Derby supports disk encryption and requires an encryption provider.
An encryption provider implements the Java cryptography concepts. The Java Runtime Environment (JRE) for Java SE includes Java Cryptographic Extensions (JCE, part of the Java Cryptography Architecture) and one or more default encryption providers. For more information, see the Java Cryptography Architecture (JCA) Reference Guide.
The JRE determines the default encryption provider as follows: