A User Centric Security Model for Tamper-Resistant Devices

C.6 Application Acquisition and Contractual Agreement Protocol
227 this . shortToBytes ( this . S C U s e r C e r t i f i c a t e , i n i t i a l P o i n t e r , kLen ) ;
228 this . S C U s e r C e r t i f i c a t e [6]++;
229 this . SPIdentity = JCSystem . makeTransientByteArray ( ( short ) 24 ,
230 JCSystem .MEMORY_TYPE_TRANSIENT_RESET) ;
231 this . AppIdentity = JCSystem . makeTransientByteArray ( ( short ) 28 ,
232 JCSystem .MEMORY_TYPE_TRANSIENT_RESET) ;
233 SPVerificationKey = ( RSAPublicKey ) KeyBuilder . buildKey
234 ( KeyBuilder .TYPE_RSA_PUBLIC,
235 KeyBuilder .LENGTH_RSA_512, f a l s e ) ;
236 TSMVerificationKey = ( RSAPublicKey ) KeyBuilder . buildKey
237 ( KeyBuilder .TYPE_RSA_PUBLIC,
238 KeyBuilder .LENGTH_RSA_512, f a l s e ) ;
239 } catch ( Exception cE ) {
240 ISOException . throwIt ( ( short ) 0xCCCC) ;
241 }
242 try {
243 this . S C C e r t i f i c a t e = JCSystem . makeTransientByteArray ( ( short ) 86 ,
244 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
245 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCCertificateTag ,
246 ( short ) 0 , this . S C C e r t i f i c a t e , ( short ) 0 ,
( short )
247 this . SCCertificateTag . l e n g t h ) ;
248 this . shortToBytes ( this . S C C e r t i f i c a t e , ( short ) 4 , ( short )
249 ( this . S C C e r t i f i c a t e . l e n g t h − ( short ) 7) ) ;
250 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ExponentTag , ( short ) 0 ,
251 this . S C C e r t i f i c a t e , ( short ) ( i n i t i a l P o i n t e r +
( short ) 3) , ( short )
252 this . ExponentTag . l e n g t h ) ;
253 RSAPublicKey myPublic = ( RSAPublicKey ) this . phSCKeyPair . g e t P u b l i c ( ) ;
254 short kLen = myPublic . getExponent ( this . S C C e r t i f i c a t e , ( short )
255 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
256 this . shortToBytes ( this . S C C e r t i f i c a t e , i n i t i a l P o i n t e r , kLen ) ;
257 i n i t i a l P o i n t e r += ( short ) ( kLen + ( short ) 2) ;
258 this . S C C e r t i f i c a t e [6]++;
259 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ModulusTag , ( short ) 0 ,
260 this . S C C e r t i f i c a t e , ( short ) ( i n i t i a l P o i n t e r ) , ( short )
261 this . ModulusTag . l e n g t h ) ;
262 kLen = myPublic . getModulus ( this . S C C e r t i f i c a t e , ( short )
263 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
264 this . shortToBytes ( this . S C C e r t i f i c a t e , i n i t i a l P o i n t e r , kLen ) ;
265 this . S C C e r t i f i c a t e [6]++;
266 } catch ( Exception cE ) {
267 ISOException . throwIt ( ( short ) 0 x6666 ) ;
268 }
269 }
270 public void p r o c e s s (APDU apdu )throws ISOException {
271 byte [ ] apduBuffer = apdu . g e t B u f f e r ( ) ;
272 i f ( s e l e c t i n g A p p l e t ( ) ) {
273 return ;
274 }
275 i f ( apduBuffer [ ISO7816 .OFFSET_CLA] != CLA) {
338