The AES cookie encryption key - how many bits?

[Rod Widdowson]

> What's the current bit size of the AES key generated for encrypting the
cookie?

By default 128 bits (http://tinyurl.com/zo6vnfw) line 288.

If you want to hack the build ant script you can change it via the
'keySize="256"' attribute in the <keystorestrategy> stanza

I cannot authoritatively answer the rest of you questions...  But ISRT there
was an element of guestimation involved, and I'll observe that the
(relatively) short life has been very useful is flushing errors in installs
as well as in the install scripts.

/R