A User Centric Security Model for Tamper-Resistant Devices

C.3 Attestation Protocol
219 byte [ ] memoryWordRead = new byte [ 4 ] ;
220 byte [ ] hashValue = new byte [ 3 2 ]
221 byte rcount = ( byte ) 0x00 ;
222 byte seedRef = ( byte ) 0x00 ;
223 //mK = runPUF( c h a l l e n g e ) ;
224 while ( rcount < randomNumber . l e n g t h ) {
225 seedRef=(short ) ( randomNumber [ rcount ] %
226 ( short ) ( MemoryContents . length −1) ) ;
227 seedRef = ( byte ) (myPrngHMAC. generateRandom ( seedRef ) . [ 0 ]
228 % ( MemoryContents . length −16) )
229 U t i l . arrayCopyNonAtomic ( MemoryContents ,
230 seedRef , hashValue , ( short ) 0 , ( short ) 16) ;
231 U t i l . arrayCopyNonAtomic ( r e s p o n s e B u f f e r ,
232 ( short ) 0 , hashValue , ( short ) 16 , ( short ) 16) ;
233 U t i l . arrayCopyNonAtomic (mK,
234 ( short ) 0 , hashValue , ( short ) 32 , ( short ) 16) ;
235 SHA128 . doFinal ( hashValue , ( short ) 0 , ( short ) hashValue . length ,
236 r e s p o n s e B u f f e r , ( short ) 0) ;
237 i f ( ( short ) ( randomNumber . length−rcount )==1){
238 // mK = runPUF( r e s p o n s e B u f f e r ) ;
239 }
240 rcount++;
241 }
242 }
243 }
C.3 Attestation Protocol
The Java Card implementation of the attestation protocol discussed in section 4.7 is listed
in subsequent sections.
C.3.1
Smart Card Implementation
Following is the smart card implementation of the attestation protocol and this implementation
uses the helper function discussed in appendix C.11.3.
1 package p r o t o c o l A t t e s t a t i o n S C ;
2
3 import javacard . framework .APDU;
4 import javacard . framework . Applet ;
5 import javacard . framework . ISO7816 ;
6 import javacard . framework . ISOException ;
7 import javacard . framework . JCSystem ;
8 import javacard . framework . U t i l ;
9 import javacard . s e c u r i t y . AESKey ;
10 import javacard . s e c u r i t y . Key ;
11 import javacard . s e c u r i t y . KeyBuilder ;
12 import javacard . s e c u r i t y . KeyPair ;
13 import javacard . s e c u r i t y . MessageDigest ;
14 import javacard . s e c u r i t y . RSAPrivateKey ;
272