Java Security: SunJSSE and TLSAES
TLSAES defines AES ciphersuites for TLS, and from TLS version 1.1 , the AES cipher suites are merged in TLS specification. The AES supports key lengths of 128, 192 and 256 bits. However, the TLSAES specification only defines ciphersuites for 128 and 256 bits keys. In Java security context, there is a important concept, "jurisdiction policy". The JCA framework includes an ability to enforce restrictions regarding the cryptographic algorithms and maximum cryptographic strengths available to applets/applications in different jurisdiction contexts (locations). Any such restrictions are specified in "jurisdiction policy files". Due to import control restrictions by the governments of a few countries, the jurisdiction policy files shipped with the JDK from Sun Microsystems specify that "strong" but limited cryptography may be used. An "unlimited strength" version of these files indicating no restrictions on cryptographic strengths is avai...