A User Centric Security Model for Tamper-Resistant Devices

C.4 Secure and Trusted Channel Protocol Service Provider
573 inbuffLength ) {
574 syCipher . i n i t ( phCipherKey , Cipher .MODE_ENCRYPT,
575 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
576 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
577 short temp ;
578 this . shortToBytes ( i n b u f f , ( short ) ( i n b u f f O f f s e t − 3) , temp =
579 ( short ) syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t ,
580 inbuffLength , i n b u f f , i n b u f f O f f s e t ) ) ;
581 }
582 void phDecryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
583 inbuffLength ) {
584 syCipher . i n i t ( phCipherKey , Cipher .MODE_DECRYPT,
585 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
586 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
587 syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , inbuffLength , i n b u f f ,
588 i n b u f f O f f s e t ) ;
589 }
590 boolean macGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
591 inbuffLength , short macMode) {
592 i f (macMode == S i g n a t u r e .MODE_SIGN) {
593 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_SIGN,
594 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
595 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
596 try {
597 copyPointer = U t i l . arrayCopyNonAtomic ( this . MACedDataTag ,
598 ( short ) 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
599 this . MACedDataTag . l e n g t h ) ;
600 copyPointer += 2 ;
601 } catch ( Exception ce ) {
602 ISOException . throwIt ( ( short ) 0xFA17) ;
603 }
604 try {
605 short l e n g t h = ( short ) phMacGenerator . s i g n
606 ( this . r e c e i v i n g B u f f e r , i n b u f f O f f s e t ,
607 inbuffLength , i n b u f f , copyPointer ) ;
608 this . shortToBytes ( i n b u f f , ( short ) ( copyPointer − ( short ) 2) ,
609 l e n g t h ) ;
610 copyPointer += l e n g t h ;
611 } catch ( Exception ce ) {
612 ISOException . throwIt ( ( short ) 0 x0987 ) ;
613 }
614 return true ;
615 } else i f (macMode == S i g n a t u r e .MODE_VERIFY) {
616 try {
617 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_VERIFY,
618 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
619 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
620 return phMacGenerator . v e r i f y ( this . r e c e i v i n g B u f f e r ,
621 i n b u f f O f f s e t , inbuffLength , i n b u f f , ( short ) ( i n b u f f O f f s e t +
622 inbuffLength + this . PTLVDataOffset ) , ( short ) 16) ;
623 } catch ( Exception cE ) {
302