A User Centric Security Model for Tamper-Resistant Devices

C.2 Online Attestation Mechanism
118 ( byte ) 0x00 , ( byte ) 0x00 , ( byte ) 0x00 , ( byte ) 0x00 , ( byte ) 0x00 ,
119 ( byte ) 0x00 , ( byte ) 0x00 , ( byte ) 0x00 , ( byte ) 0x00 , ( byte ) 0x00 ,
120 ( byte ) 0x00 } ;
121 private byte [ ] SignedDataTag = {
122 ( byte ) 0x1F , ( byte ) 0x5F , ( byte ) 0x5D , ( byte ) 0x02 } ;
123 short copyPointer = ( short ) 0 ;
124 f i n a l s t a t i c byte CLA = ( byte ) 0xB0 ;
125 f i n a l s t a t i c byte S t a r t P r o t o c o l = ( byte ) 0x40 ;
126 f i n a l s t a t i c byte s e l f t e s t = ( byte ) 0 x f f ;
127 f i n a l s t a t i c short SW_CLASSNOTSUPPORTED = 0 x6320 ;
128 f i n a l s t a t i c short SW_ERROR_INS = 0 x6300 ;
129 RandomData randomDataGen ;
130 Cipher pkCipher ;
131 byte [ ] r e c e i v i n g B u f f e r = null ;
132 byte [ ] c h a l l e n g e = null ;
133 byte [ ] randomNumber = null ;
134 short b y t e s L e f t = 0 ;
135 short readCount = 0 ;
136 short rCount = 0 ;
137 short s i g n l e n g t h = 0 ;
138 MessageDigest SHA128 ;
139 AESKey cipherKey ;
140 Cipher syCipher ;
141 byte [ ] I n i t i a l i s a t i o n V e c t o r = {
142 ( byte ) 0x6C , ( byte ) 0xDE, ( byte ) 0xBE, ( byte ) 0x7B , ( byte ) 0x89 ,
( byte ) 0x99 ,
143 ( byte ) 0x8C , ( byte ) 0xAF, ( byte ) 0xC5 , ( byte ) 0x7D , ( byte ) 0xB1 , ( byte )
144 0x7C , ( byte ) 0x62 , ( byte ) 0x0A , ( byte ) 0x86 , ( byte ) 0x52 } ;
145 S i g n a t u r e phSign ;
146 PrngSHA256 myPrngHMAC;
147
148 private S e l f t e s t O f f l i n e ( ) {
149 phSign = S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_RSA_SHA_PKCS1, f a l s e ) ;
150 phSCKeyPair = new KeyPair ( KeyPair .ALG_RSA, KeyBuilder .LENGTH_RSA_512) ;
151 cipherKey = (AESKey) KeyBuilder . buildKey
152 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
153 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
154 syCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
155 f a l s e ) ;
156 myPrngHmac = new PrngSHA256 ( ) ;
157 pkCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD, f a l s e ) ;
158 phSCKeyPair . genKeyPair ( ) ;
159 SHA128 = MessageDigest . g e t I n s t a n c e ( MessageDigest .ALG_SHA_128,
160 f a l s e ) ;
161 byte [ ] r e s p o n s e B u f f e r = null ;
162 }
163 public s t a t i c void i n s t a l l ( byte bArray [ ] , short bOffset , byte bLength )
164 throws ISOException {
165 new S e l f t e s t O f f l i n e ( ) . r e g i s t e r ( ) ;
166 }
167
270