A User Centric Security Model for Tamper-Resistant Devices

C.5 Secure and Trusted Channel Protocol Smart Card
432 randomExponent . l e n g t h ) ;
433 dhKey . setExponent ( randomExponent , ( short ) 0 , ( short )
434 randomExponent . l e n g t h ) ;
435 pkCipher . i n i t ( dhKey , Cipher .MODE_ENCRYPT) ;
436 pkCipher . doFinal ( ClassDH . dhBase , ( short ) 0 ,
( short ) ClassDH . dhBase . length , i n b u f f ,
437 i n b u f f O f f s e t ) ;
438 break ;
439 case GEN_DHKEY:
440 try {
441 dhKey . setExponent ( randomExponent , ( short ) 0 , ( short )
442 randomExponent . l e n g t h ) ;
443 pkCipher . i n i t ( dhKey , Cipher .MODE_ENCRYPT) ;
444 SCSPDHGeneratedValue = JCSystem . makeTransientByteArray ( ( short )
445 ClassDH . dhModulus . length ,
JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
446 pkCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , ( short ) ( ( short )
447 i n b u f f . l e n g t h − ( short ) this . PTLVDataOffset ) ,
448 SCSPDHGeneratedValue , ( short ) 0) ;
449 }
450 catch ( Exception cE ) {
451 ISOException . throwIt ( ( short ) 0xD86E) ;
452 }
453 break ;
454 default :
455 ISOException . throwIt ( ( short ) 0x5FA1) ;
456 }
457 }
458 void keygenerator ( ) {
459 AESKey sessionGenKey = (AESKey) KeyBuilder . buildKey
460 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
461 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
462 sessionGenKey . setKey ( SCSPDHGeneratedValue , ( short ) 0) ;
463 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
464 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
465 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
466 byte [ ] keyGenMacData = JCSystem . makeTransientByteArray ( ( short ) 64 ,
467 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
468 short p o i n t e r = 0 ;
469 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SPRandomNumberArray ,
470 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
471 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCRandomNumberArray ,
472 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
473 p o i n t e r = U t i l . arrayCopyNonAtomic ( SCSPDHGeneratedValue , ( short ) 16 ,
474 keyGenMacData , ( short ) pointer , ( short ) 16) ;
475 for ( short i = 4 8 ; i < 6 4 ; i ++) {
476 keyGenMacData [ i ] = ( byte ) 0x02 ;
477 }
478 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
479 keyGenMacData . length , SCSPDHGeneratedValue ,
( short )
322