See: https://github.com/aws/aws-encryption-sdk-java/blob/master/src/main/java/com/amazonaws/encryptionsdk/internal/FrameDecryptionHandler.java#L153 It appears that if a message has MAX_FRAME_NUMBER the decrypt will fail.