On Fri, 10 May 2024 20:55:47 GMT, Kevin Driver <kdri...@openjdk.org> wrote:
>> I agree. Also, if we do want to validate arguments (and I don't know if we >> need to), then I think the `Extract` constructor should be responsible for >> doing that, not the `Builder`. Doing it in `Extract` is safer since it is >> done after the fields are cloned. > > Do we think there is a meaningful definition of an extract that has no IKM && > no salt values **at the same time**? This is like encrypting with an empty password. You don't recommend people doing that but it's legal. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1598539985
