None of the methods in the java.security.Security specify the behavior when null is passed as an argument. The specification should be updated to document existing behavior.