A User Centric Security Model for Tamper-Resistant Devices

C.4 Secure and Trusted Channel Protocol Service Provider
72 private byte [ ] SCCertificateTag = {
73 ( byte ) 0x1F , ( byte ) 0xC0 , ( byte ) 0xF0 , ( byte ) 0x02 } ;
74 private byte [ ] SCUserCertificateTag = {
75 ( byte ) 0x1F , ( byte ) 0xC0 , ( byte ) 0xF0 , ( byte ) 0x03 } ;
76 short PTLVDataOffset = ( short ) 6 ;
77 short CTLVDataOffset = ( short ) 7 ;
78 short TLVLengthOffset = ( short ) 4 ;
79 short copyPointer = ( short ) 0 ;
80 byte [ ] SCDHData ;
81 f i n a l s t a t i c byte CLA = ( byte ) 0xB0 ;
82 f i n a l s t a t i c byte S t a r t P r o t o c o l = ( byte ) 0x40 ;
83 f i n a l s t a t i c byte I n i t i a t i o n P r o t o c o l = ( byte ) 0 x f f ;
84 f i n a l s t a t i c short SW_CLASSNOTSUPPORTED = 0 x6320 ;
85 f i n a l s t a t i c short SW_ERROR_INS = 0 x6300 ;
86 RandomData randomDataGen ;
87 Cipher pkCipher ;
88 short messageNumber = 0 ;
89 byte [ ] r e c e i v i n g B u f f e r = null ;
90 short b y t e s L e f t = 0 ;
91 short readCount = 0 ;
92 short rCount = 0 ;
93 short s i g n l e n g t h = 0 ;
94 private RSAPublicKey dhKey = ( RSAPublicKey ) KeyBuilder . buildKey
95 ( KeyBuilder .TYPE_RSA_PUBLIC,
96 KeyBuilder .LENGTH_RSA_2048, f a l s e ) ;
97 private byte [ ] randomExponent ;
98 f i n a l s t a t i c byte GEN_KEYCONTRIBUTION = 0x01 ;
99 f i n a l s t a t i c byte GEN_DHKEY = 0x02 ;
100 AESKey phCipherKey ;
101 Cipher syCipher ;
102 byte [ ] I n i t i a l i s a t i o n V e c t o r = {
103 ( byte ) 0x6C , ( byte ) 0xDE, ( byte ) 0xBE, ( byte ) 0x7B , ( byte ) 0x89 , ( byte )
104 0x99 , ( byte ) 0x8C , ( byte ) 0xAF, ( byte ) 0xC5 , ( byte ) 0x7D , ( byte ) 0xB1 ,
105 ( byte ) 0x7C , ( byte ) 0x62 , ( byte ) 0x0A , ( byte ) 0x86 , ( byte ) 0x52 } ;
106 AESKey phMacGeneratorKey ;
107 S i g n a t u r e phMacGenerator ;
108 S i g n a t u r e phSign ;
109 KeyPair phSCKeyPair ;
110 KeyPair phUserKeyPair ;
111 RSAPublicKey SPVerificationKey = null ;
112 private ProtocolHandler ( ) {
113 phMacGeneratorKey = (AESKey) KeyBuilder . buildKey
114 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
115 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
116 phMacGenerator = S i g n a t u r e . g e t I n s t a n c e
117 ( S i g n a t u r e .ALG_AES_MAC_128_NOPAD, f a l s e ) ;
118 phSign = S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_RSA_SHA_PKCS1, f a l s e )
119 ;
120 phSCKeyPair = new KeyPair ( KeyPair .ALG_RSA,
121 KeyBuilder .LENGTH_RSA_512) ;
122 phUserKeyPair = new KeyPair ( KeyPair .ALG_RSA,
292