A User Centric Security Model for Tamper-Resistant Devices

C.7 Application Binding Protocol - Local
139 pMessage [ s t a r t ] = ( byte ) ( RandomNumberServer [ i ] |
140 RandomNumberClient [ i ] ) ;
141 }
142 }
143 protected void generateEncryptedData ( short s t a r t , short length ,
144 AESKey Key) {
145 short paddingbytes = 0 ;
146 i f ( ( short ) ( l e n g t h % 16) != 0) {
147 paddingbytes = ( short ) (16 −( l e n g t h % 16) ) ;
148 }
149 byte [ ] temp = JCSystem . makeTransientByteArray ( ( short ) ( l e n g t h +
150 paddingbytes ) , JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
151 AESCipher . i n i t (Key , Cipher .MODE_ENCRYPT) ;
152 U t i l . arrayCopyNonAtomic ( pMessage , ( short ) s t a r t , temp , ( short ) 0 ,
153 ( short ) l e n g t h ) ;
154 i f ( paddingbytes != 0) {
155 for ( short i = 0 ; i < paddingbytes ; i ++, l e n g t h++) {
156 temp [ ( short ) ( l e n g t h ) ] = ( byte ) 0xFF ;
157 }
158 }
159 AESCipher . doFinal ( temp , ( short ) 0 , ( short ) length , pMessage , ( short )
160 s t a r t ) ;
161 }
162 protected void generatedDecryptedData ( short s t a r t , short length ,
163 AESKey Key) {
164 byte [ ] tempBuff = JCSystem . makeTransientByteArray ( length ,
165 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
166 AESCipher . i n i t (Key , Cipher .MODE_DECRYPT) ;
167 U t i l . arrayCopyNonAtomic ( pMessage , s t a r t , tempBuff , ( short ) 0 ,
168 ( short ) l e n g t h ) ;
169 AESCipher . doFinal ( tempBuff , ( short ) 0 , ( short ) length , pMessage ,
170 ( short ) s t a r t ) ;
171 }
172 protected void generateSignatureData ( short s t a r t , short l e n g t h ) {
173 byte [ ] s i g B u f f = JCSystem . makeTransientByteArray ( ( short ) (64+2) ,
174 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
175 myServerAppSignature . i n i t ( server_SignKeyPair . g e t P r i v a t e ( ) ,
176 Cipher .MODE_ENCRYPT) ;
177 i f ( l e n g t h < 64) {
178 for ( short i = 0 ; i < ( short ) 3 2 ; i ++) {
179 pMessage [ ( short ) ( s t a r t + l e n g t h + i ) ] = ( byte ) 0x5A ;
180 }
181 }
182 myServerAppSignature . doFinal ( pMessage , ( short ) s t a r t , ( short ) 64 ,
183 s i g B u f f , ( short ) 0) ;
184 U t i l . arrayCopyNonAtomic ( s i g B u f f , ( short ) 0 , pMessage , ( short ) s t a r t ,
185 ( short ) 64) ;
186 }
187 protected boolean v e r i f y SignedData ( ) {
188 myServerAppSignature . i n i t ( myClientVerificationKey ,
189 Cipher .MODE_DECRYPT) ;
372