title: How secure is AES-128?
body: <p>It seems there are legal issues associated with AES-256 (it is disabled in Java, and Oracle tells me in their UnlimitedJCE Policy that I am "advised to consult" my  "export/import control counsel or attorney to determine the exact requirements" before turning it back on and the <a href="http://en.wikipedia.org/wiki/Restrictions_on_the_import_of_cryptography" rel="noreferrer">page on Wikipedia</a> does not look very friendly either).</p>
  
  <p>It also seems that AES-128 is "fine" (at least the people responsible for putting together the JDK have come to that conclusion).</p>
  
  <p>So can I just use AES-128 and feel happy with my encryption? Is it still safe enough to protect the data for a couple of more years from all but the most resourceful attackers?</p>