diff --git a/org.eclipse.jgit.gpg.bc/src/org/eclipse/jgit/gpg/bc/internal/keys/OCBPBEProtectionRemoverFactory.java b/org.eclipse.jgit.gpg.bc/src/org/eclipse/jgit/gpg/bc/internal/keys/OCBPBEProtectionRemoverFactory.java
index 68f8a4555..3924d6859 100644
--- a/org.eclipse.jgit.gpg.bc/src/org/eclipse/jgit/gpg/bc/internal/keys/OCBPBEProtectionRemoverFactory.java
+++ b/org.eclipse.jgit.gpg.bc/src/org/eclipse/jgit/gpg/bc/internal/keys/OCBPBEProtectionRemoverFactory.java
@@ -75,6 +75,10 @@ public byte[] recoverKeyData(int encAlgorithm, byte[] key,
 						.getSymmetricCipherName(encAlgorithm);
 				byte[] decrypted = null;
 				try {
+					// errorprone: "Dynamically constructed transformation
+					// strings are also flagged, as they may conceal an instance
+					// of ECB mode."
+					@SuppressWarnings("InsecureCryptoUsage")
 					Cipher c = Cipher
 							.getInstance(algorithmName + "/OCB/NoPadding"); //$NON-NLS-1$
 					SecretKey secretKey = new SecretKeySpec(key, algorithmName);