A User Centric Security Model for Tamper-Resistant Devices

C.9 Platform Binding Protocol
524 SCASCBDHGeneratedValue = JCSystem . makeTransientByteArray (
525 ( short ) ClassDH . dhModulus . length ,
526 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
527 pkCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , ( short ) ( ( short )
528 i n b u f f . l e n g t h − ( short ) this . PTLVDataOffset )
529 , SCASCBDHGeneratedValue , ( short ) 0) ;
530 }
531 catch ( Exception cE ) {
532 ISOException . throwIt ( ( short ) 0xD86E) ;
533 }
534 break ;
535 default :
536 ISOException . throwIt ( ( short ) 0x5FA1) ;
537 }
538 }
539 void keygenerator ( ) {
540 AESKey sessionGenKey = (AESKey) KeyBuilder . buildKey
541 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
542 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
543 sessionGenKey . setKey ( SCASCBDHGeneratedValue , ( short ) 0) ;
544 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
545 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
546 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
547 byte [ ] keyGenMacData = JCSystem . makeTransientByteArray ( ( short ) 64 ,
548 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
549 short p o i n t e r = 0 ;
550 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCBRandomNumberArray ,
551 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
552 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCARandomNumberArray ,
553 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
554 p o i n t e r = U t i l . arrayCopyNonAtomic ( SCASCBDHGeneratedValue , (short )
555 16 , keyGenMacData , ( short ) pointer , ( short ) 16) ;
556 for ( short i = 4 8 ; i < 6 4 ; i ++) {
557 keyGenMacData [ i ] = ( byte ) 0x02 ;
558 }
559 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
560 keyGenMacData . length , SCASCBDHGeneratedValue ,
561 ( short ) 0) ;
562 this . phCipherKey . setKey ( SCASCBDHGeneratedValue , ( short ) 0) ;
563 for ( short i = 4 8 ; i < 6 4 ; i ++) {
564 keyGenMacData [ i ] = ( byte ) 0x03 ;
565 }
566 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
567 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
568 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
569 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
570 keyGenMacData . length , SCASCBDHGeneratedValue ,
571 ( short ) 0) ;
572 this . phMacGeneratorKey . setKey ( SCASCBDHGeneratedValue , ( short ) 0) ;
573 SCASCBDHGeneratedValue = null ;
574 JCSystem . r e q u e s t O b j e c t D e l e t i o n ( ) ;
415