Hacker News Reader

I've always liked http://www.jasypt.org as a wrapper for low level cryptographic operations. But I don't know how it compares to Keyczar.

Is jasypt message encryption even authenticated?

Jasypt is unfortunately prone to inventing its own crypto. This in itself leads me not to trust it.