Page History

In Java, byte arrays are often used to transmit raw binary data as well as character encoded data. Attempts to read raw binary data as if it were character encoded data often fail, because some of the bytes fall outside the default or specified encoding scheme and hence for that reason fail to denote valid characters. For example, converting a cryptographic key containing non-representable bytes to character encoded data for transmission may result in an error.

...

This compliant solution first produces a String representation of the BigInteger object, then converts the String object to a byte array. This process is reversed on input. Because the textual representation in the String object was generated by the BigInteger class, it contains valid characters.

...

FIO11-EX0: Untrusted binary data that is expected to be a valid string may be read and converted to a string. Doing so safely How to perform this operation securely is explained in IDS17-J. Use compatible encodings on both sides of file or network IO. Also see rule IDS13-J. Do not assume every character in a string is the same size.

...

...