jakarta-commons-codec should be ported to use NSS library for cryptography. See the tracking bug for details and links on how it could be done.
Commons-codec doesn't actually implement any cryptographic functions, it merely provides convenience methods for cryptographic functions in the JRE itself. I am closing this as not-a-bug. You should raise this issue with the OpenJDK team instead.