A User Centric Security Model for Tamper-Resistant Devices

C.5 Secure and Trusted Channel Protocol Smart Card
137 this . dhKeyConGen( this . SCDHData , this . PTLVDataOffset ,
138 ProtocolHandler .GEN_KEYCONTRIBUTION) ;
139 SPDHChanllengerArray = JCSystem . makeTransientByteArray ( ( short ) ( ( short )
140 this . ClassDH . dhModulus . l e n g t h + this . PTLVDataOffset ) ,
141 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
142 SPRandomNumberArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
143 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
144 SPCookieArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
145 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
146 SCRandomNumberArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
147 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
148 U t i l . arrayCopyNonAtomic ( this . SCRandomNumberTag , ( short ) i n i t i a l P o i n t e r ,
149 this . SCRandomNumberArray , ( short )
150 i n i t i a l P o i n t e r , ( short )
151 this . SCRandomNumberTag . l e n g t h ) ;
152 this . shortToBytes ( this . SCRandomNumberArray , ( short ) 4 , ( short ) ( ( short )
153 this . SCRandomNumberArray . l e n g t h − ( short )
154 PTLVDataOffset ) ) ;
155 try {
156 this . S C C e r t i f i c a t e = JCSystem . makeTransientByteArray ( ( short ) 86 ,
157 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
158 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCCertificateTag ,
159 ( short ) 0 , this . S C C e r t i f i c a t e , ( short ) 0 ,
( short )
160 this . SCCertificateTag . l e n g t h ) ;
161 this . shortToBytes ( this . S C C e r t i f i c a t e , ( short ) 4 , ( short )
162 ( this . S C C e r t i f i c a t e . l e n g t h − ( short ) 7) ) ;
163 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ExponentTag , ( short ) 0 ,
164 this . S C C e r t i f i c a t e , ( short ) ( i n i t i a l P o i n t e r +
( short ) 3) , ( short )
165 this . ExponentTag . l e n g t h ) ;
166 RSAPublicKey myPublic = ( RSAPublicKey ) this . phSCKeyPair . g e t P u b l i c ( ) ;
167 short kLen = myPublic . getExponent ( this . S C C e r t i f i c a t e , ( short )
168 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
169 this . shortToBytes ( this . S C C e r t i f i c a t e , i n i t i a l P o i n t e r , kLen ) ;
170 i n i t i a l P o i n t e r += ( short ) ( kLen + ( short ) 2) ;
171 this . S C C e r t i f i c a t e [6]++;
172 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ModulusTag , ( short ) 0 ,
173 this . S C C e r t i f i c a t e , ( short ) ( i n i t i a l P o i n t e r ) , ( short )
174 this . ModulusTag . l e n g t h ) ;
175 kLen = myPublic . getModulus ( this . S C C e r t i f i c a t e , ( short )
176 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
177 this . shortToBytes ( this . S C C e r t i f i c a t e , i n i t i a l P o i n t e r , kLen ) ;
178 this . S C C e r t i f i c a t e [6]++;
179 SPVerificationKey = ( RSAPublicKey ) KeyBuilder . buildKey
180 ( KeyBuilder .TYPE_RSA_PUBLIC,
181 KeyBuilder .LENGTH_RSA_512, f a l s e ) ;
182 } catch ( Exception cE ) {
183 ISOException . throwIt ( ( short ) 0 x6666 ) ;
184 }
185 }
316