How does bouncycastle compare to the weird jruby openssl implementation?