Javadoc claims a NoSuchAlgorithmException will be thrown, not a return of null.
Elsewhere we expect the service type to be 'PasswordFactory', this does appear to make more sense than 'Password'