Ok, let's stay with Bouncycastle then. Consider, though, if it is worth moving the private key loading to a memoized supplier.