A User Centric Security Model for Tamper-Resistant Devices

C.1 Oine Attestation Mechanism
143 S i g n a t u r e phSign ;
144 PrngSHA256 myPrngHMAC;
145
146 private S e l f t e s t O f f l i n e ( ) {
147 phSign = S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_RSA_SHA_PKCS1, f a l s e ) ;
148 phSCKeyPair = new KeyPair ( KeyPair .ALG_RSA, KeyBuilder .LENGTH_RSA_512) ;
149 cipherKey = (AESKey) KeyBuilder . buildKey
150 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
151 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
152 syCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
153 f a l s e ) ;
154 myPrngHmac = new PrngSHA256 ( ) ;
155 pkCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD, f a l s e ) ;
156 phSCKeyPair . genKeyPair ( ) ;
157 SHA256 = MessageDigest . g e t I n s t a n c e ( MessageDigest .ALG_SHA_256,
158 f a l s e ) ;
159 }
160 public s t a t i c void i n s t a l l ( byte bArray [ ] , short bOffset , byte bLength )
161 throws ISOException {
162 new S e l f t e s t O f f l i n e ( ) . r e g i s t e r ( ) ;
163 }
164
165 public void p r o c e s s (APDU apdu )throws ISOException {
166 byte [ ] apduBuffer = apdu . g e t B u f f e r ( ) ;
167 i f ( s e l e c t i n g A p p l e t ( ) ) {
168 this . i n i t i a l i s e ( ) ;
169 return ;
170 }
171 i f ( apduBuffer [ ISO7816 .OFFSET_CLA] != CLA) {
172 ISOException . throwIt (SW_CLASSNOTSUPPORTED) ;
173 }
174 i f ( apduBuffer [ ISO7816 .OFFSET_INS] == s e l f t e s t ) {
175 r e c e i v i n g B u f f e r = JCSystem . makeTransientByteArray ( ( short ) 84 ,
176 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
177 generateResponse ( ( short ) 1) ;
178 apdu . setOutgoing ( ) ;
179 apdu . setOutgoingLength ( ( short ) copyPointer ) ;
180 apdu . sendBytesLong ( r e c e i v i n g B u f f e r , ( short ) 0 , ( short ) copyPointer ) ;
181 return ;
182 }
183 JCSystem . r e q u e s t O b j e c t D e l e t i o n ( ) ;
184 }
185
186 void s e l f t e s t P r o c e s s ( ) {
187 byte [ ] memoryWordRead = new byte [ 4 ] ;
188 byte rcount = ( byte ) 0x00 ;
189 while ( rcount < MemoryContents . l e n g t h ) {
190 U t i l . arrayCopyNonAtomic ( MemoryContents ,
191 rcount , memoryWordRead , ( short ) 0 , memoryWordRead . l e n g t h ) ;
192 generateSeed (memoryWordRead , tempSeed ) ;
193 rcount += ( byte ) ( rcount+(short ) 4) ;
256