Cryptography in the Database is out. If you're repsonsible for securing sensitive information in a database, then I wrote this book for you. It's the book that I wish I'd had when I was first put in charge of securing data.
Stephen Northcutt, in his review, mentioned that the only thing that drove him crazy was my claim that Java 1.4.2 doesn't support hardware security modules. It is more accurate to say that while Java 1.4.2 does not support HSMs natively, many HSM vendors include Java cryptographic providers that enable transparent calls to the HSM from within Java.