A User Centric Security Model for Tamper-Resistant Devices

C.8 Application Binding Protocol - Distributed
531 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_SIGN,
532 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
533 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
534 try {
535 copyPointer = U t i l . arrayCopyNonAtomic ( this . MACedDataTag ,
536 ( short ) 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
537 this . MACedDataTag . l e n g t h ) ;
538 copyPointer += 2 ;
539 } catch ( Exception ce ) {
540 ISOException . throwIt ( ( short ) 0xFA17) ;
541 }
542 try {
543 short l e n g t h = ( short ) phMacGenerator . s i g n
544 ( this . r e c e i v i n g B u f f e r , i n b u f f O f f s e t ,
545 inbuffLength , i n b u f f , copyPointer ) ;
546 this . shortToBytes ( i n b u f f , ( short ) ( copyPointer − ( short ) 2) ,
547 l e n g t h ) ;
548 copyPointer += l e n g t h ;
549 } catch ( Exception ce ) {
550 ISOException . throwIt ( ( short ) 0 x0987 ) ;
551 }
552 return true ;
553 } else i f (macMode == S i g n a t u r e .MODE_VERIFY) {
554 try {
555 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_VERIFY,
556 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
557 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
558 return phMacGenerator . v e r i f y ( this . r e c e i v i n g B u f f e r ,
559 i n b u f f O f f s e t , inbuffLength , i n b u f f , ( short ) ( i n b u f f O f f s e t +
560 inbuffLength + this . PTLVDataOffset ) , ( short ) 16) ;
561 } catch ( Exception cE ) {
562 ISOException . throwIt ( ( short ) 0xC1C2) ;
563 }
564 }
565 return f a l s e ;
566 }
567 boolean signGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
568 i n b u f f l e n g t h , Key kpSign , short signMode ) {
569 i f ( signMode == S i g n a t u r e .MODE_SIGN) {
570 copyPointer = U t i l . arrayCopyNonAtomic ( this . SignedDataTag ,
571 ( short ) 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
572 this . SignedDataTag . l e n g t h ) ;
573 copyPointer += ( short ) 2 ;
574 phSign . i n i t ( ( RSAPrivateKey ) kpSign , S i g n a t u r e .MODE_SIGN) ;
575 s i g n l e n g t h = phSign . s i g n ( i n b u f f , ( short ) i n b u f f O f f s e t ,
576 i n b u f f l e n g t h , i n b u f f , copyPointer ) ;
577 this . shortToBytes ( this . r e c e i v i n g B u f f e r , ( short ) ( copyPointer −
578 ( short ) 2) , s i g n l e n g t h ) ;
579 copyPointer += s i g n l e n g t h ;
580 return true ;
581 } else i f ( signMode == S i g n a t u r e .MODE_VERIFY) {
403