EncryptedRandomAccessThing and other API's from my GSoC project

This is EncryptedRandomAccessThing which toad will be using in his db4o replacement along with around half of the API I have written this summer for GSoC. ERAT is dependent on the three API's included. I am still in the process of writing docs and unit tests for ERAT but the other three APIs are complete. These will be done this weekend. This requires BouncyCastle 1.51 (#271).
The explanation you give makes sense, but how about a Javadoc comment with something about how this is the recommended algorithm? ... Will it ever change? That could be brittle.