void verify(){
  byte[] d=digest.digest();
  if (!MessageDigest.isEqual(d,Base64.decode(hash))) {
    throw invalidDigest(JarFile.MANIFEST_NAME,name,jarName);
  }
  verifiedEntries.put(name,certificates);
}

void verify ( ) { byte [ ] d = digest . digest ( ) ; if ( ! MessageDigest . isEqual ( d , Base64 . decode ( hash ) ) ) { throw invalidDigest ( JarFile . MANIFEST_NAME , name , jarName ) ; } verifiedEntries . put ( name , certificates ) ; }
verifies that the digests stored in the manifest match the decrypted digests from the . sf file . this indicates the validity of the signing , not the integrity of the file , as it ' s digest must be calculated and verified when its contents are read .
