One proposal would restrict Java APIs to maintain the strong encapsulation that assures the integrity of code and data, while a second would introduce a Key Encapsulation Mechanism API.

The java version is using TripleDES encryption in CBC mode with PKCS5 padding. From what I've read and seen on the web, mcrypt with PHP does not support PKCS5 padding.