Why have a dependency on okio?

[mirraj2]

You literally only use it in one place and it is EASILY replaced with a ByteArrayOutputStream.

I rewrote your the last part of your encrypt() method to not use any dependencies:

ByteArrayOutputStream output = new ByteArrayOutputStream();
    try {
      output.write(cipher.getIV());
      output.write(encryptedBytes);

      // compute the MAC if needed and append the MAC (IV || CIPHER || MAC)
      if (context.getMacAlgorithm() != AliceContext.MacAlgorithm.NONE) {
        output.write(getMac(context.getMacAlgorithm(), password).doFinal(encryptedBytes));
      }
    } catch (IOException e) {
      throw new RuntimeException(e);
    }

    return output.toByteArray();

[rockaport]

Yep, it's unnecessary. The idea at the time was to integrate okio sources and sinks, but eventually that got tossed aside. Submit a PR and I'll get it merged.

[rockaport]

Fixed in v0.9.0