A User Centric Security Model for Tamper-Resistant Devices

C.6 Application Acquisition and Contractual Agreement Protocol
232 ( this . EncryptedData . getValueBytes ( ) , 0 ,
233 this . EncryptedData . getValueBytes ( ) . length ,
234 this . EncryptedData . getBytesTlvRepresentation ( ) , 7 ,
235 this . mySessionEncryptionKey ) ;
236 childExtractionFromCTLV ( this . EncryptedData ) ;
237 childExtractionFromCTLV ( this . S C U s e r C e r t i f i c a t e ) ;
238 B i g I n t e g e r publicExponent = new B i g I n t e g e r ( byteToString
239 ( this . PublicExponent . getValueBytes ( ) ) , 16) ;
240 B i g I n t e g e r publicModulus = new B i g I n t e g e r ( byteToString
241 ( this . PublicModulus . getValueBytes ( ) ) , 16) ;
242 KeyFactory f a c t o r y = KeyFactory . g e t I n s t a n c e ( "RSA" ) ;
243 SCUserVerificationKey = ( PublicKey ) f a c t o r y . g e n e r a t e P u b l i c (new
244 RSAPublicKeySpec ( publicModulus ,
245 publicExponent ) ) ;
246 temp = new byte [ ( this . SCIdentity . getTagLength ( ) +
247 this . SCRandomNumber . getTagLength ( ) +
248 this . SPRandomNumber . getTagLength ( ) ) ] ;
249 System . arraycopy ( this . EncryptedData . getBytesTlvRepresentation ( ) ,
7 ,
250 temp , 0 , temp . l e n g t h ) ;
251 i f ( this . myProtocolHelperObject . SignatureMethod ( temp , 0 ,
252 temp . length , this . SignedData . getValueBytes ( ) , 0 ,
253 SCUserVerificationKey ,
254 P r o t o c o l H e l p e r C l a s s .SIGN_MODE_VERIFICATION) ) {}
255 else {
256 System . out . p r i n t l n (
257 " S i g n a t u r e V e r i f i c a t i o n F a i l e d . . . . . . Check
code " ) ;
258 }
259 } else i f ( Counter == 2) {
260 this . MessageHandler . r e s e t ( ) ;
261 this . EncryptedData . r e s e t ( ) ;
262 this . MessageHandler . s e t B y t e s T l v R e p r e s e n t a t i o n ( inMessage , 0 ,
263 inMessage . l e n g t h − 2) ;
264 this . childExtractionFromCTLV ( this . MessageHandler ) ;
265 byte [ ] temp = new byte [ 1 6 ] ;
266 this . myProtocolHelperObject . GenerateMac
267 ( this . EncryptedData . getValueBytes ( ) , 0 ,
268 this . EncryptedData . getValueBytes ( ) . length , temp , 0 ,
269 this . mySessionMacKey ) ;
270 i f ( Arrays . e q u a l s ( this . MACedData . getValueBytes ( ) , temp ) ) {}
271 else {
272 System . out . p r i n t l n (
273 " I n t e g r i t y Check F a i l u r e : ERROR at
ProtocolHandler . inMessageProcessing \n" ) ;
274 System . e x i t ( 0 ) ;
275 }
276 this . myProtocolHelperObject . GenerateDecryption
277 ( this . EncryptedData . getValueBytes ( ) , 0 ,
278 this . EncryptedData . getValueBytes ( ) . length ,
279 this . EncryptedData . getBytesTlvRepresentation ( ) , 7 ,
355