anchor.diff:  			catch(org.owasp.esapi.errors.EncryptionException e) {
   				throwException(createObject("component", "org.owasp.esapi.errors.EncryptionException").init(variables.ESAPI, "Invalid seal", "Seal did not decrypt properly", e));
   			}
  -		
  +
   			index = plaintext.indexOf(":");
   			if(index == -1) {
   				throwException(createObject("component", "org.owasp.esapi.errors.EncryptionException").init(variables.ESAPI, "Invalid seal", "Seal did not contain properly formatted separator"));
   			}
  -		
  +
   			timestring = plaintext.substring(0, index);
   			timestamp = newJava("java.util.Date").init().getTime();
   			expiration = newJava("java.lang.Long").init(timestring);
   			if(timestamp > expiration) {
   				throwException(createObject("component", "org.owasp.esapi.errors.EncryptionException").init(variables.ESAPI, "Invalid seal", "Seal expiration date has expired"));
   			}
  -		
  +
   			index = plaintext.indexOf(":", index + 1);
   			sealedValue = plaintext.substring(index + 1);
   			return sealedValue;
   		</cfscript>
  -		
  -	</cffunction>
  -	
  +
  +	</cffunction>
  +
   	<cffunction access="public" returntype="boolean" name="verifySeal" output="false">
   		<cfargument required="true" type="String" name="seal"/>
  -	
  +
   		<cfscript>
   			try {
   				unseal(arguments.seal);
  
positive.code: 				digest.update(variables.ESAPI.securityConfiguration().getMasterSalt());
  				digest.update(newJava("java.lang.String").init(arguments.salt).getBytes());
  				digest.update(newJava("java.lang.String").init(arguments.plaintext).getBytes());
  			
  				// rehash a number of times to help strengthen weak passwords
  				bytes = digest.digest();
  				for(i = 0; i < 1024; i++) {
  
negative.code: 				throwException(createObject("component", "org.owasp.esapi.errors.IntegrityException").init(variables.ESAPI, e.message, e.detail, e));
  			}
  		</cfscript>
  
  	</cffunction>
  
  	<cffunction access="public" returntype="String" name="unseal" output="false">
  		<cfargument required="true" type="String" name="seal"/>
  
  		<cfscript>
  			// CF8 requires 'var' at the top
  			var index = "";
  