807 # Cryptographic Jurisdiction Policy defaults

   808 # 

   809 # Due to the import control restrictions of some countries, the default

   810 # JCE policy files allow for strong but "limited" cryptographic key

   811 # lengths to be used.  If your country's cryptographic regulations allow,

   812 # the "unlimited" strength policy files can be used instead, which contain

   813 # no restrictions on cryptographic strengths.

   814 # 

   815 # If your country has restrictions that don't fit either "limited" or

   816 # "unlimited", an appropriate set of policy files should be created and

   817 # configured before using this distribution.  The jurisdiction policy file

   818 # configuration must reflect the cryptographic restrictions appropriate

   819 # for your country.

   820 # 

   821 # YOU ARE ADVISED TO CONSULT YOUR EXPORT/IMPORT CONTROL COUNSEL OR ATTORNEY

   822 # TO DETERMINE THE EXACT REQUIREMENTS.

   823 # 

   824 # The policy files are flat text files organized into subdirectories of

   825 # <java-home>/conf/security/policy.  Each directory contains a complete

   826 # set of policy files.

   827 #

   828 # The "crypto.policy" Security property controls the directory selection,

   829 # and thus the effective cryptographic policy.

   830 # 

   831 # The default set of directories is:  

   832 # 

   833 #     limited | unlimited 

   834 # 

   835 # however other directories can be created and configured.

   836 # 

   837 # Within a directory, the effective policy is the combined minimum

   838 # permissions of the grant statements in the file(s) with the filename

   839 # pattern "default_*.policy".  At least one grant is required.  For

   840 # example:

   841 #

   842 #     limited   =  Export (all) + Import (limited)  =  Limited

   843 #     unlimited =  Export (all) + Import (all)      =  Unlimited

   844 #

   845 # The effective exemption policy is the combined minimum permissions

   846 # of the grant statements in the file(s) with the filename pattern

   847 # "exempt_*.policy".  Exemption grants are optional.

   848 #

   849 #     limited   =  grants exemption permissions, by which the

   850 #                  effective policy can be circumvented. 

   851 #                  e.g.  KeyRecovery/Escrow/Weakening.

   852 # 

   853 # Please see the JCA documentation for additional information on these

   854 # files and formats.

   855 crypto.policy=crypto.policydir-tbd

   856