getBytes() method may produce unwanted results

[firaja]

The usage of String#getBytes() inside the library without any explicit charset make the result depend on the JKD implementation of Charset.defaultCharset().

If a target system uses a different default charset and/or declares a different file.encoding property, hashing or checking passwords may not work properly.

Solution

Find all String#getBytes() and replace them so that the charset (UTF-8) is explicit.