Package java.security

Provides the classes and interfaces for the security framework.

See: Description

Interface Summary

Interface	Description
[source] Certificate	Deprecated A new certificate handling package is created in the Java platform.
[source] DomainCombiner	A DomainCombiner provides a means to dynamically update the ProtectionDomains associated with the current AccessControlContext.
[source] Guard	This interface represents a guard, which is an object that is used to protect access to another object.
[source] Key	The Key interface is the top-level interface for all keys.
[source] KeyStore.Entry	A marker interface for KeyStore entry types.
[source] KeyStore.LoadStoreParameter	A marker interface for KeyStore load and store parameters.
[source] KeyStore.ProtectionParameter	A marker interface for keystore protection parameters.
[source] Policy.Parameters	This represents a marker interface for Policy parameters.
[source] Principal	This interface represents the abstract notion of a principal, which can be used to represent any entity, such as an individual, a corporation, and a login id.
[source] PrivateKey	A private key.
[source] PrivilegedAction<T>	A computation to be performed with privileges enabled.
[source] PrivilegedExceptionAction<T>	A computation to be performed with privileges enabled, that throws one or more checked exceptions.
[source] PublicKey	A public key.

Class Summary

Class	Description
[source] AccessControlContext	An AccessControlContext is used to make system resource access decisions based on the context it encapsulates.
[source] AccessController	The AccessController class is used for access control operations and decisions.
[source] AlgorithmParameterGenerator	The AlgorithmParameterGenerator class is used to generate a set of parameters to be used with a certain algorithm.
[source] AlgorithmParameterGeneratorSpi	This class defines the Service Provider Interface (SPI) for the AlgorithmParameterGenerator class, which is used to generate a set of parameters to be used with a certain algorithm.
[source] AlgorithmParameters	This class is used as an opaque representation of cryptographic parameters.
[source] AlgorithmParametersSpi	This class defines the Service Provider Interface (SPI) for the AlgorithmParameters class, which is used to manage algorithm parameters.
[source] AllPermission	The AllPermission is a permission that implies all other permissions.
[source] AllPermissionCollection	A AllPermissionCollection stores a collection of AllPermission permissions.
[source] AuthProvider	This class defines login and logout methods for a provider.
[source] BasicPermission	The BasicPermission class extends the Permission class, and can be used as the base class for permissions that want to follow the same naming convention as BasicPermission.
[source] BasicPermissionCollection	A BasicPermissionCollection stores a collection of BasicPermission permissions.
[source] CodeSigner	This class encapsulates information about a code signer.
[source] CodeSource	This class extends the concept of a codebase to encapsulate not only the location (URL) but also the certificate chains that were used to verify signed code originating from that location.
[source] DigestInputStream	A transparent stream that updates the associated message digest using the bits going through the stream.
[source] DigestOutputStream	A transparent stream that updates the associated message digest using the bits going through the stream.
[source] GuardedObject	A GuardedObject is an object that is used to protect access to another object.
[source] Identity	Deprecated This class is no longer used.
[source] IdentityScope	Deprecated This class is no longer used.
[source] KeyFactory	Key factories are used to convert keys (opaque cryptographic keys of type Key) into key specifications (transparent representations of the underlying key material), and vice versa.
[source] KeyFactorySpi	This class defines the Service Provider Interface (SPI) for the KeyFactory class.
[source] KeyPair	This class is a simple holder for a key pair (a public key and a private key).
[source] KeyPairGenerator	The KeyPairGenerator class is used to generate pairs of public and private keys.
[source] KeyPairGeneratorSpi	This class defines the Service Provider Interface (SPI) for the KeyPairGenerator class, which is used to generate pairs of public and private keys.
[source] KeyRep	Standardized representation for serialized Key objects.
[source] KeyStore	This class represents a storage facility for cryptographic keys and certificates.
[source] KeyStore.Builder	A description of a to-be-instantiated KeyStore object.
[source] KeyStore.CallbackHandlerProtection	A ProtectionParameter encapsulating a CallbackHandler.
[source] KeyStore.PasswordProtection	A password-based implementation of ProtectionParameter.
[source] KeyStore.PrivateKeyEntry	A KeyStore entry that holds a PrivateKey and corresponding certificate chain.
[source] KeyStore.SecretKeyEntry	A KeyStore entry that holds a SecretKey.
[source] KeyStore.SimpleLoadStoreParameter
[source] KeyStore.TrustedCertificateEntry	A KeyStore entry that holds a trusted Certificate.
[source] KeyStoreSpi	This class defines the Service Provider Interface (SPI) for the KeyStore class.
[source] MessageDigest	This MessageDigest class provides applications the functionality of a message digest algorithm, such as MD5 or SHA.
[source] MessageDigest.Delegate
[source] MessageDigestSpi	This class defines the Service Provider Interface (SPI) for the MessageDigest class, which provides the functionality of a message digest algorithm, such as MD5 or SHA.
[source] Permission	Abstract class for representing access to a system resource.
[source] PermissionCollection	Abstract class representing a collection of Permission objects.
[source] Permissions	This class represents a heterogeneous collection of Permissions.
[source] PermissionsEnumerator
[source] PermissionsHash	A PermissionsHash stores a homogeneous set of permissions in a hashtable.
[source] Policy	A Policy object is responsible for determining whether code executing in the Java runtime environment has permission to perform a security-sensitive operation.
[source] PolicySpi	This class defines the Service Provider Interface (SPI) for the Policy class.
[source] ProtectionDomain	This ProtectionDomain class encapsulates the characteristics of a domain, which encloses a set of classes whose instances are granted a set of permissions when being executed on behalf of a given set of Principals.
[source] Provider	This class represents a "provider" for the Java Security API, where a provider implements some or all parts of Java Security.
[source] Provider.Service	The description of a security service.
[source] SecureClassLoader	This class extends ClassLoader with additional support for defining classes with an associated code source and permissions which are retrieved by the system policy by default.
[source] SecureRandom	This class provides a cryptographically strong random number generator (RNG).
[source] SecureRandomSpi	This class defines the Service Provider Interface (SPI) for the SecureRandom class.
[source] Security	This class centralizes all security properties and common security methods.
[source] SecurityPermission	This class is for security permissions.
[source] Signature	This Signature class is used to provide applications the functionality of a digital signature algorithm.
[source] SignatureSpi	This class defines the Service Provider Interface (SPI) for the Signature class, which is used to provide the functionality of a digital signature algorithm.
[source] SignedObject	SignedObject is a class for the purpose of creating authentic runtime objects whose integrity cannot be compromised without being detected.
[source] Signer	Deprecated This class is no longer used.
[source] Timestamp	This class encapsulates information about a signed timestamp.
[source] UnresolvedPermission	The UnresolvedPermission class is used to hold Permissions that were "unresolved" when the Policy was initialized.
[source] UnresolvedPermissionCollection	A UnresolvedPermissionCollection stores a collection of UnresolvedPermission permissions.
[source] URIParameter	A parameter that contains a URI pointing to data intended for a PolicySpi or ConfigurationSpi implementation.

Enum Summary

Enum	Description
[source] KeyRep.Type	Key type.

Exception Summary

Exception	Description
[source] AccessControlException	This exception is thrown by the AccessController to indicate that a requested access (to a critical system resource such as the file system or the network) is denied.
[source] DigestException	This is the generic Message Digest exception.
[source] GeneralSecurityException	The GeneralSecurityException class is a generic security exception class that provides type safety for all the security-related exception classes that extend from it.
[source] InvalidAlgorithmParameterException	This is the exception for invalid or inappropriate algorithm parameters.
[source] InvalidKeyException	This is the exception for invalid Keys (invalid encoding, wrong length, uninitialized, etc).
[source] InvalidParameterException	This exception, designed for use by the JCA/JCE engine classes, is thrown when an invalid parameter is passed to a method.
[source] KeyException	This is the basic key exception.
[source] KeyManagementException	This is the general key management exception for all operations dealing with key management.
[source] KeyStoreException	This is the generic KeyStore exception.
[source] NoSuchAlgorithmException	This exception is thrown when a particular cryptographic algorithm is requested but is not available in the environment.
[source] NoSuchProviderException	This exception is thrown when a particular security provider is requested but is not available in the environment.
[source] PrivilegedActionException	This exception is thrown by doPrivileged(PrivilegedExceptionAction) and doPrivileged(PrivilegedExceptionAction, AccessControlContext context) to indicate that the action being performed threw a checked exception.
[source] ProviderException	A runtime exception for Provider exceptions (such as misconfiguration errors or unrecoverable internal errors), which may be subclassed by Providers to throw specialized, provider-specific runtime errors.
[source] SignatureException	This is the generic Signature exception.
[source] UnrecoverableEntryException	This exception is thrown if an entry in the keystore cannot be recovered.
[source] UnrecoverableKeyException	This exception is thrown if a key in the keystore cannot be recovered.

Package java.security Description

Provides the classes and interfaces for the security framework. This includes classes that implement an easily configurable, fine-grained access control security architecture. This package also supports the generation and storage of cryptographic public key pairs, as well as a number of exportable cryptographic operations including those for message digest and signature generation. Finally, this package provides classes that support signed/guarded objects and secure random number generation. Many of the classes provided in this package (the cryptographic and secure random number generator classes in particular) are provider-based. The class itself defines a programming interface to which applications may write. The implementations themselves may then be written by independent third-party vendors and plugged in seamlessly as needed. Therefore application developers may take advantage of any number of provider-based implementations without having to add or rewrite code.

Package Specification

• Cryptography Architecture
• PKCS8: Private-Key Information Standard, Version 1.2, November 1993

Related Documentation

For further documentation, please see:

• Security Architecture
• How to Implement a Provider for the Java Cryptography Architecture
• Default Policy Implementation and Policy File Syntax
• Policy Permissions
• Security Tools Summary
• keytool ( for Solaris/Linux) ( for Windows)
• jarsigner ( for Solaris/Linux) ( for Windows)

Since:

JDK1.1