title: local_policy.jar and US_export_policy.jar different with Unlimited Strength Vs Default.
body: <p>In java platform documentation <a href="http://www.oracle.com/technetwork/java/javase/jrereadme-182762.html">http://www.oracle.com/technetwork/java/javase/jrereadme-182762.html</a>. Regarding the comment about </p>
  
  <p>/lib/security/local_policy.jar
    /lib/security/US_export_policy.jar</p>
  
  <hr>
  
  <h2>Unlimited Strength Java Cryptography Extension</h2>
  
  <p>Due to import control restrictions for some countries, the Java Cryptography Extension (JCE) policy files shipped with the Java SE Development Kit and the Java SE Runtime Environment allow strong but limited cryptography to be used.</p>
  
  <p>An unlimited strength version of these files indicating no restrictions on cryptographic strengths is available on the JDK web site for those living in eligible countries.  Those living in eligible countries may download the unlimited strength version and replace the strong cryptography jar files with the unlimited strength files.
  Questions</p>
  
  <ol>
  <li>Does every JDK bundle comes with local_policy.jar and US_export_policy.jar ?</li>
  <li>What is the limitation in default local_policy.jar and US_export_policy.jar. Is it the key size ?</li>
  <li>If I need to use 128 bit keys does it required to go for Unlimited Strength Java Cryptography<br>
  Extension</li>
  <li>Is there a way I can keep these two jars in external path and load it. Because I have more 50 servers rather than coping in each JDK I would prefer to maintain it in a central place. </li>
  </ol>