A User Centric Security Model for Tamper-Resistant Devices

C.3 Attestation Protocol
112 f a l s e ) ;
113 phSign = S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_RSA_SHA_PKCS1, f a l s e ) ;
114 phCipherKey = (AESKey) KeyBuilder . buildKey
115 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
116 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
117 syCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
118 f a l s e ) ;
119 randomDataGen = RandomData . g e t I n s t a n c e (RandomData .ALG_SECURE_RANDOM) ;
120 pkCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD, f a l s e ) ;
121 d h I n i t i a l i s a t i o n ( ) ;
122 }
123 public s t a t i c void i n s t a l l ( byte bArray [ ] , short bOffset , byte bLength )
124 throws ISOException {
125 new ProtocolHandler ( ) . r e g i s t e r ( ) ;
126 }
127 public void i n i t i a l i s e P r o t o c o l ( ) {
128 short i n i t i a l P o i n t e r = 0 ;
129 CMRandomNumberArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
130 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
131 CMCookieArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
132 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
133 SCRandomNumberArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
134 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
135 U t i l . arrayCopyNonAtomic ( this . SCRandomNumberTag , ( short ) i n i t i a l P o i n t e r ,
136 this . SCRandomNumberArray , ( short )
137 i n i t i a l P o i n t e r , ( short )
138 this . SCRandomNumberTag . l e n g t h ) ;
139 this . shortToBytes ( this . SCRandomNumberArray , ( short ) 4 , ( short ) ( ( short )
140 this . SCRandomNumberArray . l e n g t h − ( short )
141 PTLVDataOffset ) ) ;
142 try {
143 CMVerificationKey = ( RSAPublicKey ) KeyBuilder . buildKey
144 ( KeyBuilder .TYPE_RSA_PUBLIC,
145 KeyBuilder .LENGTH_RSA_512, f a l s e ) ;
146 } catch ( Exception cE ) {
147 ISOException . throwIt ( ( short ) 0 x6666 ) ;
148 }
149 }
150 public void p r o c e s s (APDU apdu )throws ISOException {
151 byte [ ] apduBuffer = apdu . g e t B u f f e r ( ) ;
152 i f ( s e l e c t i n g A p p l e t ( ) ) {
153 this . i n i t i a l i s e P r o t o c o l ( ) ;
154 return ;
155 }
156 i f ( apduBuffer [ ISO7816 .OFFSET_CLA] != CLA) {
157 ISOException . throwIt (SW_CLASSNOTSUPPORTED) ;
158 }
159 i f ( apduBuffer [ ISO7816 .OFFSET_INS] == I n i t i a t i o n P r o t o c o l ) {
160 r e c e i v i n g B u f f e r = JCSystem . makeTransientByteArray ( ( short ) 64 ,
161 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
162 generateResponse ( ( short ) 1) ;
275