Starting in April, Oracle will treat JAR files signed with the MD5 hashing algorithm as if they were unsigned, which means modern releases of the Java Runtime Environment (JRE) will block those ...

The java version is using TripleDES encryption in CBC mode with PKCS5 padding. From what I've read and seen on the web, mcrypt with PHP does not support PKCS5 padding.

One proposal would restrict Java APIs to maintain the strong encapsulation that assures the integrity of code and data, while a second would introduce a Key Encapsulation Mechanism API.