bc-java
bc-java copied to clipboard
HKDF implementation not using all IKMs
When multiple addIKM methods have been called, the final IKM should be the concatenation of them. However, at https://github.com/bcgit/bc-java/blob/bdc97032f09c95c1d78ad71e19b6cc2ae712fa99/prov/src/main/jdk25/org/bouncycastle/jcajce/provider/kdf/hkdf/HKDFSpi.java#L97, only the 1st one is used. Same with salts.