Java in a Nutshell, 5th Edition [Electronic resources]

This class applies a digital signature to any serializable Java object. Create a SignedObject by specifying the object to be signed, the PrivateKey to use for the signature, and the Signature object to create the signature. The SignedObject( ) constructor serializes the specified object into an array of bytes and creates a digital signature for those bytes.

After creation, a SignedObject is itself typically serialized for storage or transmission to another Java thread or process. Once the SignedObject is reconstituted, the integrity of the object it contains can be verified by calling verify( ) and supplying the PublicKey of the signer and a Signature that performs the verification. Whether or not verification is performed or is successful, getObject( ) can be called to deserialize and return the wrapped object.

public final class

SignedObject implements Serializable { // Public Constructors public

SignedObject (Serializable

object , PrivateKey

signingKey , Signature

signingEngine ) throws java.io.IOException, InvalidKeyException, SignatureException; // Public Instance Methods public String

getAlgorithm ( ); public Object

getObject ( ) throws java.io.IOException, ClassNotFoundException; public byte[ ]

getSignature ( ); public boolean

verify (PublicKey

verificationKey , Signature

verificationEngine ) throws InvalidKeyException, SignatureException; }