When attempting to generate a key pair for an elliptic curve that is not supported, the SunPKCS11 provider will throw a ProviderException because the API returns CKR_BUFFER_TOO_SMALL. This happens only for curves that are present in sun.security.util.CurveDB, but not supported by the SunPKCS11 provider or the token. The correct behavior is for initialize() to throw an InvalidAlgorithmParameterException.