A User Centric Security Model for Tamper-Resistant Devices

C.6 Application Acquisition and Contractual Agreement Protocol
132 private byte [ ] myLongTermMacKey = {
133 ( byte ) 0x74 , ( byte ) 0x86 , ( byte ) 0x6A , ( byte ) 0x08 , ( byte ) 0xCF,
( byte ) 0xE4 ,
134 ( byte ) 0xFF , ( byte ) 0xE3 , ( byte ) 0xA6 , ( byte ) 0x82 , ( byte ) 0x4A , ( byte )
135 0x4E , ( byte ) 0x10 , ( byte ) 0xB9 , ( byte ) 0xA6 , ( byte ) 0xF0 } ;
136 AESKey phCipherKey ;
137 Cipher syCipher ;
138 byte [ ] I n i t i a l i s a t i o n V e c t o r = {
139 ( byte ) 0x6C , ( byte ) 0xDE, ( byte ) 0xBE, ( byte ) 0x7B , ( byte ) 0x89 ,
( byte ) 0x99 ,
140 ( byte ) 0x8C , ( byte ) 0xAF, ( byte ) 0xC5 , ( byte ) 0x7D , ( byte ) 0xB1 , ( byte )
141 0x7C , ( byte ) 0x62 , ( byte ) 0x0A , ( byte ) 0x86 , ( byte ) 0x52 } ;
142 AESKey phMacGeneratorKey ;
143 S i g n a t u r e phMacGenerator ;
144 S i g n a t u r e phSign ;
145 KeyPair phSCKeyPair ;
146 KeyPair phUserKeyPair ;
147 RSAPublicKey SPVerificationKey = null ;
148 RSAPublicKey TSMVerificationKey = null ;
149 private ProtocolHandler ( ) {
150 phMacGeneratorKey = (AESKey) KeyBuilder . buildKey
151 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
152 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
153 phMacGenerator =
S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_AES_MAC_128_NOPAD,
154 f a l s e ) ;
155 phSign = S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_RSA_SHA_PKCS1, f a l s e ) ;
156 phSCKeyPair = new KeyPair ( KeyPair .ALG_RSA, KeyBuilder .LENGTH_RSA_512) ;
157 phUserKeyPair = new KeyPair ( KeyPair .ALG_RSA,
KeyBuilder .LENGTH_RSA_512)
158 ;
159 phCipherKey = (AESKey) KeyBuilder . buildKey
160 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
161 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
162 syCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
163 f a l s e ) ;
164 randomDataGen = RandomData . g e t I n s t a n c e (RandomData .ALG_SECURE_RANDOM) ;
165 pkCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD, f a l s e ) ;
166 d h I n i t i a l i s a t i o n ( ) ;
167 phSCKeyPair . genKeyPair ( ) ;
168 phUserKeyPair . genKeyPair ( ) ;
169 }
170 public s t a t i c void i n s t a l l ( byte bArray [ ] , short bOffset , byte bLength )
171 throws ISOException {
172 new ProtocolHandler ( ) . r e g i s t e r ( ) ;
173 }
174 public void i n i t i a l i s e P r o t o c o l ( ) {
175 SID = JCSystem . makeTransientByteArray ( ( short ) 16 ,
176 JCSystem .CLEAR_ON_RESET) ;
177 short i n i t i a l P o i n t e r = 0 ;
178 SCDHData = JCSystem . makeTransientByteArray ( ( short ) ( ( short )
336