title: Why are the JCE Unlimited Strength not included by default?
body: <h2>Setup</h2>
  
  <ul>
  <li>Java doesn't offer out-of-the-box support for the JCE Unlimited Strength Policy Files</li>
  <li>This prevents users from using AES-256, the largest key size of a widely-used encryption standard</li>
  <li>Not including the policy files leads to many problems:
  
  <ul>
  <li><a href="https://stackoverflow.com/questions/6481627/java-security-illegal-key-size-or-default-parameters">Unexpected exceptions</a></li>
  <li><a href="https://stackoverflow.com/questions/1179672/how-to-avoid-installing-unlimited-strength-jce-policy-files-when-deploying-an">Unsatisfying workarounds</a>:
  
  <ul>
  <li>Just install them</li>
  <li>Use a different implementation</li>
  <li>Use reflection that may violate the Java License Agreement</li>
  </ul></li>
  <li><a href="https://stackoverflow.com/questions/5239974/java-jce-unlimited-strength-encryption-security-policy-files">Breakage after JRE updates</a></li>
  <li><a href="https://stackoverflow.com/questions/25320705/jce-unlimited-strength-installed-but-aes-256-is-not-supported">Confusion after installation</a></li>
  <li><a href="https://stackoverflow.com/search?q=%5Bjce%5D+unlimited">And more!</a></li>
  </ul></li>
  <li>All this noise leads to broken and/or buggy programs</li>
  </ul>
  
  <h2>Question</h2>
  
  <ul>
  <li>Why are these not provided and treated like a black sheep?</li>
  </ul>