jar存档可以解压，并且实际的策略文件是文本可读的，因此您可以评估实际的策略本身（或者与上面推荐的abhishek散列进行比较）。
示例（无限制） default_local.policy :

$ more default_local.policy
// Country-specific policy file for countries with no limits on crypto strength.
grant {
    // There is no restriction to any algorithms.
    permission javax.crypto.CryptoAllPermission;
};

示例（受限） default_local.policy :

$ more default_local.policy
// Some countries have import limits on crypto strength. This policy file
// is worldwide importable.

grant {
    permission javax.crypto.CryptoPermission "DES", 64;
    permission javax.crypto.CryptoPermission "DESede", *;
    permission javax.crypto.CryptoPermission "RC2", "javax.crypto.spec.RC2ParameterSpec", 128;
    permission javax.crypto.CryptoPermission "RC4", 128;
    permission javax.crypto.CryptoPermission "RC5", 128,
          "javax.crypto.spec.RC5ParameterSpec", *, 12, *;
    permission javax.crypto.CryptoPermission "RSA", *;
    permission javax.crypto.CryptoPermission *, 128;
};

出口限制不太可能因为ear规则的现状而改变，所以你只要做一个简单的决定就很安全了 grep 为了 CryptoAllPermission 与。 *, 128; .