in java/src/main/java/com/alexa/awisapi/AuthenticationHelper.java [354:376]
private void init(byte[] ikm, byte[] salt) {
byte[] realSalt = salt == null ? EMPTY_ARRAY : (byte[]) salt.clone();
byte[] rawKeyMaterial = EMPTY_ARRAY;
try {
final Mac e = Mac.getInstance(this.algorithm);
if (realSalt.length == 0) {
realSalt = new byte[e.getMacLength()];
Arrays.fill(realSalt, (byte) 0);
}
e.init(new SecretKeySpec(realSalt, this.algorithm));
rawKeyMaterial = e.doFinal(ikm);
final SecretKeySpec key = new SecretKeySpec(rawKeyMaterial, this.algorithm);
Arrays.fill(rawKeyMaterial, (byte) 0);
this.unsafeInitWithoutKeyExtraction(key);
} catch (final GeneralSecurityException var10) {
throw new RuntimeException("Unexpected exception", var10);
} finally {
Arrays.fill(rawKeyMaterial, (byte) 0);
}
}