Java Cryptography Extension

Posted by Adam Tannon on Programmers See other posts from Programmers or by Adam Tannon
Published on 2012-07-07T13:06:08Z Indexed on 2012/07/07 15:22 UTC
Read the original article Hit count: 549

Filed under:
|

I was told that in order to support AES256 encryption inside my Java app that I would need the JCE with Unlimited Strength Jurisdiction Policy Files.

I downloaded this from Oracle and unzipped it and I'm only seeing 2 JARs:

  • local_policy.jar; and
  • US_export_polic.jar

I just want to confirm I'm not missing anything here! My understanding (after reading the README.txt) is that I just drop these two into my <JAVA_HOME>/lib/security/ directory and they should be installed.

By the names of these JARs I have to assume that its not the Java Crypto API that cannot handle AES256, but it's in fact a legal issue, perhaps? And that these two JARs basically tell the JRE "yes, it's legally-acceptable to run this level of crypto (AES256)." Am I correct or off-base?

© Programmers or respective owner

Related posts about java

Related posts about cryptography