A User Centric Security Model for Tamper-Resistant Devices

C.4 Secure and Trusted Channel Protocol Service Provider
123 KeyBuilder .LENGTH_RSA_512) ;
124 phCipherKey = (AESKey) KeyBuilder . buildKey
125 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
126 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
127 syCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
128 f a l s e ) ;
129 randomDataGen = RandomData . g e t I n s t a n c e
130 (RandomData .ALG_SECURE_RANDOM) ;
131 pkCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD, f a l s e ) ;
132 d h I n i t i a l i s a t i o n ( ) ;
133 phSCKeyPair . genKeyPair ( ) ;
134 phUserKeyPair . genKeyPair ( ) ;
135 }
136 public s t a t i c void i n s t a l l ( byte bArray [ ] , short bOffset , byte
137 bLength ) throws ISOException {
138 new ProtocolHandler ( ) . r e g i s t e r ( ) ;
139 }
140 public void i n i t i a l i s e P r o t o c o l ( ) {
141 short i n i t i a l P o i n t e r = 0 ;
142 SCDHData = JCSystem . makeTransientByteArray ( ( short ) ( ( short )
143 this . ClassDH . dhModulus . l e n g t h + PTLVDataOffset ) ,
144 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
145 U t i l . arrayCopyNonAtomic ( this . SCDHChalleneTag , ( short )
146 i n i t i a l P o i n t e r , this . SCDHData , ( short ) 0 ,
147 ( short ) this . SCDHChalleneTag . l e n g t h ) ;
148 this . shortToBytes (SCDHData , ( short ) 4 , ( short ) ( ( short )
149 SCDHData . l e n g t h − ( short ) PTLVDataOffset ) ) ;
150 this . dhKeyConGen( this . SCDHData , this . PTLVDataOffset ,
151 ProtocolHandler .GEN_KEYCONTRIBUTION) ;
152 SPDHChanllengerArray = JCSystem . makeTransientByteArray ( ( short ) (
153 ( short ) this . ClassDH . dhModulus . l e n g t h + this . PTLVDataOffset ) ,
154 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
155 SPRandomNumberArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
156 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
157 SPCookieArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
158 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
159 SCRandomNumberArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
160 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
161 U t i l . arrayCopyNonAtomic ( this . SCRandomNumberTag , ( short )
162 i n i t i a l P o i n t e r , this . SCRandomNumberArray ,
163 ( short ) i n i t i a l P o i n t e r , ( short )
164 this . SCRandomNumberTag . l e n g t h ) ;
165 this . shortToBytes ( this . SCRandomNumberArray , ( short ) 4 , ( short ) (
166 ( short ) this . SCRandomNumberArray . l e n g t h − ( short )
167 PTLVDataOffset ) ) ;
168 try {
169 this . S C U s e r C e r t i f i c a t e = JCSystem . makeTransientByteArray ( ( short )
170 86 , JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
171 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic
172 ( this . SCUserCertificateTag , ( short ) 0 ,
this . S C U s e r C e r t i f i c a t e ,
293