There have been a couple of new versions, and their artifacts are now synch'd to the central repo:
http://repo1.maven.org/maven2/org/bouncycastle/
the groupId changed from bouncycastle to org.bouncycastle so we'll need to be very careful: dependency resolution won't see these as the same artifact, so this mean we could end up with duplicate jars.