Java Language
- Getting started with Java Language
- Top 10 Java Errors with Solutions
- Awesome Book
- Awesome Community
- Awesome Course
- Awesome Tutorial
- Awesome YouTube
- 2D Graphics in Java
- Alternative Collections
- Annotations
- Apache Commons Lang
- AppDynamics and TIBCO BusinessWorks Instrumentation for Easy Integration
- Applets
- Arrays
- Asserting
- Atomic Types
- Audio
- Autoboxing
- Basic Control Structures
- Benchmarks
- BigDecimal
- BigInteger
- Bit Manipulation
- BufferedWriter
- ByteBuffer
- Bytecode Modification
- C++ Comparison
- Calendar and its Subclasses
- Character encoding
- Choosing Collections
- Class - Java Reflection
- Classes and Objects
- Classloaders
- Collection Factory Methods
- Collections
- Command line Argument Processing
- Common Java Pitfalls
- Comparable and Comparator
- CompletableFuture
- Concurrent Collections
- Concurrent Programming (Threads)
- Console I/O
- Constructors
- Converting to and from Strings
- Creating Images Programmatically
- Currency and Money
- Date Class
- Dates and Time (java.time.*)
- Default Methods
- Dequeue Interface
- Disassembling and Decompiling
- Documenting Java Code
- Dynamic Method Dispatch
- Encapsulation
- Enum Map
- Enum starting with number
- Enums
- EnumSet class
- Exceptions and exception handling
- Executor, ExecutorService and Thread pools
- Expressions
- File I/O
- FileUpload to AWS
- Fluent Interface
- FTP (File Transfer Protocol)
- Functional Interfaces
- Generating Java Code
- Generics
- Getters and Setters
- Hashtable
- HttpURLConnection
- Immutable Class
- Immutable Objects
- Inheritance
- InputStreams and OutputStreams
- Installing Java (Standard Edition)
- Interfaces
- Iterator and Iterable
- Java Agents
- Java Compiler - 'javac'
- Java deployment
- Java Editions, Versions, Releases and Distributions
- Java Floating Point Operations
- Java Memory Management
- Java Memory Model
- Java Native Access
- Java Native Interface
- Java Performance Tuning
- Java Pitfalls - Exception usage
- Java Pitfalls - Language syntax
- Java Pitfalls - Nulls and NullPointerException
- Java Pitfalls - Performance Issues
- Java Pitfalls - Threads and Concurrency
- Java plugin system implementations
- Java Print Service
- Java SE 7 Features
- Java SE 8 Features
- Java Sockets
- Java Virtual Machine (JVM)
- JavaBean
- JAXB
- JAX-WS
- JMX
- JNDI
- JShell
- JSON in Java
- Just in Time (JIT) compiler
- JVM Flags
- JVM Tool Interface
- Lambda Expressions
- LinkedHashMap
- List vs SET
- Lists
- Literals
- Local Inner Class
- Localization and Internationalization
- LocalTime
- log4j / log4j2
- Logging (java.util.logging)
- Maps
- Modules
- Multi-Release JAR Files
- Nashorn JavaScript engine
- Nested and Inner Classes
- Networking
- New File I/O
- NIO - Networking
- Non-Access Modifiers
- NumberFormat
- Object Class Methods and Constructor
- Object Cloning
- Object References
- Operators
- Optional
- Oracle Official Code Standard
- Packages
- Parallel programming with Fork/Join framework
- Polymorphism
- Preferences
- Primitive Data Types
- Process
- Properties Class
- Queues and Deques
- Random Number Generation
- Readers and Writers
- Recursion
- Reference Data Types
- Reference Types
- Reflection API
- Regular Expressions
- Remote Method Invocation (RMI)
- Resources (on classpath)
- RSA Encryption
- Runtime Commands
- Scanner
- Secure objects
- Security & Cryptography
- Security & Cryptography
- Common Java vulnerabilities
- Hashing and Validation
- Keys and Key Management
- Networking Concerns
- Randomness and You
- The JCE
- SecurityManager
- Serialization
- ServiceLoader
- Sets
- Singletons
- Sockets
- SortedMap
- Splitting a string into fixed length parts
- Stack-Walking API
- Streams
- String Tokenizer
- StringBuffer
- StringBuilder
- Strings
- sun.misc.Unsafe
- super keyword
- The Classpath
- The Java Command - 'java' and 'javaw'
- The java.util.Objects Class
- ThreadLocal
- TreeMap and TreeSet
- Type Conversion
- Unit Testing
- Using Other Scripting Languages in Java
- Using the static keyword
- Using ThreadPoolExecutor in MultiThreaded applications.
- Varargs (Variable Argument)
- Visibility (controlling access to members of a class)
- WeakHashMap
- XJC
- XML Parsing using the JAXP APIs
- XML XPath Evaluation
- XOM - XML Object Model
Java Language Security & Cryptography Keys and Key Management
Example
While the JCE secures cryptographic operations and key generation, it is up to the developer to actually manage their keys. More information needs to be provided here.
One commonly-accepted best practice for handling keys at runtime is to store them only as byte arrays, and never as strings. This is because Java strings are immutable, and cannot be manually "cleared" or "zeroed out" in memory; while a reference to a string can be removed, the exact string will remain in memory until its segment of memory is garbage-collected and reused. An attacker would have a large window in which they could dump the program's memory and easily find the key. Contrarily, byte arrays are mutable, and can have their contents overwritten in place; it is a good idea to 'zero-out' your keys as soon as you no longer need them.
