A User Centric Security Model for Tamper-Resistant Devices

C.8 Application Binding Protocol - Distributed
484 short p o i n t e r = 0 ;
485 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . ClientAppRandomNumberArray ,
486 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
487 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . ServerAppRandomNumberArray ,
488 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
489 p o i n t e r = U t i l . arrayCopyNonAtomic ( ServerAppClientAppDHGeneratedValue ,
( short ) 16 ,
490 keyGenMacData , ( short ) pointer , ( short ) 16) ;
491 for ( short i = 4 8 ; i < 6 4 ; i ++) {
492 keyGenMacData [ i ] = ( byte ) 0x02 ;
493 }
494 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
495 keyGenMacData . length ,
ServerAppClientAppDHGeneratedValue ,
496 ( short ) 0) ;
497 this . phCipherKey . setKey ( ServerAppClientAppDHGeneratedValue , ( short ) 0) ;
498 for ( short i = 4 8 ; i < 6 4 ; i ++) {
499 keyGenMacData [ i ] = ( byte ) 0x03 ;
500 }
501 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
502 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
503 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
504 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
505 keyGenMacData . length ,
ServerAppClientAppDHGeneratedValue ,
506 ( short ) 0) ;
507 this . phMacGeneratorKey . setKey ( ServerAppClientAppDHGeneratedValue ,
( short ) 0) ;
508 ServerAppClientAppDHGeneratedValue = null ;
509 JCSystem . r e q u e s t O b j e c t D e l e t i o n ( ) ;
510 }
511 void messageEncryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
512 inbuffLength ) {
513 syCipher . i n i t ( phCipherKey , Cipher .MODE_ENCRYPT,
514 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
515 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
516 this . shortToBytes ( i n b u f f , ( short ) ( i n b u f f O f f s e t − 3) , ( short )
517 syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t ,
518 inbuffLength , i n b u f f , i n b u f f O f f s e t ) ) ;
519 }
520 void phDecryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
521 inbuffLength ) {
522 syCipher . i n i t ( phCipherKey , Cipher .MODE_DECRYPT,
523 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
524 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
525 syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , inbuffLength , i n b u f f ,
526 i n b u f f O f f s e t ) ;
527 }
528 boolean macGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
529 inbuffLength , short macMode) {
530 i f (macMode == S i g n a t u r e .MODE_SIGN) {
402