Java · Hard · Pro
Key derivation functions API (Java 21) — password hashing use?
JavaModules & SecurityStaff
Key derivation (Java 21)
Java 21 added standard KDF APIs in javax.crypto.KDF (e.g., HKDF) so password-based keys and TLS key schedules use reviewed implementations instead of ad-hoc HMAC loops.