ScramDigestPasswordImpl calls Hmac.init() using the supplied secret without checking its length. The default SunJCE provider automatically pads/truncates the secret to the block length, but the SunPKCS11 provider passes the secret as-is to the underlying NSS provider, which causes a CKR_KEY_SIZE_RANGE in case there is a mismatch with the block-size.