A User Centric Security Model for Tamper-Resistant Devices

C.3 Attestation Protocol
214 }
215 private void generateResponse ( short msgNumber) {
216 short childPM1 = 0 ;
217 short childPM2 = 0 ;
218 copyPointer = 0 ;
219 i f (msgNumber == 1) {
220 copyPointer = U t i l . arrayCopy ( this . SCProtocolInitiatorTag , ( short ) 0 ,
221 this . r e c e i v i n g B u f f e r , copyPointer ,
222 ( short )
223 this . S C P r o t o c o l I n i t i a t o r T a g . l e n g t h ) ;
224 randomDataGen . generateData ( this . SCRandomNumberArray ,
225 this . PTLVDataOffset , ( short ) 16) ;
226 childPM1 = copyPointer ;
227 copyPointer += 2 ;
228 phMacGeneratorKey . setKey ( this . SCRandomNumberArray ,
229 this . PTLVDataOffset ) ;
230 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_SIGN,
231 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
232 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
233 return ;
234 } else i f (msgNumber == 2) {
235 keygenerator ( ) ;
236 childPM1 = ( short ) 6 ;
237 copyPointer = U t i l . arrayCopyNonAtomic ( this . MessageHandlerTagTwo ,
238 ( short ) 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
239 this . MessageHandlerTagTwo . l e n g t h ) ;
240 copyPointer = U t i l . arrayCopyNonAtomic ( this . SCRandomNumberArray ,
241 ( short ) 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
242 this . SCRandomNumberArray . l e n g t h ) ;
243 this . r e c e i v i n g B u f f e r [ childPM1 ]++;
244 copyPointer = U t i l . arrayCopyNonAtomic ( this . EncryptedDataTag , ( short )
245 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
246 this . EncryptedDataTag . l e n g t h ) ;
247 copyPointer += 3 ;
248 childPM2 = ( short ) ( copyPointer − ( short ) 1) ;
249 this . r e c e i v i n g B u f f e r [ childPM1 ]++;
250 MessageDigest myHashGen = MessageDigest . g e t I n s t a n c e
251 ( MessageDigest .ALG_SHA_256, f a l s e ) ;
252 short tempLength = ( short )myHashGen . doFinal ( this . ClassDH . dhModulus ,
( short ) 0 ,
253 ( short ) this . ClassDH . dhModulus . length ,
r e c e i v i n g B u f f e r ,
254 copyPointer ) ;
255 this . r e c e i v i n g B u f f e r [ childPM2 ]++;
256 this . shortToBytes ( this . r e c e i v i n g B u f f e r , ( short ) ( copyPointer −
( short )
257 2) , tempLength ) ;
258 copyPointer += tempLength ;
259 copyPointer = U t i l . arrayCopyNonAtomic ( this . SCIdentityTag , ( short ) 0 ,
260 this . r e c e i v i n g B u f f e r , copyPointer , ( short )
261 this . SCIdentityTag . l e n g t h ) ;
277