I just installed the policy files into my JVM and then configured bouncy castle. I was then able to use the encrypt and decrypt tools provided with jasypt to encryp and then decrypt a string using PBEWITHSHAAND256BITAES-CBC-BC. I followed these pages for adding the policy extensions: http://suhothayan.blogspot.co.uk/2012/05/how-to-install-java-cryptography.html https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec1698523.html Bouncy castle I installed statically...
For what it's worth I found that using AES does work with Bouncy Castle. The bug only affects the Java8 built-in JCE. But naturally not everyone wants to use Bouncy Castle.
I pointed my project at the latest snapshot and it looks like the fix from Mark Williams above isn't included right now. Is there a plan for when this will be included?