Java is capable of unlimited strength cryptography, just not out of the box. As the README from the Java Cryptography Extension (JCE) states, “Due to import control restrictions of some countries, the version of the JCE policy files that are bundled in the Java Runtime Environment, or JRE(TM), 8 environment allow ‘strong’ but limited cryptography to be used. This download bundle (the one including this README file) provides ‘unlimited strength’ policy files which contain no restrictions on cryptographic strengths.” The JCE can be downloaded here in certain jurisdictions (e.g., the U.S. – the README says, “most countries”).
Once downloaded and unzipped, you simply place the files local_policy.jar and US_export_policy.jar (for the U.S. jurisdiction where I am) in the JDK and JRE security folders (e.g., C:\Program Files\Java\jdk1.8.0_51\jre\lib\security and C:\Program Files\Java\jre1.8.0_51\lib\security for Java 1.8u51), replacing the existing limited strength policies.
You will need to restart any open Java files. That’s it! You will not be able to use “unlimited strength” cryptography in Java.