A User Centric Security Model for Tamper-Resistant Devices

C.5 Secure and Trusted Channel Protocol Smart Card
89 f i n a l s t a t i c byte GEN_DHKEY = 0x02 ;
90 AESKey phCipherKey ;
91 Cipher syCipher ;
92 byte [ ] I n i t i a l i s a t i o n V e c t o r = {
93 ( byte ) 0x6C , ( byte ) 0xDE, ( byte ) 0xBE, ( byte ) 0x7B , ( byte ) 0x89 ,
( byte ) 0x99 ,
94 ( byte ) 0x8C , ( byte ) 0xAF, ( byte ) 0xC5 , ( byte ) 0x7D , ( byte ) 0xB1 , ( byte )
95 0x7C , ( byte ) 0x62 , ( byte ) 0x0A , ( byte ) 0x86 , ( byte ) 0x52 } ;
96 AESKey phMacGeneratorKey ;
97 S i g n a t u r e phMacGenerator ;
98 S i g n a t u r e phSign ;
99 KeyPair phSCKeyPair ;
100 KeyPair phUserKeyPair ;
101 RSAPublicKey SPVerificationKey = null ;
102 private ProtocolHandler ( ) {
103 phMacGeneratorKey = (AESKey) KeyBuilder . buildKey
104 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
105 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
106 phMacGenerator =
S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_AES_MAC_128_NOPAD,
107 f a l s e ) ;
108 phSign = S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_RSA_SHA_PKCS1, f a l s e ) ;
109 phSCKeyPair = new KeyPair ( KeyPair .ALG_RSA, KeyBuilder .LENGTH_RSA_512) ;
110 phUserKeyPair = new KeyPair ( KeyPair .ALG_RSA,
KeyBuilder .LENGTH_RSA_512)
111 ;
112 phCipherKey = (AESKey) KeyBuilder . buildKey
113 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
114 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
115 syCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
116 f a l s e ) ;
117 randomDataGen = RandomData . g e t I n s t a n c e (RandomData .ALG_SECURE_RANDOM) ;
118 pkCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD, f a l s e ) ;
119 d h I n i t i a l i s a t i o n ( ) ;
120 phSCKeyPair . genKeyPair ( ) ;
121 phUserKeyPair . genKeyPair ( ) ;
122 }
123 public s t a t i c void i n s t a l l ( byte bArray [ ] , short bOffset , byte bLength )
124 throws ISOException {
125 new ProtocolHandler ( ) . r e g i s t e r ( ) ;
126 }
127 public void i n i t i a l i s e P r o t o c o l ( ) {
128 short i n i t i a l P o i n t e r = 0 ;
129 SCDHData = JCSystem . makeTransientByteArray ( ( short ) ( ( short )
130 this . ClassDH . dhModulus . l e n g t h + PTLVDataOffset ) ,
131 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
132 U t i l . arrayCopyNonAtomic ( this . SCDHChalleneTag , ( short ) i n i t i a l P o i n t e r ,
133 this . SCDHData , ( short ) 0 , ( short )
134 this . SCDHChalleneTag . l e n g t h ) ;
135 this . shortToBytes (SCDHData , ( short ) 4 , ( short ) ( ( short )SCDHData . l e n g t h −
136 ( short ) PTLVDataOffset ) ) ;
315