As part of HDFS-5143, hitliuyi included a ByteBuffer-based API for encryption and decryption. Especially, because of the zero-copy work this seems like an important piece of work.
This API should be discussed independently instead of just as part of HDFS-5143.