Currently, specific (per JDK family version) JCE jurisdiction policy jar files have to be downloaded in order for strong crypto to be available in the JDK.

A supportability enhancement would be for the JDK to allow any version of the signed JCE policy files to work on any JDK family version. This is non-applicable to JDK 9 since the signing requirement was removed there.