@Override
        public boolean compatibleWith(String provider) {
            // OAEP transformations have two digests, the "main" digest and the MGF-1 digest.
            // BC and Conscrypt set the MGF-1 digest to the same as the main digest when it's
            // not specified, whereas Sun's provider sets it to SHA-1.  Thus, the results from
            // the different providers won't match when there isn't an explicit MGF-1 digest set
            // and the main digest isn't SHA-1.  See b/22405492.
            if (provider.equals("SunJCE")
                    && (spec == null)
                    && !transformation.toUpperCase(Locale.US).equals("RSA/ECB/OAEPWITHSHA-1ANDMGF1PADDING")) {
                return false;
            }
            return true;
        }
openssl rsautl -raw -sign -inkey rsa.key | recode ../x1 | sed 's/0x/(byte) 0x/g'
common/src/test/java/org/conscrypt/javax/crypto/CipherTest.java