A User Centric Security Model for Tamper-Resistant Devices

C.2 Online Attestation Mechanism
150 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
151 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
152 syCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
153 f a l s e ) ;
154 myPrngHmac = new PrngSHA256 ( ) ;
155 pkCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD, f a l s e ) ;
156 phSCKeyPair . genKeyPair ( ) ;
157 SHA128 = MessageDigest . g e t I n s t a n c e ( MessageDigest .ALG_SHA_128,
158 f a l s e ) ;
159 byte [ ] r e s p o n s e B u f f e r = null ;
160 }
161 public s t a t i c void i n s t a l l ( byte bArray [ ] , short bOffset , byte bLength )
162 throws ISOException {
163 new S e l f t e s t O f f l i n e ( ) . r e g i s t e r ( ) ;
164 }
165
166 public void p r o c e s s (APDU apdu )throws ISOException {
167 byte [ ] apduBuffer = apdu . g e t B u f f e r ( ) ;
168 i f ( s e l e c t i n g A p p l e t ( ) ) {
169 this . i n i t i a l i s e ( ) ;
170 return ;
171 }
172 i f ( apduBuffer [ ISO7816 .OFFSET_CLA] != CLA) {
173 ISOException . throwIt (SW_CLASSNOTSUPPORTED) ;
174 }
175 r e c e i v i n g B u f f e r = null ;
176 b y t e s L e f t = 0 ;
177 b y t e s L e f t = apdu . getIncomingLength ( ) ;
178 r e c e i v i n g B u f f e r = JCSystem . makeTransientByteArray ( bytesLeft ,
179 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
180 readCount = ( short ) ( ( short ) apdu . setIncomingAndReceive ( ) ) ;
181 rCount = 0 ;
182 i f ( b y t e s L e f t > 0) {
183 rCount = U t i l . arrayCopyNonAtomic ( apduBuffer ,
184 ISO7816 .OFFSET_EXT_CDATA, r e c e i v i n g B u f f e r , rCount , readCount ) ;
185 b y t e s L e f t −= readCount ;
186 }
187 while ( b y t e s L e f t > 0) {
188 try {
189 readCount = apdu . r e c e i v e B y t e s ( ( short ) 0) ;
190 rCount = U t i l . arrayCopyNonAtomic ( apduBuffer , ( short ) 0 ,
191 r e c e i v i n g B u f f e r , rCount , readCount ) ;
192 b y t e s L e f t −= readCount ;
193 } catch ( Exception aE) {
194 ISOException . throwIt ( ( short ) 0x7AAA) ;
195 }
196 }
197 r e s p o n s e B u f f e r = JCSystem . makeTransientByteArray ( ( short ) 256 ,
198 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
199 s e l f t e s t P r o c e s s ( ) ;
200 JCSystem . r e q u e s t O b j e c t D e l e t i o n ( ) ;
266