https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-functions/functions-e-g/generatesecretkey.html
We're on CF23 which, with latest patch level is on JVM 17.
The documentation in the link above states keysize is limited to 128 bit unless the Java Unlimited Strength Jurisdiction Policy Files are installed.
However, it seems GenerateSecretKey("AES", 256) works fine and we have not installed those Java files.
Is the documentation possibly outdated? Can we safely assume 256 keysize is safe to use in CF23+?
m
Mark Takata (Adobe)
06/05/2025, 2:52 PM
Sorry, I missed this one. @Edwin Samuel Jonathan or @priyank_adobe or @nimitsharma can you confirm that this is working as intended so we can have @saghosh update the docs?
j
Jason Roozee
06/05/2025, 2:53 PM
No worries! I figured it was just missed. Thank you!
➕ 1
e
Edwin Samuel Jonathan
06/18/2025, 11:49 AM
Hey sorry for the late reply. Missed this message. Yes AES supports up to 256 bits. We need to update the documentation. @saghosh Let me know if any clarification is needed
s
saghosh
06/18/2025, 11:50 AM
Sure thanks Edwin
🙌 1
saghosh
06/18/2025, 12:07 PM
I've updated the page, code sample, and cffidle sample. Please check in a while.