One additional thing which is missing in the post is that AES-GCM is (finally!!) becoming usable: http://openjdk.java.net/jeps/246

> performance increase is large compared to JDK 8 GA, ranging from 34x to 150x