A User Centric Security Model for Tamper-Resistant Devices

C.9 Platform Binding Protocol
149 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
150 SCBRandomNumberArray = JCSystem . makeTransientByteArray ( ( short ) 22 ,
151 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
152 U t i l . arrayCopyNonAtomic ( this . SCBRandomNumberTag , ( short )
153 i n i t i a l P o i n t e r , this . SCBRandomNumberArray ,
154 ( short ) i n i t i a l P o i n t e r , ( short )
155 this . SCBRandomNumberTag . l e n g t h ) ;
156 this . shortToBytes ( this . SCBRandomNumberArray , ( short ) 4 , ( short ) (
157 ( short ) this . SCBRandomNumberArray . l e n g t h − ( short )
158 PTLVDataOffset ) ) ;
159 try {
160 this . SCBCertificate = JCSystem . makeTransientByteArray ( ( short ) 86 ,
161 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
162 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCBCertificateTag ,
163 ( short ) 0 , this . SCBCertificate , ( short ) 0 ,
( short )
164 this . SCBCertificateTag . l e n g t h ) ;
165 this . shortToBytes ( this . SCBCertificate , ( short ) 4 , ( short )
166 ( this . SCBCertificate . l e n g t h − ( short ) 7) ) ;
167 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ExponentTag ,
168 ( short ) 0 , this . SCBCertificate ,
( short ) ( i n i t i a l P o i n t e r + ( short )
169 3) , ( short ) this . ExponentTag . l e n g t h ) ;
170 RSAPublicKey myPublic = ( RSAPublicKey )
171 this . phSCBKeyPair . g e t P u b l i c ( ) ;
172 short kLen = myPublic . getExponent ( this . SCBCertificate , ( short )
173 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
174 this . shortToBytes ( this . SCBCertificate , i n i t i a l P o i n t e r , kLen ) ;
175 i n i t i a l P o i n t e r += ( short ) ( kLen + ( short ) 2) ;
176 this . SCBCertificate [6]++;
177 i n i t i a l P o i n t e r = U t i l . arrayCopyNonAtomic ( this . ModulusTag ,
178 ( short ) 0 , this . SCBCertificate ,
( short ) ( i n i t i a l P o i n t e r ) , ( short )
179 this . ModulusTag . l e n g t h ) ;
180 kLen = myPublic . getModulus ( this . SCBCertificate , ( short )
181 ( i n i t i a l P o i n t e r + ( short ) 2) ) ;
182 this . shortToBytes ( this . SCBCertificate , i n i t i a l P o i n t e r , kLen ) ;
183 this . SCBCertificate [6]++;
184 SCAVerificationKey = ( RSAPublicKey ) KeyBuilder . buildKey
185 ( KeyBuilder .TYPE_RSA_PUBLIC,
186 KeyBuilder .LENGTH_RSA_512, f a l s e ) ;
187 } catch ( Exception cE ) {
188 ISOException . throwIt ( ( short ) 0 x6666 ) ;
189 }
190 }
191 public void p r o c e s s (APDU apdu )throws ISOException {
192 byte [ ] apduBuffer = apdu . g e t B u f f e r ( ) ;
193 i f ( s e l e c t i n g A p p l e t ( ) ) {
194 this . i n i t i a l i s e P r o t o c o l ( ) ;
195 return ;
196 }
421