Encrypting the Java Serialized Object

The cryptographic classes incorporated into Sun's releases of the Java Virtual Machine are often used in e-commerce and other applications. A mechanism exists for signing a Java Class. However, little notice has been given to the possibility of encrypting the Java object instance itself, either for transmission or to maintain state during storage. In this article, we discuss the applicable techniques and benefits of using DES, TripleDES, Blowfish and AES symmetric secret-key algorithms to encrypt a Java serializeable object using technology available through public means.

• Type: Journal
• Year: 2006
• Where: JOT
• Authors: Alan Ward
• Keywords: Cryptographic Classes, Java, Java Virtual Machine, JOT 2006