KeyPairGenerator.initialize(AlgorithmParameterSpec, SecureRandom) now reports a spec it will not take as the InvalidAlgorithmParameterException it declares across all the services the two providers register rather than only 44 of them, the twenty-three PQC generators that resolve a parameter set by name no longer case-folding the null a spec with no getName() yields and so reaching their own name check, the two composite generators refusing a non-null spec with the declared exception rather than an IllegalArgumentException, and the RSA generator translating the values its lightweight parameters refuse the way the int overload's are.