JDK-8256081 : Support key generation for HMAC mechanisms
  • Type: CSR
  • Component: security-libs
  • Sub-Component: javax.crypto:pkcs11
  • Priority: P3
  • Status: Closed
  • Resolution: Withdrawn
  • Fix Versions: 16
  • Submitted: 2020-11-10
  • Updated: 2020-11-10
  • Resolved: 2020-11-10
Related Reports
CSR :  
Description
Summary
-------
Enhance SunPKCS11 provider to support key generation for various Hmac mechanisms when supported by underlying native PKCS11 library.


Problem
-------
SunPKCS11 provider does not support key generation for Hmac mechanisms, thus callers have to create keys using other providers such as SunJCE, or 3rd party utility/tools.


Solution
--------
Enhance SunPKCS11 provider to to support the following crypto services: 

 - KeyGenerator: HmacMD5,  HmacSHA1,  HmacSHA224,  HmacSHA256 HmacSHA384 HmacSHA512,
   HmacSHA512/224, HmacSHA512/256.

Specification
-------------