While checking ENTESB-15831 we've found that we can't use:

• masked-HMAC-SHA256-AES-128
• masked-HMAC-SHA256-AES-256

when creating KeyStoreCredentialStore masked passwords. These algorithm IDs are added as PasswordFactory algorithm ids but are missing among AlgorithmParameters ids.

Is this intended?