A User Centric Security Model for Tamper-Resistant Devices

C.6 Application Acquisition and Contractual Agreement Protocol
715 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
716 short p o i n t e r = 0 ;
717 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SPRandomNumberArray ,
718 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
719 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCRandomNumberArray ,
720 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
721 p o i n t e r = U t i l . arrayCopyNonAtomic ( SCSPDHGeneratedValue , ( short ) 16 ,
722 keyGenMacData , ( short ) pointer , ( short ) 16) ;
723 for ( short i = 4 8 ; i < 6 4 ; i ++) {
724 keyGenMacData [ i ] = ( byte ) 0x02 ;
725 }
726 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
727 keyGenMacData . length , SCSPDHGeneratedValue ,
( short )
728 0) ;
729 this . phCipherKey . setKey ( SCSPDHGeneratedValue , ( short ) 0) ;
730 for ( short i = 4 8 ; i < 6 4 ; i ++) {
731 keyGenMacData [ i ] = ( byte ) 0x03 ;
732 }
733 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
734 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
735 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
736 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
737 keyGenMacData . length , SCSPDHGeneratedValue ,
( short )
738 0) ;
739 this . phMacGeneratorKey . setKey ( SCSPDHGeneratedValue , ( short ) 0) ;
740 SCSPDHGeneratedValue = null ;
741 JCSystem . r e q u e s t O b j e c t D e l e t i o n ( ) ;
742 }
743 void messageEncryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
744 inbuffLength ) {
745 syCipher . i n i t ( phCipherKey , Cipher .MODE_ENCRYPT, I n i t i a l i s a t i o n V e c t o r ,
746 ( short ) 0 , ( short ) I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
747 this . shortToBytes ( i n b u f f , ( short ) ( i n b u f f O f f s e t − 3) , ( short ) syCipher
748 . doFinal ( i n b u f f , i n b u f f O f f s e t , inbuffLength , i n b u f f ,
749 i n b u f f O f f s e t ) ) ;
750 }
751 void phDecryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short inbuffLength )
752 {
753 syCipher . i n i t ( phCipherKey , Cipher .MODE_DECRYPT, I n i t i a l i s a t i o n V e c t o r ,
754 ( short ) 0 , ( short ) I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
755 syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , inbuffLength , i n b u f f ,
756 i n b u f f O f f s e t ) ;
757 }
758 boolean macGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
759 inbuffLength , short macMode) {
760 i f (macMode == S i g n a t u r e .MODE_SIGN) {
761 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_SIGN,
762 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
763 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
348