A User Centric Security Model for Tamper-Resistant Devices

A.8 Markantonakis-Mayes (MM) Protocol
the traditional TLS protocol.
SCP81-1. SP → SC : SP i ||N SP ||SID||P SP ||CertE SP ←T T P
The rst two messages are referred as the protocol handshake. The SP initiates the
protocol and generates a random number (N SP ), append it with the SP identity. The SP
also includes the session identier (SID) and preferred parameters for the TLS in P SP .
The SID is an arbitrary byte sequence chosen by the SP.
SCP81-2. SC → SP : N SC ||SID||P SC ||CertE SC←T T P
In response, the SC sends a random number and P SC . On receipt of this message, the SP
generates a premaster-secret that can be Die-Hellman exponentials. For the description
of the TLS in this thesis, we use the Die-Hellman scheme as the session key generation
in the TLS.
SCP81-3. SP : S SP = Sign SP (SP i ||g SP ||N ′ SP ||N SC)
SP : E SP = zV SP (g SP ||N ′ SP )
SP → SC : E SP ||S SP ||CertS SP
The SP generates a Die-Hellman exponential, a new random number and append it with
a signed message (S SP ). The S SP is used to authenticate the SP to the SC. The SP also
includes the signature key and encryption key certicates, which are veried by the SC on
receipt of message three.
SCP81-4. SC : S SC = Sign SC (g SC ||N ′ SC ||N ′ SP )
SC : E SC = zV SC (g SC ||N ′ SC )
SC → SP : E SC ||S SC ||CertS SC
The SC will perform same operations as the SP has performed in message three. The
signed message from the SC authenticates it to the SP. After message four, both SC
and SP can generate the master-secret (K SC−SP ) from the generated random numbers
and premaster-secrets by using a pseudorandom number generator (P RF). Subsequently,
session keys and MAC key are generated from the master-secret. Both SC and SP use
separate keys of encrypting data between them; meaning SC uses one key to send a message
to SP, where in response SP uses a dierent key.
Before proceeding with communications between the SC and SP for the purpose the TLS
session was establish, both entities will rst send nished message. The nished message
conrms all the details of agreed during the handshake and verify whether they are being
changed.
A.8 Markantonakis-Mayes (MM) Protocol
The MM protocol is based on the GlobalPlatform SCP10 [30]. Before we describe the
protocol, we introduces few new notations
237