validateHMAC(storedHmacResult, b64in);
// After reading it once to validate, reset it for the actual read (which includes the GZip decompression).
b64in.reset();
BufferedInputStream buffered = new BufferedInputStream(new GZIPInputStream(b64in));
return new ObjectInputStream(buffered);
} catch (IOException ex)