A User Centric Security Model for Tamper-Resistant Devices

C.9 Platform Binding Protocol
451 pkCipher . doFinal ( ClassDH . dhBase , ( short ) 0 ,
( short ) ClassDH . dhBase . length , i n b u f f ,
452 i n b u f f O f f s e t ) ;
453 break ;
454 case GEN_DHKEY:
455 try {
456 dhKey . setExponent ( randomExponent , ( short ) 0 , ( short )
457 randomExponent . l e n g t h ) ;
458 pkCipher . i n i t ( dhKey , Cipher .MODE_ENCRYPT) ;
459 SCBSCADHGeneratedValue = JCSystem . makeTransientByteArray (
460 ( short ) ClassDH . dhModulus . length ,
461 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
462 pkCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , ( short ) ( ( short )
463 i n b u f f . l e n g t h − ( short ) this . PTLVDataOffset )
464 , SCBSCADHGeneratedValue , ( short ) 0) ;
465 }
466 catch ( Exception cE ) {
467 ISOException . throwIt ( ( short ) 0xD86E) ;
468 }
469 break ;
470 default :
471 ISOException . throwIt ( ( short ) 0x5FA1) ;
472 }
473 }
474 void keygenerator ( ) {
475 AESKey sessionGenKey = (AESKey) KeyBuilder . buildKey
476 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
477 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
478 sessionGenKey . setKey ( SCBSCADHGeneratedValue , ( short ) 0) ;
479 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
480 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
481 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
482 byte [ ] keyGenMacData = JCSystem . makeTransientByteArray ( ( short ) 64 ,
483 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
484 short p o i n t e r = 0 ;
485 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCARandomNumberArray ,
486 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
487 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCBRandomNumberArray ,
488 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
489 p o i n t e r = U t i l . arrayCopyNonAtomic ( SCBSCADHGeneratedValue , (short ) 16 ,
490 keyGenMacData , ( short ) pointer , ( short ) 16) ;
491 for ( short i = 4 8 ; i < 6 4 ; i ++) {
492 keyGenMacData [ i ] = ( byte ) 0x02 ;
493 }
494 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
495 keyGenMacData . length , SCBSCADHGeneratedValue ,
496 ( short ) 0) ;
497 this . phCipherKey . setKey ( SCBSCADHGeneratedValue , ( short ) 0) ;
498 for ( short i = 4 8 ; i < 6 4 ; i ++) {
499 keyGenMacData [ i ] = ( byte ) 0x03 ;
500 }
427