use direct ByteBuffer instead of byte[] in cryptographic operations

[andy-goryachev]

Generational garbage collector may leave copies of sensitive data in multiple locations in RAM. We should use direct ByteBuffer for any crypto operations instead of byte[].

See
https://news.ycombinator.com/item?id=20241363