A User Centric Security Model for Tamper-Resistant Devices

C.8 Application Binding Protocol - Distributed
626 inbuffLength + this . PTLVDataOffset ) , ( short ) 16) ;
627 } catch ( Exception cE ) {
628 ISOException . throwIt ( ( short ) 0xC1C2) ;
629 }
630 }
631 return f a l s e ;
632 }
633 boolean signGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
634 i n b u f f l e n g t h , Key kpSign , short signMode ) {
635 i f ( signMode == S i g n a t u r e .MODE_SIGN) {
636 copyPointer = U t i l . arrayCopyNonAtomic ( this . SignedDataTag ,
637 ( short ) 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
638 this . SignedDataTag . l e n g t h ) ;
639 copyPointer += ( short ) 2 ;
640 phSign . i n i t ( ( RSAPrivateKey ) kpSign , S i g n a t u r e .MODE_SIGN) ;
641 s i g n l e n g t h = phSign . s i g n ( i n b u f f , ( short ) i n b u f f O f f s e t ,
642 i n b u f f l e n g t h , i n b u f f , copyPointer ) ;
643 this . shortToBytes ( this . r e c e i v i n g B u f f e r , ( short ) ( copyPointer −
644 ( short ) 2) , s i g n l e n g t h ) ;
645 copyPointer += s i g n l e n g t h ;
646 return true ;
647 } else i f ( signMode == S i g n a t u r e .MODE_VERIFY) {
648 phSign . i n i t ( ( RSAPublicKey ) kpSign , S i g n a t u r e .MODE_VERIFY) ;
649 return phSign . v e r i f y ( i n b u f f , i n b u f f O f f s e t , i n b u f f l e n g t h , i n b u f f ,
650 ( short ) ( i n b u f f O f f s e t + i n b u f f l e n g t h +
651 this . PTLVDataOffset ) , ( short ) 64) ;
652 }
653 return f a l s e ;
654 }
655 public s t a t i c short bytesToShort ( byte [ ] ArrayBytes ) {
656 return ( short ) ( ( ( ArrayBytes [ 0 ] ( short )
665 0 x0008 ) ;
666 Array [ 1 ] = ( byte ) ( inShort & ( short ) 0x00FF ) ;
667 }
668 private void shortToBytes ( byte [ ] Array , short a r r a y O f f s e t , short
669 inShort ) {
670 Array [ a r r a y O f f s e t ] = ( byte ) ( ( short ) ( inShort & ( short ) 0xFF00 ) >>
671 ( short ) 0 x0008 ) ;
672 Array [ ( short ) ( a r r a y O f f s e t + ( short ) 1) ] = ( byte ) ( inShort & ( short )
673 0x00FF ) ;
674 }
675 }
391