Updated comments.  A tester using Oracle's JDK couldn't use AES-256 (OpenJdk is fine).