A User Centric Security Model for Tamper-Resistant Devices

C.9 Platform Binding Protocol
170 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic
171 ( this . SCAUserCertificateTag , ( short ) 0 ,
172 this . SCAUserCertificate , ( short ) 0 , ( short )
173 this . SCAUserCertificateTag . l e n g t h ) ;
174 this . shortToBytes ( this . SCAUserCertificate , ( short ) 4 , ( short )
175 ( this . SCAUserCertificate . l e n g t h − ( short ) 7) ) ;
176 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ExponentTag ,
177 ( short ) 0 , this . SCAUserCertificate , ( short ) ( i n i t i a l P o i n t e r +
178 ( short ) 3) , ( short ) this . ExponentTag . l e n g t h ) ;
179 RSAPublicKey myPublic = ( RSAPublicKey )
180 this . phUserKeyPair . g e t P u b l i c ( ) ;
181 short kLen = myPublic . getExponent ( this . SCAUserCertificate ,
182 ( short ) ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
183 this . shortToBytes ( this . SCAUserCertificate , i n i t i a l P o i n t e r , kLen )
184 ;
185 i n i t i a l P o i n t e r += ( short ) ( kLen + ( short ) 2) ;
186 this . SCAUserCertificate [6]++;
187 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ModulusTag ,
188 ( short ) 0 , this . SCAUserCertificate , ( short ) ( i n i t i a l P o i n t e r ) ,
189 ( short ) this . ModulusTag . l e n g t h ) ;
190 kLen = myPublic . getModulus ( this . SCAUserCertificate , ( short )
191 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
192 this . shortToBytes ( this . SCAUserCertificate , i n i t i a l P o i n t e r , kLen )
193 ;
194 this . SCAUserCertificate [6]++;
195 this . SCBIdentity = JCSystem . makeTransientByteArray ( ( short ) 24 ,
196 JCSystem .MEMORY_TYPE_TRANSIENT_RESET) ;
197 SCBVerificationKey = ( RSAPublicKey ) KeyBuilder . buildKey
198 ( KeyBuilder .TYPE_RSA_PUBLIC,
199 KeyBuilder .LENGTH_RSA_512, f a l s e ) ;
200 } catch ( Exception cE ) {
201 ISOException . throwIt ( ( short ) 0xCCCC) ;
202 }
203 try {
204 this . SCACertificate = JCSystem . makeTransientByteArray ( ( short ) 86 ,
205 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
206 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCACertificateTag ,
207 ( short ) 0 , this . SCACertificate , ( short ) 0 , ( short )
208 this . SCACertificateTag . l e n g t h ) ;
209 this . shortToBytes ( this . SCACertificate , ( short ) 4 , ( short )
210 ( this . SCACertificate . l e n g t h − ( short ) 7) ) ;
211 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ExponentTag ,
212 ( short ) 0 , this . SCACertificate , ( short ) ( i n i t i a l P o i n t e r +
213 ( short ) 3) , ( short ) this . ExponentTag . l e n g t h ) ;
214 RSAPublicKey myPublic = ( RSAPublicKey )
215 this . phSCAKeyPair . g e t P u b l i c ( ) ;
216 short kLen = myPublic . getExponent ( this . SCACertificate , ( short )
217 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
218 this . shortToBytes ( this . SCACertificate , i n i t i a l P o i n t e r , kLen ) ;
219 i n i t i a l P o i n t e r += ( short ) ( kLen + ( short ) 2) ;
220 this . SCACertificate [6]++;
408