A User Centric Security Model for Tamper-Resistant Devices

C.8 Application Binding Protocol - Distributed
483 this . ServerAppRandomNumberArray ,
( short ) 0 ,
484 ( short )
485 ( this . ServerAppRandomNumberArray . l e n g t h ) ) ;
486 p o i n t e r += ( short ) ( this . ServerAppRandomNumberArray . l e n g t h ) ;
487 } else i f ( U t i l . arrayCompare ( this . ServerAppCookieTag , ( short ) 0 ,
488 i n B u f f e r , pointer , ( short ) 4) == 0) {
489 U t i l . arrayCopyNonAtomic ( i n B u f f e r , pointer ,
490 this . ServerAppCookieArray , ( short ) 0 ,
491 ( short ) ( this . ServerAppCookieArray . l e n g t h ) )
492 ;
493 p o i n t e r += ( short ) ( this . ServerAppCookieArray . l e n g t h ) ;
494 }
495 c h i l d L e f t −= ( short ) 1 ;
496 }
497 } catch ( Exception cE ) {
498 ISOException . throwIt ( ( short ) c h i l d L e f t ) ;
499 }
500 }
501 void protocolImplementation ( ) {}
502 void d h I n i t i a l i s a t i o n ( ) {
503 dhKey . setModulus ( ClassDH . dhModulus , ( short ) 0 ,
( short ) ClassDH . dhModulus . l e n g t h ) ;
504 }
505 void dhKeyConGen(byte [ ] i n b u f f , short i n b u f f O f f s e t , byte Oper_Mode)
506 {
507 switch (Oper_Mode) {
508 case GEN_KEYCONTRIBUTION: randomExponent =
509 JCSystem . makeTransientByteArray ( ( short ) 32 ,
510 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
511 randomDataGen . generateData ( randomExponent , ( short ) 0 , ( short )
512 randomExponent . l e n g t h ) ;
513 dhKey . setExponent ( randomExponent , ( short ) 0 , ( short )
514 randomExponent . l e n g t h ) ;
515 pkCipher . i n i t ( dhKey , Cipher .MODE_ENCRYPT) ;
516 pkCipher . doFinal ( ClassDH . dhBase , ( short ) 0 ,
( short ) ClassDH . dhBase . length , i n b u f f ,
517 i n b u f f O f f s e t ) ;
518 break ;
519 case GEN_DHKEY:
520 try {
521 dhKey . setExponent ( randomExponent , ( short ) 0 , ( short )
522 randomExponent . l e n g t h ) ;
523 pkCipher . i n i t ( dhKey , Cipher .MODE_ENCRYPT) ;
524 ClientAppServerAppDHGeneratedValue =
JCSystem . makeTransientByteArray (
525 ( short ) ClassDH . dhModulus . length ,
526 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
527 pkCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , ( short ) ( ( short )
528 i n b u f f . l e n g t h − ( short ) this . PTLVDataOffset )
388