RFR: 8371156: PBKDF2 default values should not be DER encoded

Thu, 06 Nov 2025 11:56:49 -0800 

[JDK-8371156](https://bugs.openjdk.org/browse/JDK-8371156)

HmacSHA1 is the DEFAULT for PBKDF2. Therefore, it should not be DER encoded.


PBKDF2-params ::= SEQUENCE {
     salt CHOICE {
         specified OCTET STRING,
         otherSource AlgorithmIdentifier {{PBKDF2-SaltSources}}
    },
    iterationCount INTEGER (1..MAX),
    keyLength INTEGER (1..MAX) OPTIONAL,
    prf AlgorithmIdentifier {{PBKDF2-PRFs}} DEFAULT algid-hmacWithSHA1
}

-------------

Commit messages:
 - IJ comment
 - first iteration

Changes: https://git.openjdk.org/jdk/pull/28182/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=28182&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8371156
  Stats: 22 lines in 3 files changed: 17 ins; 1 del; 4 mod
  Patch: https://git.openjdk.org/jdk/pull/28182.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/28182/head:pull/28182

PR: https://git.openjdk.org/jdk/pull/28182

Reply via email to