The Legion of the Bouncy Castle has released version 1.31
of the Bouncy Castle Java Cryptography API, an open source,
clean-room implementation of the Java Cryptography Extension (JCE).
It supports X.509 certificates, PKCS12, S/MIME, CMS, PKCS7, and lots of other juicy acronyms. It also includes its own light-weight crypto API that works in Java 1.0 and later, and does not depend on the JCE.
Version 1.31 has "bug and compatibility fixes for the PGP library as well as some defects
fixed in the X.509 extension processing, ECDSA key encoding and the EC point encoding.
The most notable new addition is the support for very large files in the SMIME package
via streaming."
Download it while it's still legal.