How are the crypto libraries in the "new" Java versions? I've heard pretty bad stuff about the default security configurations in Java.