A User Centric Security Model for Tamper-Resistant Devices

C.6 Application Acquisition and Contractual Agreement Protocol
764 copyPointer = U t i l . arrayCopyNonAtomic ( this . MACedDataTag , ( short ) 0 ,
765 this . r e c e i v i n g B u f f e r , copyPointer ,
( short ) this . MACedDataTag . l e n g t h )
766 ;
767 copyPointer += 2 ;
768 short l e n g t h = ( short ) phMacGenerator . s i g n ( this . r e c e i v i n g B u f f e r ,
769 i n b u f f O f f s e t , inbuffLength , i n b u f f , copyPointer ) ;
770 this . shortToBytes ( i n b u f f , ( short ) ( copyPointer − ( short ) 2) , l e n g t h ) ;
771 copyPointer += l e n g t h ;
772 return true ;
773 } else i f (macMode == S i g n a t u r e .MODE_VERIFY) {
774 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_VERIFY,
775 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
776 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
777 return phMacGenerator . v e r i f y ( this . r e c e i v i n g B u f f e r , i n b u f f O f f s e t ,
778 inbuffLength , i n b u f f , ( short )
779 ( i n b u f f O f f s e t + inbuffLength +
780 this . PTLVDataOffset ) , ( short ) 16) ;
781 }
782 return f a l s e ;
783 }
784 boolean signGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
785 i n b u f f l e n g t h , Key kpSign , short signMode ) {
786 i f ( signMode == S i g n a t u r e .MODE_SIGN) {
787 copyPointer = U t i l . arrayCopyNonAtomic ( this . SignedDataTag , ( short ) 0 ,
788 this . r e c e i v i n g B u f f e r , copyPointer , ( short )
789 this . SignedDataTag . l e n g t h ) ;
790 copyPointer += ( short ) 2 ;
791 phSign . i n i t ( ( RSAPrivateKey ) kpSign , S i g n a t u r e .MODE_SIGN) ;
792 s i g n l e n g t h = phSign . s i g n ( i n b u f f , ( short ) i n b u f f O f f s e t , i n b u f f l e n g t h ,
793 i n b u f f , copyPointer ) ;
794 this . shortToBytes ( this . r e c e i v i n g B u f f e r , ( short ) ( copyPointer −
( short )
795 2) , s i g n l e n g t h ) ;
796 copyPointer += s i g n l e n g t h ;
797 return true ;
798 } else i f ( signMode == S i g n a t u r e .MODE_VERIFY) {
799 phSign . i n i t ( ( RSAPublicKey ) kpSign , S i g n a t u r e .MODE_VERIFY) ;
800 return phSign . v e r i f y ( i n b u f f , i n b u f f O f f s e t , i n b u f f l e n g t h , i n b u f f ,
801 ( short ) ( i n b u f f O f f s e t + i n b u f f l e n g t h +
802 this . PTLVDataOffset ) , ( short ) 64) ;
803 }
804 return f a l s e ;
805 }
806 public s t a t i c short bytesToShort ( byte [ ] ArrayBytes ) {
807 return ( short ) ( ( ( ArrayBytes [ 0 ]