- removed conditional check for X448 and X25519 certificate/chains now that we have signed certs for those test key files

… to support 'import' and 'configure' subcommands

…iscovered algorithm

…iscovered algorithm

…iscovered algorithm

… well

- Added new Curve#contains method and leveraged that to clean up code considerably in EcdhKeyAlgorithm.java

…rily want to make that available before ED curve calculations are ready

… can't control across JVM versions w/ SoftHSM

…s happening

- Updated README.md to document how to account for ECDH-ES and PKCS11 PrivateKeys

…s happening

- Updated README.md to document how to account for ECDH-ES and PKCS11 PrivateKeys

…s happening

- Updated README.md to document how to account for ECDH-ES and PKCS11 PrivateKeys

… `--usage-derive` flag to allow testing PKCS11 keys with ECDH-ES key algorithms

…icit in its purpose.

- Introduced new CryptoAlgorithm#nonPkcs11Provider to ensure PKCS11 provider won't be used when required key material is required (i.e. for ephemeral key(pair) KeyAlgorithms).
- Ensured CryptoAlgorithm#generateCek ignored applying a PKCS11 provider since required key material wouldn't be available otherwise.

…icit in its purpose.

- Introduced new CryptoAlgorithm#nonPkcs11Provider to ensure PKCS11 provider won't be used when required key material is required (i.e. for ephemeral key(pair) KeyAlgorithms).
- Ensured CryptoAlgorithm#generateCek ignored applying a PKCS11 provider since required key material wouldn't be available otherwise.
- Ensured DefaultJwtBuilder and DefaultJwtParser would use the provider for the KeyAlgorithm, but not for the AeadAlgorithm (unless using direct encryption)

- Consolidated unsigned byte array length calculation for non-negative integers (used in a few places) to a new Bytes#uintLength method. Refactored other classes to use this new method to eliminate code duplication

- Consolidated unsigned byte array length calculation for non-negative integers (used in a few places) to a new Bytes#uintLength method. Refactored other classes to use this new method to eliminate code duplication

…1 secret keys

- Explicitly prevented Password instances in DefaultMacAlgorithm
- Fixed the EdwardsCurve#keyBitLength implementation to accurately reflect RFC key sizes and not encoded byte array sizes.
- OptionalMethodInvoker now supports static invocations in addition to the existing instance invocation support.