| Attributes |
| Name | Required | Request-time | Type | Description |
| value | false | true | java.lang.StringBuffer | Optional attribute, the string to encrypt or decrypt. The body of the tag will be taken if omitted |
| var | false | false | java.lang.String | Optional attribute, variable to store the encrypted string. The string will be printed if omitted |
| scope | false | false | java.lang.String | Scope of the 'var' attribute. Can be 'page', 'session', 'request' or 'application'. Default is 'page' |
| algorithm | false | true | java.lang.String | The key algorithm. Default is 'AES' |
| seed | false | true | java.lang.String | Optional seed for SecureRandom |
| strength | false | true | java.lang.String | The key size in bits (integer value). Values depends on the used algorithm (see next paragraph). Default is 256 (for AES) |
| mode | false | true | java.lang.String | Encryption mode. Default is 'CBC' |
| padding | false | true | java.lang.String | Padding scheme. Default is 'PKCS7Padding' |
| recpemfile | false | true | java.lang.String | The receiver's certificate stored in a PEM file |
| recpemstring | false | true | java.lang.String | The receiver's certificate as a PEM formatted string |
| file | false | true | java.lang.String | Encrypts a file instead of a string |
| newfile | false | true | java.lang.String | File(name) to store the encrypted data |