A User Centric Security Model for Tamper-Resistant Devices

C.7 Application Binding Protocol - Local
98 } catch ( Exception e ) {
99 ISOException . throwIt ( ( short ) 0 x0001 ) ;
100 }
101 try {
102 v e r i f ySignedData ( ( short ) 116 , ( short ) 64) ;
103 } catch ( Exception e ) {
104 ISOException . throwIt ( ( short ) 0 x0002 ) ;
105 }
106 try {
107 generatedDecryptedData ( ( short ) 116 , ( short ) 32 ,
108 myClientAppServerKey ) ;
109 } catch ( Exception e ) {
110 ISOException . throwIt ( ( short ) 0 x0003 ) ;
111 }
112 U t i l . arrayCopyNonAtomic ( pMessage , ( short ) 116 , TokenValue , ( short )
113 0 , ( short ) TokenValue . l e n g t h ) ;
114 pMessage [ 0 ] = ( byte ) U t i l . arrayCopyNonAtomic ( C l i e n t I d e n t i t y ,
115 ( short ) 0 , pMessage , i n i t i a l T a b , ( short )
116 C l i e n t I d e n t i t y . l e n g t h ) ;
117 pMessage [ 0 ] = ( byte ) U t i l . arrayCopyNonAtomic ( S e r v e r I d e n t i t y ,
118 ( short ) 0 , pMessage , pMessage [ 0 ] , ( short )
119 S e r v e r I d e n t i t y . l e n g t h ) ;
120 pMessage [ 2 ] = pMessage [ 0 ] ;
121 pMessage [ 0 ] = ( byte ) U t i l . arrayCopyNonAtomic ( TokenValue , ( short ) 0 ,
122 pMessage , pMessage [ 0 ] , ( short ) TokenValue . l e n g t h ) ;
123 pMessage [ 0 ] = ( byte ) U t i l . arrayCopyNonAtomic ( clientR , ( short ) 0 ,
124 pMessage , pMessage [ 0 ] , ( short ) c l i e n t R . l e n g t h ) ;
125 pMessage [ 0 ] = ( byte ) ( pMessage [ 0 ] − pMessage [ 2 ] ) ;
126 try {
127 encryptData ( ( short ) 4 , ( short ) 30 , myClientAppServerKey ) ;
128 } catch ( Exception e ) {
129 ISOException . throwIt ( ( short ) 0 x0004 ) ;
130 }
131 try {
132 myServerAppRef . protocolManager ( ( short ) 2 , pMessage ) ;
133 } catch ( Exception e ) {
134 ISOException . throwIt ( ( short ) 0x00A5 ) ;
135 }
136 return TokenValue ;
137 }
138 public void protocolManager ( byte [ ] pMessage ) {}
139 protected void generateEncryptionData (AESKey Key) {
140 pMessage [ 3 ] += ( short ) ( pMessage [ 0 ] − 4) ;
141 AESCipher . i n i t (Key , Cipher .MODE_ENCRYPT) ;
142 short paddingbytes = ( short ) (16 −(( pMessage [ 0 ] % 16) − ( short ) 4) ) ;
143 i f ( paddingbytes != 0) {
144 for ( short i = 0 ; i < paddingbytes ; i ++) {
145 pMessage [ ( short ) ( pMessage [ 0 ] + i ) ] = ( byte ) 0xFF ;
146 }
147 }
148 pMessage [ 0 ] += ( byte ) paddingbytes ;
367