On Fri, 14 Apr 2023 01:59:59 GMT, Xue-Lei Andrew Fan <xue...@openjdk.org> wrote:
>> I can rewrite this into something like "The caller of this method must >> validate..." so it becomes a requirement. We'll make sure the `KEM` class >> follows it. Any other class that wishes to call it directly must do it as >> well. > > You can make it a required part of the specification. But it is a > error-prone design. What happens if an application does not follow the spec? > It may be more complicated to handle the case. No more validation for providers. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/13256#discussion_r1170289644