Destroy key and iv while encrypting/decrypting...
Rename "destroy(...)" to "destroyArray(...)".
Add a holder for key/certificate (similar to keypair) and key pair validator.
Check before validating
Sunsetting SHA1 signatures: default to SHA-256.

http://googleonlinesecurity.blogspot.co.uk/2014/09/gradually-sunsetting-sha-1.html
EncodedKeySpec(s) are a f***ing mess!
JSON values.
Bumping revision to 2.3