A User Centric Security Model for Tamper-Resistant Devices

C.3 Attestation Protocol
410 this . shortToBytes ( i n b u f f , ( short ) ( i n b u f f O f f s e t − 3) , ( short )
411 syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , inbuffLength ,
412 i n b u f f , i n b u f f O f f s e t ) ) ;
413 }
414 void phDecryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short inbuffLength )
415 {
416 syCipher . i n i t ( phCipherKey , Cipher .MODE_DECRYPT, I n i t i a l i s a t i o n V e c t o r ,
417 ( short ) 0 , ( short ) I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
418 syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , inbuffLength , i n b u f f ,
419 i n b u f f O f f s e t ) ;
420 }
421 boolean macGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
422 inbuffLength , short macMode) {
423 i f (macMode == S i g n a t u r e .MODE_SIGN) {
424 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_SIGN,
425 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
426 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
427 try {
428 copyPointer = U t i l . arrayCopyNonAtomic ( this . MACedDataTag , ( short ) 0 ,
429 this . r e c e i v i n g B u f f e r , copyPointer , ( short )
430 this . MACedDataTag . l e n g t h ) ;
431 copyPointer += 2 ;
432 } catch ( Exception ce ) {
433 ISOException . throwIt ( ( short ) 0xFA17) ;
434 }
435 try {
436 short l e n g t h = ( short ) phMacGenerator . s i g n ( this . r e c e i v i n g B u f f e r ,
437 i n b u f f O f f s e t , inbuffLength , i n b u f f , copyPointer ) ;
438 this . shortToBytes ( i n b u f f , ( short ) ( copyPointer − ( short ) 2) ,
l e n g t h ) ;
439 copyPointer += l e n g t h ;
440 } catch ( Exception ce ) {
441 ISOException . throwIt ( ( short ) 0 x0987 ) ;
442 }
443 return true ;
444 } else i f (macMode == S i g n a t u r e .MODE_VERIFY) {
445 try {
446 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_VERIFY,
447 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
448 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
449 return phMacGenerator . v e r i f y ( this . r e c e i v i n g B u f f e r , i n b u f f O f f s e t ,
450 inbuffLength , i n b u f f , ( short )
451 ( i n b u f f O f f s e t + inbuffLength +
452 this . PTLVDataOffset ) , ( short ) 16) ;
453 } catch ( Exception cE ) {
454 ISOException . throwIt ( ( short ) 0xC1C2) ;
455 }
456 }
457 return f a l s e ;
458 }
459 boolean signGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
281