org.apache.xml.security.encryption.XMLEncryptionException: Illegal key size or default parameters

Hi when i am trying to add securement Encryption Sym Algorithm in spring ws configuration it is giving following exception :

Caused by: org.apache.ws.security.WSSecurityException: Cannot encrypt data; nested exception is: 
    org.apache.xml.security.encryption.XMLEncryptionException: Illegal key size or default parameters
Original Exception was java.security.InvalidKeyException: Illegal key size or default parameters
    at org.apache.ws.security.message.WSSecEncrypt.doEncryption(WSSecEncrypt.java:599)
    at org.apache.ws.security.message.WSSecEncrypt.doEncryption(WSSecEncrypt.java:459)
    at org.apache.ws.security.message.WSSecEncrypt.encryptForInternalRef(WSSecEncrypt.java:348)
    at org.apache.ws.security.message.WSSecEncrypt.build(WSSecEncrypt.java:309)
    at org.apache.ws.security.action.EncryptionAction.execute(EncryptionAction.java:62)
    ... 20 more
Caused by: org.apache.xml.security.encryption.XMLEncryptionException: Illegal key size or default parameters
Original Exception was java.security.InvalidKeyException: Illegal key size or default parameters
    at org.apache.xml.security.encryption.XMLC开发者_JS百科ipher.encryptData(Unknown Source)
    at org.apache.xml.security.encryption.XMLCipher.encryptData(Unknown Source)
    at org.apache.xml.security.encryption.XMLCipher.encryptElement(Unknown Source)
    at org.apache.xml.security.encryption.XMLCipher.doFinal(Unknown Source)
    at org.apache.ws.security.message.WSSecEncrypt.doEncryption(WSSecEncrypt.java:593)
    ... 24 more

Does this help?: http://blog.rampartfaq.com/2009/08/faq-001-javasecurityinvalidkeyexception.html

You need to patch your JDK with Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files.

After Updating the JDK library with "Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6" the problem was resolved.

you can download library from http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html

This is pretty old question(Links in the answers are either not working or does not provide details for latest java versions).

I faced the issue recently and would like to add more details.

Root Cause: Java 8 and earlier versions does not support keys with 256-bit AES encryption by default; only 128-bit AES encryption is supported.

Solution: Issue can be resolved by installing the Oracle Java JCE unlimited strength jars. Follow the link to download the jars for Java 8 and earlier versions: Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files.

Jar files are available for Java versions 6, 7 and 8.

Download the zip file by accepting license agreement, unzip it and copy these jar files to $JAVA_HOME/jre/lib/security/ directory. Restart application, if running already, for the jars to take effect.

Java 9 and later uses the unlimited policy files by default.