8301553: Support Password-Based Cryptography in SunPKCS11 (iteration #3)

Co-authored-by: Francisco Ferrari <[email protected]>
Co-authored-by: Martin Balao <[email protected]>

Author: martinuy

src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11SecretKeyFactory.java

@@ -347,7 +347,12 @@ static P11Key convertKey(Token token, Key key, String svcAlgo,
                 throw new InvalidKeyException("Encoded format must be RAW");
             }
             byte[] encoded = key.getEncoded();
-            p11Key = createKey(token, encoded, svcAlgo, si.keyType, extraAttrs);
+            try {
+                p11Key = createKey(token, encoded, svcAlgo, si.keyType,
+                        extraAttrs);
+            } finally {
+                Arrays.fill(encoded, (byte) 0);
+            }
         }
         token.secretCache.put(key, p11Key);
         return p11Key;