Object Serialization Specification

Contents

System Architecture

Overview

Writing to an Object Stream

Reading from an Object Stream

Object Streams as Containers

The ObjectOutput Interface

The ObjectInput Interface

The Serializable Interface

The Externalizable Interface

Protecting Sensitive Information

Object Output Interfaces

The ObjectOutputStream Class

The writeObject Method

The writeExternal Method

Object Input Interfaces

The ObjectInputStream Class

The ObjectInputValidation Interface

The readObject Method

The readExternal Method

Class Descriptors

Inspecting Serializable Classes

Stream Unique Identifiers

Versioning of Serializable Objects

Overview

Goals

Assumptions

Who's Responsible for Versioning of Streams

Compatible Java Type Evolution

Type Changes Affecting Serialization

Object Serialization Stream Protocol

Overview

Stream Elements

Grammar for the Stream Format

Example

Security in Object Serialization

Overview

Design Goals

Using transient to Protect Important System Resources

Writing Class-Specific Serializing Methods

Encrypting a Bytestream

Exceptions In Object Serialization