A User Centric Security Model for Tamper-Resistant Devices

C.8 Application Binding Protocol - Distributed
192 this . shortToBytes ( this . C l i e n t A p p U s e r C e r t i f i c a t e , i n i t i a l P o i n t e r ,
kLen )
193 ;
194 this . C l i e n t A p p U s e r C e r t i f i c a t e [6]++;
195 this . ServerAppIdentity = JCSystem . makeTransientByteArray ( ( short ) 24 ,
196 JCSystem .MEMORY_TYPE_TRANSIENT_RESET) ;
197 ServerAppVerificationKey = ( RSAPublicKey ) KeyBuilder . buildKey
198 ( KeyBuilder .TYPE_RSA_PUBLIC,
199 KeyBuilder .LENGTH_RSA_512, f a l s e ) ;
200 } catch ( Exception cE ) {
201 ISOException . throwIt ( ( short ) 0xCCCC) ;
202 }
203 try {
204 this . C l i e n t A p p C e r t i f i c a t e =
JCSystem . makeTransientByteArray ( ( short ) 86 ,
205 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
206 i n i t i a l P o i n t e r =
U t i l . arrayCopyNonAtomic ( this . ClientAppCertificateTag ,
207 ( short ) 0 , this . C l i e n t A p p C e r t i f i c a t e , ( short ) 0 , ( short )
208 this . C l i e n t A p p C e r t i f i c a t e T a g . l e n g t h ) ;
209 this . shortToBytes ( this . C l i e n t A p p C e r t i f i c a t e , ( short ) 4 , ( short )
210 ( this . C l i e n t A p p C e r t i f i c a t e . l e n g t h − ( short ) 7) ) ;
211 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ExponentTag ,
212 ( short ) 0 , this . C l i e n t A p p C e r t i f i c a t e , ( short ) ( i n i t i a l P o i n t e r +
213 ( short ) 3) , ( short ) this . ExponentTag . l e n g t h ) ;
214 RSAPublicKey myPublic = ( RSAPublicKey )
215 this . phClientAppKeyPair . g e t P u b l i c ( ) ;
216 short kLen = myPublic . getExponent ( this . C l i e n t A p p C e r t i f i c a t e , ( short )
217 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
218 this . shortToBytes ( this . C l i e n t A p p C e r t i f i c a t e , i n i t i a l P o i n t e r , kLen ) ;
219 i n i t i a l P o i n t e r += ( short ) ( kLen + ( short ) 2) ;
220 this . C l i e n t A p p C e r t i f i c a t e [6]++;
221 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ModulusTag ,
222 ( short ) 0 , this . C l i e n t A p p C e r t i f i c a t e , ( short ) ( i n i t i a l P o i n t e r ) ,
223 ( short ) this . ModulusTag . l e n g t h ) ;
224 kLen = myPublic . getModulus ( this . C l i e n t A p p C e r t i f i c a t e , ( short )
225 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
226 this . shortToBytes ( this . C l i e n t A p p C e r t i f i c a t e , i n i t i a l P o i n t e r , kLen ) ;
227 this . C l i e n t A p p C e r t i f i c a t e [6]++;
228 } catch ( Exception cE ) {
229 ISOException . throwIt ( ( short ) 0 x6666 ) ;
230 }
231 }
232 public void p r o c e s s (APDU apdu )throws ISOException {
233 byte [ ] apduBuffer = apdu . g e t B u f f e r ( ) ;
234 i f ( s e l e c t i n g A p p l e t ( ) ) {
235 return ;
236 }
237 i f ( apduBuffer [ ISO7816 .OFFSET_CLA] != CLA) {
238 ISOException . throwIt (SW_CLASSNOTSUPPORTED) ;
239 }
382