I am not saying you should cache the object that is being generated, because as you said, that doesn't make sense because one may want different IVs and Keys. getCipher() should create a new instance. I am just saying that the comment does not make sense.