java - SealedObject vs Stream Cypher, pros and cons -

I have 2 ways to encrypt and decrypt Java objects:

a) SealedObject Using and saving and using this load FileOutputStream and FileInputStream

b) with the normal to the serial object To save CipherOutputStream and CipherInputStream

Is there a difference between performance and / or security between these two options?

Looking at any serializable object, one can produce its serial content in a serial format (i.e., a "deep copy"), containing a sealedObject key object, and encrypts, such as DES Using a cryptographic algorithm, up To protect the privacy. Encrypted content can be decrypted later (with the same algorithm using the correct decryption key) and D-serial, the original object yield.

Note that the cipher object is completely The right algorithm should start with the key, the padding scheme, etc., before being applied to a seal object.

CipherInputStream:

An InputStream and Made up of a cipher, so that reads () methods There should be data read from incoming input stream, but in addition the cipher processed cipher should be started completely before being used by a CipherInputStream.For example, if the cipher begins for decryption, CipherInputStream can read into data and decrypted them to try decrypted data before returning to this class, strictly adheres to the meaning science, b Sucker failure words, its ancestor classes java.io.FilterInputStream and java.io.InputStream is definitely specify ways of sections of his ancestors in this category, and has been able to override all of them. Apart from this, there are exceptions in this category, which are not thrown by their ancestor classes. In particular, the Vagal method leaves, and the available method only counts data that has been processed by the cipher explained. This program is important for programmers using this program, which do not use methods defined or overridden in this category. . New method or manufacturer that is later added to one of the superclasses) is not likely to be considered because of the design and effectiveness of those methods, the security effect in relation to CipherInputStream is

CipherOutPutStream:

CipherOutputStream is made of an outputstream and a cipher, so that writing () methods first process the data before writing the data output stream. The cipher should be fully started before being used by a CipherOutputStream. For example, if the cipher does not begin for encryption, CipherOutputStream adheres to the encrypted data.This class adheres before writing out strictly The words will, in particular, try the meaning semantics, java.io.OutputStream and java.io.FilterOutputStream of its ancestor classes in this class, in the sections of its ancestors As such, those methods have been specified, and all of them have been overridden. Apart from this, there are exceptions in this category, which are not thrown by their ancestor classes. It is important for programmers using this class that it is not defined or overridden in this category (such as a new method or manufacturer who has been added later for any one of the superclasses) because those methods The design and implementation of the seafrower is not likely to be considered a security effect in relation to the stream.

You should have read the Oracle documentation for this.