iaik.utils

Class CriticalObject

java.lang.Object

iaik.utils.CriticalObject

All Implemented Interfaces:

java.io.Serializable

public class CriticalObject
extends java.lang.Object
implements java.io.Serializable

This class can be used to secure critical objects in memory. The object to be secured must implement the Serializable interface.

Version:

File Revision 24

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	cipher The cipher for encrypting the serialized object.
static java.security.SecureRandom	random The random number generator for generating a new key.

Constructor Summary

Constructors

Constructor and Description
CriticalObject(java.lang.Object o) Creates a new CriticalObject with a new random key.
CriticalObject(java.lang.Object o, boolean destroyCriticalData) Creates a new CriticalObject with a new random key.
CriticalObject(java.lang.Object o, byte[] key) Creates a new CriticalObject from a given key.
CriticalObject(java.lang.Object o, byte[] key, boolean destroyCriticalData) Creates a new CriticalObject from a given key.

Method Summary

Methods

Modifier and Type	Method and Description
protected static java.lang.Object	deserialize(byte[] object) Deserializes a given object from a byte array.
static void	destroy(boolean[] a)
static void	destroy(byte[] a)
static void	destroy(double[] a)
static void	destroy(java.util.Enumeration a)
static void	destroy(float[] a)
static void	destroy(java.util.Hashtable a)
static void	destroy(int[] a)
static void	destroy(long[] a)
static void	destroy(java.lang.Object a)
static void	destroy(java.lang.Object[] a)
static void	destroy(java.util.Vector a)
java.lang.Object	getObject() Returns the proteced CriticalObject.
java.lang.Object	getObject(byte[] key) Returns the proteced CriticalObject encrypted with a given key.
protected static byte[]	serialize(java.lang.Object obj) Serializes a given object to a byte array.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

cipher

public static final java.lang.String cipher

The cipher for encrypting the serialized object. Default value is: "3DES/CBC/PKCS5Padding"

See Also:

Constant Field Values

random

public static final java.security.SecureRandom random

The random number generator for generating a new key.

Constructor Detail

CriticalObject

public CriticalObject(java.lang.Object o)
               throws java.io.IOException

Creates a new CriticalObject with a new random key. The length of the key is 20 bytes and the key is stored in an byte array within this class.

This method first serializes the object and then encrypts it. If the object has an accessable method "destroyCriticalData" this method is invoked after the encryption.

Parameters:

o - the critical object to protect

Throws:

java.io.IOException - if an error during the serializiation occurs

CriticalObject

public CriticalObject(java.lang.Object o,
              boolean destroyCriticalData)
               throws java.io.IOException

Creates a new CriticalObject with a new random key. The length of the key is 20 bytes and the key is stored in an byte array within this class.

This method first serializes the object and then encrypts it. If the object has an accessable method "destroyCriticalData" this method is invoked after the encryption.

Parameters:

o - the critical object to protect

destroyCriticalData - true if the method destroyCriticalData shall be invoked

Throws:

java.io.IOException - if an error during the serializiation occurs

CriticalObject

public CriticalObject(java.lang.Object o,
              byte[] key)
               throws java.io.IOException

Creates a new CriticalObject from a given key. The same key must be used for retrieving the object.

This method first serializes the object and then encrypts it. If the object has an accessable method "destroyCriticalData" this method is invoked after the encryption.

Parameters:

o - the critical object to protect

key - the key for generating an iv and a secret key

Throws:

java.io.IOException - if an error during the serializiation occurs

CriticalObject

public CriticalObject(java.lang.Object o,
              byte[] key,
              boolean destroyCriticalData)
               throws java.io.IOException

Creates a new CriticalObject from a given key. The same key must be used for retrieving the object.

This method first serializes the object and then encrypts it. If the object has an accessable method "destroyCriticalData" this method is invoked after the encryption.

Parameters:

o - the critical object to protect

key - the key for generating an iv and a secret key

destroyCriticalData - true if the method destroyCriticalData shall be invoked

Throws:

java.io.IOException - if an error during the serializiation occurs

Method Detail

getObject

public java.lang.Object getObject(byte[] key)
                           throws java.io.IOException

Returns the proteced CriticalObject encrypted with a given key.

Parameters:

key - the key used when generating the CriticalObject

Returns:

the protected object

Throws:

java.io.IOException

getObject

public java.lang.Object getObject()
                           throws java.io.IOException

Returns the proteced CriticalObject. This method uses the stored random key to decrypt the object.

Returns:

the protected object

Throws:

java.io.IOException

deserialize

protected static java.lang.Object deserialize(byte[] object)
                                       throws java.io.IOException

Deserializes a given object from a byte array.

Parameters:

object - the object as a byte array

Returns:

the deserialized object

Throws:

java.io.IOException

serialize

protected static byte[] serialize(java.lang.Object obj)
                           throws java.io.IOException

Serializes a given object to a byte array.

Parameters:

obj - the object to serialize

Returns:

the serialized object as byte array

Throws:

java.io.IOException

destroy

public static void destroy(byte[] a)

destroy

public static void destroy(int[] a)

destroy

public static void destroy(long[] a)

destroy

public static void destroy(float[] a)

destroy

public static void destroy(double[] a)

destroy

public static void destroy(boolean[] a)

destroy

public static void destroy(java.lang.Object[] a)

destroy

public static void destroy(java.lang.Object a)

destroy

public static void destroy(java.util.Vector a)

destroy

public static void destroy(java.util.Hashtable a)

destroy

public static void destroy(java.util.Enumeration a)