A User Centric Security Model for Tamper-Resistant Devices

C.9 Platform Binding Protocol
552 return true ;
553 } else i f (macMode == S i g n a t u r e .MODE_VERIFY) {
554 try {
555 phMacGenerator . i n i t ( phMacGeneratorKey , S i g n a t u r e .MODE_VERIFY,
556 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
557 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
558 return phMacGenerator . v e r i f y ( this . r e c e i v i n g B u f f e r ,
559 i n b u f f O f f s e t , inbuffLength , i n b u f f , ( short ) ( i n b u f f O f f s e t +
560 inbuffLength + this . PTLVDataOffset ) , ( short ) 16) ;
561 } catch ( Exception cE ) {
562 ISOException . throwIt ( ( short ) 0xC1C2) ;
563 }
564 }
565 return f a l s e ;
566 }
567 boolean signGenerate ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
568 i n b u f f l e n g t h , Key kpSign , short signMode ) {
569 i f ( signMode == S i g n a t u r e .MODE_SIGN) {
570 copyPointer = U t i l . arrayCopyNonAtomic ( this . SignedDataTag ,
571 ( short ) 0 , this . r e c e i v i n g B u f f e r , copyPointer , ( short )
572 this . SignedDataTag . l e n g t h ) ;
573 copyPointer += ( short ) 2 ;
574 phSign . i n i t ( ( RSAPrivateKey ) kpSign , S i g n a t u r e .MODE_SIGN) ;
575 s i g n l e n g t h = phSign . s i g n ( i n b u f f , ( short ) i n b u f f O f f s e t ,
576 i n b u f f l e n g t h , i n b u f f , copyPointer ) ;
577 this . shortToBytes ( this . r e c e i v i n g B u f f e r , ( short ) ( copyPointer −
578 ( short ) 2) , s i g n l e n g t h ) ;
579 copyPointer += s i g n l e n g t h ;
580 return true ;
581 } else i f ( signMode == S i g n a t u r e .MODE_VERIFY) {
582 phSign . i n i t ( ( RSAPublicKey ) kpSign , S i g n a t u r e .MODE_VERIFY) ;
583 return phSign . v e r i f y ( i n b u f f , i n b u f f O f f s e t , i n b u f f l e n g t h , i n b u f f ,
584 ( short ) ( i n b u f f O f f s e t + i n b u f f l e n g t h +
585 this . PTLVDataOffset ) , ( short ) 64) ;
586 }
587 return f a l s e ;
588 }
589 public s t a t i c short bytesToShort ( byte [ ] ArrayBytes ) {
590 return ( short ) ( ( ( ArrayBytes [ 0 ]
600 ( short ) 0 x0008 ) ;
601 Array [ ( short ) ( a r r a y O f f s e t + ( short ) 1) ] = ( byte ) ( inShort & ( short )
602 0x00FF ) ;
429