# **退款遇到的問題** 有個別客戶遇到,原因是秘鑰太長導致 ?java中使用AES對稱加密后，請求報錯： Caused by: java.lang.RuntimeException: java.security.InvalidKeyException: Illegal key size or default parameters at com. 原因是美國的出口限制，Sun通過權限文件（local\_policy.jar、US\_export\_policy.jar）做了相應限制。密鑰長度最大128，對于需要更大長度的場景則會拋出上面異常。 問題log ~~~ Caused by: java.lang.RuntimeException: java.security.InvalidKeyException: Illegal key size or default parameters at com.btzh.util.AESUtil.encrypt(AESUtil.java:18) at com.btzh.service.impl.SiThirdSystemServiceImpl.mapSystemParams(SiThirdSystemServiceImpl.java:32) at com.btzh.resource.SiThirdSystemResource.mapSystemParams(SiThirdSystemResource.java:41) ... 43 common frames omitted Caused by: java.security.InvalidKeyException: Illegal key size or default parameters at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026) at javax.crypto.Cipher.implInit(Cipher.java:801) at javax.crypto.Cipher.chooseProvider(Cipher.java:864) at javax.crypto.Cipher.init(Cipher.java:1249) at javax.crypto.Cipher.init(Cipher.java:1186) at com.btzh.util.AESUtil.encrypt(AESUtil.java:15) ~~~ 解決辦法是下載Oracle官方網站上的無政策限制權限文件，下載鏈接： ~~~ jdk8：https://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html ~~~ 下載后將`%JAVA_HOME%\jre\lib\security`中的`local_policy.jar`?和`US_export_policy.jar`替換為下載包中的的`local_policy.jar`?和`US_export_policy.jar`。 在CentOs 7.6環境查看jdk安裝目錄  在/usr/java/jdk1.8.0\_131/jre/lib/security下替換local\_policy.jar和US\_export\_policy.jar tips 官方的密鑰應該再128之內