bc-java icon indicating copy to clipboard operation
bc-java copied to clipboard

HKDF implementation not using all IKMs

Open wangweij opened this issue 2 weeks ago • 0 comments

When multiple addIKM methods have been called, the final IKM should be the concatenation of them. However, at https://github.com/bcgit/bc-java/blob/bdc97032f09c95c1d78ad71e19b6cc2ae712fa99/prov/src/main/jdk25/org/bouncycastle/jcajce/provider/kdf/hkdf/HKDFSpi.java#L97, only the 1st one is used. Same with salts.

wangweij avatar Dec 06 '25 15:12 wangweij