A User Centric Security Model for Tamper-Resistant Devices

C.9 Platform Binding Protocol
98 S i g n a t u r e phMacGenerator ;
99 S i g n a t u r e phSign ;
100 KeyPair phSCBKeyPair ;
101 KeyPair phUserKeyPair ;
102 RSAPublicKey SCAVerificationKey = null ;
103 private ProtocolHandler ( ) {
104 phMacGeneratorKey = (AESKey) KeyBuilder . buildKey
105 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
106 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
107 phMacGenerator = S i g n a t u r e . g e t I n s t a n c e
108 ( S i g n a t u r e .ALG_AES_MAC_128_NOPAD, f a l s e ) ;
109 phSign = S i g n a t u r e . g e t I n s t a n c e ( S i g n a t u r e .ALG_RSA_SHA_PKCS1, f a l s e )
110 ;
111 phSCBKeyPair = new KeyPair ( KeyPair .ALG_RSA,
112 KeyBuilder .LENGTH_RSA_512) ;
113 phUserKeyPair = new KeyPair ( KeyPair .ALG_RSA,
114 KeyBuilder .LENGTH_RSA_512) ;
115 phCipherKey = (AESKey) KeyBuilder . buildKey
116 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
117 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
118 syCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
119 f a l s e ) ;
120 randomDataGen = RandomData . g e t I n s t a n c e
121 (RandomData .ALG_SECURE_RANDOM) ;
122 pkCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD, f a l s e ) ;
123 d h I n i t i a l i s a t i o n ( ) ;
124 phSCBKeyPair . genKeyPair ( ) ;
125 phUserKeyPair . genKeyPair ( ) ;
126 }
127 public s t a t i c void i n s t a l l ( byte bArray [ ] , short bOffset , byte
128 bLength ) throws ISOException {
129 new ProtocolHandler ( ) . r e g i s t e r ( ) ;
130 }
131 public void i n i t i a l i s e P r o t o c o l ( ) {
132 short i n i t i a l P o i n t e r = 0 ;
133 SCBDHData = JCSystem . makeTransientByteArray ( ( short ) ( ( short )
134 this . ClassDH . dhModulus . l e n g t h + PTLVDataOffset ) ,
135 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
136 U t i l . arrayCopyNonAtomic ( this . SCBDHChalleneTag , ( short )
137 i n i t i a l P o i n t e r , this . SCBDHData, ( short ) 0 ,
138 ( short ) this . SCBDHChalleneTag . l e n g t h ) ;
139 this . shortToBytes (SCBDHData, ( short ) 4 , ( short ) ( ( short )
140 SCBDHData . l e n g t h − ( short ) PTLVDataOffset ) ) ;
141 this . dhKeyConGen( this . SCBDHData, this . PTLVDataOffset ,
142 ProtocolHandler .GEN_KEYCONTRIBUTION) ;
143 SCADHChanllengerArray = JCSystem . makeTransientByteArray ( ( short ) (
144 ( short ) this . ClassDH . dhModulus . l e n g t h + this . PTLVDataOffset ) ,
145 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
146 SCARandomNumberArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
147 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
148 SCACookieArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
420