EncryptedRandomAccessThing and other API's from my GSoC project

This is EncryptedRandomAccessThing which toad will be using in his db4o replacement along with around half of the API I have written this summer for GSoC. ERAT is dependent on the three API's included. I am still in the process of writing docs and unit tests for ERAT but the other three APIs are complete. These will be done this weekend. This requires BouncyCastle 1.51 (#271).
Would it be clearer to throw if the key type doesn't have an IV instead of returning `null`?