On Thu, 19 Dec 2024 22:07:39 GMT, Martin Balao <mba...@openjdk.org> wrote:

> there will be part of the functionality difficult or impossible to use and 
> untested.

Show me a case that is impossible with this factory. IIUC, the only usage of 
this factory is to convert a `SecretKeySpec` to a P11 key. Why need this step 
if your new HKDF and existing HMac impl already accept `SecretKeySpec`?

Do you want to store that key inside the token for a while before feeding it to 
HKDF?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/22215#issuecomment-2556042204

Reply via email to