On Wed, 7 May 2025 05:00:57 GMT, Bradford Wetmore <wetm...@openjdk.org> wrote:

>> Yes, it'd be nice. I reopened https://bugs.openjdk.org/browse/JDK-8160206 
>> and we can address this separately.
>
> Or in the meantime:
> 
>     } finally {
>         // Best effort
>         if (eae_prk instanceof SecretKeySpec s) {
>             SharedSecrets.getJavaxCryptoSpecAccess()
>                     .clearSecretKeySpec(s);
>         } else {
>             try {
>                 eae_prk.destroy();
>             } catch (DestroyFailedException e) {
>                 // swallow
>             }
>         }
>     }

Sounds good, thanks for the suggestion.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24393#discussion_r2080206394

Reply via email to