New Draft of the KDF JEP for the Java Platform

2024-03-01 Thread Kevin Driver
Hi All, As discussed a few months ago [1], we are working on providing a new API for KDF (Key Derivation Functions). There will be a KDF class for users, a KDFSpi class for security providers, and several other parameter classes. We plan to add support for HKDF (RFC-5869). For more details, se

Re: RFR: 8312444: Unused parameter 'defval' in SocketPermission.initEphemeralPorts could be removed

2024-03-01 Thread Korov
On Fri, 1 Mar 2024 17:56:16 GMT, Daniel Fuchs wrote: > The proposed cleanup looks OK and reduces potential confusion - since the > removed parameters were actually not used. However I wonder if we want to > change this class at this time. I added the label `security` to get some > input from s

Re: RFR: 8312444: Unused parameter 'defval' in SocketPermission.initEphemeralPorts could be removed

2024-03-01 Thread Daniel Fuchs
On Fri, 1 Mar 2024 17:35:35 GMT, Korov wrote: > Removing unused parameter `defval` in `SocketPermission.initEphemeralPorts`, > so the variable `PRIV_PORT_MAX` and `DEF_EPH_LOW` unused too. > > Removing unused parameter `cname` in `SocketPermission.authorizedIPv4` and > `SocketPermission.author

Re: RFR: 8051959: Option to print thread information in java.security.debug output

2024-03-01 Thread Alan Bateman
On Fri, 1 Mar 2024 15:13:49 GMT, Sean Coffey wrote: > Proposal to improve the `java.security.debug` output so that options exist to > add thread ID, thread name, source of log record and a timestamp information > to the output. > > examples: > format without patch : > > > properties: Initial

RFR: 8051959: Option to print thread information in java.security.debug output

2024-03-01 Thread Sean Coffey
Proposal to improve the `java.security.debug` output so that options exist to add thread ID, thread name, source of log record and a timestamp information to the output. examples: format without patch : properties: Initial security property: package.definition=sun.misc.,sun.reflect. properties