A User Centric Security Model for Tamper-Resistant Devices

C.7 Application Binding Protocol - Local
200 byte [ ] tempBuff = JCSystem . makeTransientByteArray ( ( short ) 256 ,
201 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
202 U t i l . arrayCopyNonAtomic ( pMessage , ( short ) s t a r t , tempBuff , ( short )
203 0 , ( short ) l e n g t h ) ;
204 myClientAppSignature . doFinal ( tempBuff , ( short ) 0 , ( short ) length ,
205 pMessage , ( short ) s t a r t ) ;
206 return true ;
207 }
208 }
C.7.2
Server Application
Implementation of a server application that responds to the application binding request in
the UCOM rewall mechanism is listed as below:
1 package AppBindingProt ;
2
3 import javacard . framework . ∗ ;
4 import javacard . s e c u r i t y . ∗ ;
5 import javacardx . crypto . ∗ ;
6 public class ServerApp {
7 byte [ ] C l i e n t D i g e s t = new byte [ 3 2 ] ;
8 byte [ ] C l i e n t I d e n t i t y = {
9 ( byte ) 0xbc , ( byte ) 0xc0 , ( byte ) 0xea , ( byte ) 0x07 , ( byte ) 0x94 } ;
10 byte [ ] RandomNumberClient = new byte [ 1 6 ] ;
11 byte [ ] RandomNumberServer = {
12 ( byte ) 0x04 , ( byte ) 0x95 , ( byte ) 0x5E , ( byte ) 0x4F , ( byte ) 0x13 , ( byte )
13 0x9A , ( byte ) 0x06 , ( byte ) 0x89 , ( byte ) 0x2C , ( byte ) 0x3D , ( byte ) 0x79 ,
14 ( byte ) 0xFA, ( byte ) 0xD1 , ( byte ) 0xAB, ( byte ) 0x2D , ( byte ) 0x5F } ;
15 byte [ ] S e r v e r I d e n t i t y = {
16 ( byte ) 0 x4f , ( byte ) 0x39 , ( byte ) 0 xf5 , ( byte ) 0xdb , ( byte ) 0xd1 } ;
17 byte [ ] TokenValue = {
18 ( byte ) 0xbc , ( byte ) 0xbc , ( byte ) 0xbc , ( byte ) 0xbc } ;
19 RandomData myServerAppRandomData = RandomData . g e t I n s t a n c e
20 (RandomData .ALG_PSEUDO_RANDOM) ;
21 KeyPair server_SignKeyPair = new KeyPair ( KeyPair .ALG_RSA_CRT,
22 KeyBuilder .LENGTH_RSA_512) ;
23 AESKey SerTpmKey = (AESKey) KeyBuilder . buildKey ( KeyBuilder .TYPE_AES,
24 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
25 Cipher AESCipher = Cipher . g e t I n s t a n c e
26 ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD, f a l s e ) ;
27 ClientApp myClientAppRef ;
28 PublicKey myClientVerificationKey ;
29 Cipher myServerAppSignature ;
30 AESKey myServerClientAppKey ;
31 ScTPM myTPMRef;
32 byte [ ] pMessage ;
33 AESKey sessionKey ;
34 protected ServerApp ( ) {
35 myServerAppSignature = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD,
36 f a l s e ) ;
369