A User Centric Security Model for Tamper-Resistant Devices

C.8 Application Binding Protocol - Distributed
190 0x01 ) ;
191 pMessage [ 0 ] = ( byte ) U t i l . arrayCopyNonAtomic ( ClientRandomNumber ,
192 ( short ) 0 , pMessage , ( short ) pMessage [ 0 ] , ( short )
193 ClientRandomNumber . l e n g t h ) ;
194 generateEncryption ( ( short ) 4 , ( short ) 64 , TpmClientApp ) ;
195 pMessage [ 0 ] = ( byte ) U t i l . arrayCopyNonAtomic ( scTPMDigestBuffer ,
196 ( short ) 0 , pMessage , ( short ) 68 , ( short )
197 scTPMDigestBuffer . l e n g t h ) ;
198 pMessage [ 0 ] += ( byte ) sessionKey . getKey ( pMessage , ( short )
199 pMessage [ 0 ] ) ;
200 ServerRandomNumber [ 1 5 ] = (byte ) ( ServerRandomNumber [ 1 5 ] + (byte ) 1) ;
201 pMessage [ 0 ] = ( byte ) U t i l . arrayCopyNonAtomic ( ServerRandomNumber ,
202 ( short ) 0 , pMessage , ( short ) pMessage [ 0 ] , ( short )
203 ServerRandomNumber . l e n g t h ) ;
204 generateEncryption ( ( short ) 68 , ( short ) 64 , TpmServerApp ) ;
205 }
206 public void g e n e r a t e D e c r y t i o n ( short s t a r t , short length , AESKey Key)
207 {
208 byte [ ] tempBuff = JCSystem . makeTransientByteArray ( length ,
209 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
210 AESCipher . i n i t (Key , Cipher .MODE_DECRYPT) ;
211 U t i l . arrayCopyNonAtomic ( pMessage , ( short ) s t a r t , tempBuff , ( short )
212 0 , ( short ) l e n g t h ) ;
213 AESCipher . doFinal ( tempBuff , ( short ) 0 , ( short ) length , pMessage ,
214 ( short ) s t a r t ) ;
215 }
216 public void generateEncryption ( short s t a r t , short length , AESKey
217 Key) {
218 AESCipher . i n i t (Key , Cipher .MODE_ENCRYPT) ;
219 short paddingbytes = ( short ) ( l e n g t h % 16) ;
220 byte [ ] temp = JCSystem . makeTransientByteArray ( ( short ) ( l e n g t h +
221 paddingbytes ) , JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
222 U t i l . arrayCopyNonAtomic ( pMessage , s t a r t , temp , ( short ) 0 , l e n g t h ) ;
223 i f ( paddingbytes != 0) {
224 for ( short i = 0 ; i < paddingbytes ; i ++, l e n g t h++) {
225 temp [ l e n g t h ] = ( byte ) 0xFF ;
226 }
227 }
228 pMessage [ 1 ] = ( byte ) AESCipher . doFinal ( temp , ( short ) 0 , length ,
229 pMessage , s t a r t ) ;
230 }
231 }
C.8 Application Binding Protocol - Distributed
The Java Card implementation of the ABP D discussed in section 7.6 is listed in subsequent
sections.
377