A User Centric Security Model for Tamper-Resistant Devices

C.4 Secure and Trusted Channel Protocol Service Provider
522 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
523 pkCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , ( short ) ( ( short )
524 i n b u f f . l e n g t h − ( short ) this . PTLVDataOffset )
525 , SCSPDHGeneratedValue , ( short ) 0) ;
526 }
527 catch ( Exception cE ) {
528 ISOException . throwIt ( ( short ) 0xD86E) ;
529 }
530 break ;
531 default :
532 ISOException . throwIt ( ( short ) 0x5FA1) ;
533 }
534 }
535 void keygenerator ( ) {
536 AESKey sessionGenKey = (AESKey) KeyBuilder . buildKey
537 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
538 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
539 sessionGenKey . setKey ( SCSPDHGeneratedValue , ( short ) 0) ;
540 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
541 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
542 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
543 byte [ ] keyGenMacData = JCSystem . makeTransientByteArray ( ( short ) 64 ,
544 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
545 short p o i n t e r = 0 ;
546 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SPRandomNumberArray ,
547 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
548 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCRandomNumberArray ,
549 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
550 p o i n t e r = U t i l . arrayCopyNonAtomic ( SCSPDHGeneratedValue , ( short ) 16 ,
551 keyGenMacData , ( short ) pointer , ( short ) 16) ;
552 for ( short i = 4 8 ; i < 6 4 ; i ++) {
553 keyGenMacData [ i ] = ( byte ) 0x02 ;
554 }
555 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
556 keyGenMacData . length , SCSPDHGeneratedValue ,
557 ( short ) 0) ;
558 this . phCipherKey . setKey ( SCSPDHGeneratedValue , ( short ) 0) ;
559 for ( short i = 4 8 ; i < 6 4 ; i ++) {
560 keyGenMacData [ i ] = ( byte ) 0x03 ;
561 }
562 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
563 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
564 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
565 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
566 keyGenMacData . length , SCSPDHGeneratedValue ,
567 ( short ) 0) ;
568 this . phMacGeneratorKey . setKey ( SCSPDHGeneratedValue , ( short ) 0) ;
569 SCSPDHGeneratedValue = null ;
570 JCSystem . r e q u e s t O b j e c t D e l e t i o n ( ) ;
571 }
572 void messageEncryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
301