<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><a href="https://bugs.openjdk.java.net/browse/JDK-8061842" class="">JDK-8061842</a> has added improvements in JDK 9 to simplify the management of crypto strength.<div class="">See <a href="http://hg.openjdk.java.net/jdk9/dev/jdk/file/f82971b324f6/src/java.base/share/conf/security/policy/README.txt" class="">README.txt</a> for details.<div class=""><br class=""></div><div class=""><div class="">Adding, 'Security.setProperty(“crypto.policy”, “unlimited”);' or editing the java.security configuration file</div><div class="">will enable unlimited strength.</div><div class=""><br class=""></div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 5 Oct 2016, at 09:06, Jeroen Cranendonk <<a href="mailto:j.p.cranendonk@gmail.com" class="">j.p.cranendonk@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi!<br class=""><br class="">The bane of my existance for the last decade or so has been dealing<br class="">with errors because the Java Unlimited Strength Jurisdiction Policy<br class="">Files have not been installed, and finding ways of getting them<br class="">installed.<br class=""><br class="">I was wondering what the state of this is for Java 9?<br class=""><br class="">I can't find any Java 9 policy files for the current ea builds of Java 9.<br class="">But I also can't find any mention of them no longer being required.<br class="">Worryingly, the old test for whether they're installled, based on AES<br class="">max cipher length, still gives me 128 (code pasted after this mail),<br class="">which suggests they are still needed.<br class=""><br class="">It seems that the requirement for having unlimited strength<br class="">jurisdiction policy files has been dropped a long long time ago, but<br class="">noone ever got around to actually implementing the change:<br class=""><a href="https://bugs.openjdk.java.net/browse/JDK-7024850" class="">https://bugs.openjdk.java.net/browse/JDK-7024850</a><br class=""><br class="">I was hoping with Java 9 this would finalyl be solved :)<br class=""><br class="">Test:<br class="">import javax.crypto.Cipher;<br class="">class Test {<br class=""> public static void main(String[] args) {<br class=""> try {<br class=""> System.out.println("Hello World!");<br class=""> int maxKeyLen = Cipher.getMaxAllowedKeyLength("AES");<br class=""> System.out.println(maxKeyLen);<br class=""> } catch (Exception e){<br class=""> System.out.println("Sad world :(");<br class=""> }<br class=""> }<br class="">}<br class=""></div></div></blockquote></div><br class=""></div></div></div></body></html>