.openjdk.org/jdk/compare/09bce958...24be35c1

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/27147/files
  - new: https://git.openjdk.org/jdk/pull/27147/files/b2d0defd..24be35c1

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=27147&range=02
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=27147&range=01-02

  Stats: 164401 lines in 1844 files changed: 133947 ins; 19113 del; 11341 mod
  Patch: https://git.openjdk.org/jdk/pull/27147.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/27147/head:pull/27147

PR: https://git.openjdk.org/jdk/pull/27147


More information about the security-dev mailing list