A User Centric Security Model for Tamper-Resistant Devices

C.9 Platform Binding Protocol
501 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
502 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
503 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
504 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
505 keyGenMacData . length , SCBSCADHGeneratedValue ,
506 ( short ) 0) ;
507 this . phMacGeneratorKey . setKey ( SCBSCADHGeneratedValue , ( short ) 0) ;
508 SCBSCADHGeneratedValue = null ;
509 JCSystem . r e q u e s t O b j e c t D e l e t i o n ( ) ;
510 }
511 void messageEncryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
512 inbuffLength ) {
513 syCipher . i n i t ( phCipherKey , Cipher .MODE_ENCRYPT,
514 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
515 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
516 this . shortToBytes ( i n b u f f , ( short ) ( i n b u f f O f f s e t − 3) , ( short )
517 syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t ,
518 inbuffLength , i n b u f f , i n b u f f O f f s e t ) ) ;
519 }
520 void phDecryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
521 inbuffLength ) {
522 syCipher . i n i t ( phCipherKey , Cipher .MODE_DECRYPT,
523 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
524 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
525 syCipher . doFinal ( i n b u f f , i n b u f f O f f s e t , inbuffLength , i n b u f f ,
526 i n b u f f O f f s e t ) ;
527 }
528 boolean macGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
529 inbuffLength , short macMode) {
530 i f (macMode == S i g n a t u r e .MODE_SIGN) {
531 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_SIGN,
532 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
533 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
534 try {
535 copyPointer = U t i l . arrayCopyNonAtomic ( this . MACedDataTag ,
536 ( short ) 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
537 this . MACedDataTag . l e n g t h ) ;
538 copyPointer += 2 ;
539 } catch ( Exception ce ) {
540 ISOException . throwIt ( ( short ) 0xFA17) ;
541 }
542 try {
543 short l e n g t h = ( short ) phMacGenerator . s i g n
544 ( this . r e c e i v i n g B u f f e r , i n b u f f O f f s e t ,
545 inbuffLength , i n b u f f , copyPointer ) ;
546 this . shortToBytes ( i n b u f f , ( short ) ( copyPointer − ( short ) 2) ,
547 l e n g t h ) ;
548 copyPointer += l e n g t h ;
549 } catch ( Exception ce ) {
550 ISOException . throwIt ( ( short ) 0 x0987 ) ;
551 }
428