JDK-8348733 : Add Hmac and HmacPBE to secret key algorithm names
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Affected Version: 7
  • Priority: P4
  • Status: Open
  • Resolution: Unresolved
  • Submitted: 2025-01-27
  • Updated: 2025-04-29
Related Reports
Relates :  
JDK-8348732 - SunJCE and SunPKCS11 have different PBE key encodings
Description
The SunJCE and SunPKCS11 security providers include SecretKeyFactory or KeyGenerator implementations that can generate secret keys having algorithm names in the format "Hmac<digest>" and "HmacPBE<digest>". They should be documented in the Java Security Standard Algorithm Names specification.

Additionally, we will consider clarifying the encodings of PBE keys. See JDK-8348732.
Comments
Update: as part of https://bugs.openjdk.org/browse/JDK-8348732 , SunPKCS11 provider removed a few PBE-related SecretKeyFactory impls.
29-04-2025
The Secret Key Algorithms section was only added in JDK-8346736, but yes, the SecretKeyFactory and KeyGenerator sections might also need to updated.
29-01-2025
Hmac supports starts 2002, thus setting affected version to an old release, e.g. 7.
29-01-2025
Both SunJCE and SunPKCS11 provider supports Hmac, HmacPBE, PBKDF2 related SecretKeyFactory impls. Need to check against existing documentations and add undocumented ones.
29-01-2025