The following test program runs on OpenJDK17: ///// KeyGeneratorTest.java \\\\\ import javax.crypto.KeyGenerator; public class KeyGeneratorTest { public static void main(String[] args) throws Exception { KeyGenerator kg = KeyGenerator.getInstance("HmacSHA1"); System.out.println(kg); System.out.println("KeyGenerator provider: " + kg.getProvider().getName()); } } But fails on OpenJDK11 with the following exeption: $ java KeyGeneratorTest Exception in thread "main" java.security.NoSuchAlgorithmException: HmacSHA1 KeyGenerator not available at java.base/javax.crypto.KeyGenerator.<init>(KeyGenerator.java:177) at java.base/javax.crypto.KeyGenerator.getInstance(KeyGenerator.java:244) at KeyGeneratorTest.main(KeyGeneratorTest.java:5) I believe this is due to the following functionality in OpenJDK17: Add SHA3 support to SunPKCS11 provider https://bugs.openjdk.org/browse/JDK-8242332 Can we backport this to OpenJDK11?