On Thu, 1 Sep 2022 23:50:47 GMT, Weijun Wang <wei...@openjdk.org> wrote:
>> Since the algorithm is already encoded inside a PKCS #8 data block, it is >> not necessary to provide an algorithm when a `PKCS8EncodedKeySpec` object is >> created. The same for `X509EncodedKeySpec`. > > Weijun Wang has updated the pull request incrementally with one additional > commit since the last revision: > > fine tune spec Should this also be aligned with EncryptedPrivateKeyInfo? https://github.com/openjdk/jdk/blob/57e2315bbc3ad4f0d1b96fb5944f7799b78a1630/src/java.base/share/classes/javax/crypto/EncryptedPrivateKeyInfo.java#L211 See also my PBES2 discussion on secure-dev last month. ------------- PR: https://git.openjdk.org/jdk/pull/10131