**__BE CAREFUL WHEN USING ZORRO, IT IS NOT SECURE__** \
4 | Read more here: https://eprint.iacr.org/2014/220.pdf
5 |
6 | ## Project Status
7 | - [x] Code is working
8 | - [x] Code is optimized
9 | - [x] Code is beautified
10 | - [x] Usage info is provided
11 | - [x] Example is provided
12 | - [x] Speed profiling data are collected & interpreted
13 | - [x] Memory profiling data are collected & interpreted
14 | - [x] Side-channel vulnerability data are collected
15 | - [x] Diploma thesis article is written
16 |
17 | ## Briefly about Zorro
18 | Zorro is a lightweight 128-bit block cipher whose goal is to provide an AES-like encryption on JavaCards
19 | while being able to be masked against side-channel attacks more efficiently.
20 |
21 | ## Usage
22 | Zorro extends the Cipher class, therefore you are able to use it the same way you would use any other block cipher, such as AES.
23 | The constructor is protected, therefore the only way to instantiate Zorro is through the getInstance() method.
24 | ### Interface:
25 | Create ZorroCipher instance:
26 | ````java
27 | public static ZorroCipher getInstance()
28 |
29 | return // the instance of Zorro cipher
30 | ````
31 | Initialize ZorroCipher with key for encryption/decryption:
32 | ```` java
33 | public void init(Key theKey, byte theMode)
34 |
35 | theKey // initialized 128-bit AESKey with 128 bits of data
36 | theMode // either Cipher.MODE_ENCRYPT or Cipher.MODE_DECRYPT
37 | throws UNINITIALIZED_KEY // if theKey wasn't properly initialized yet
38 | throws ILLEGAL_VALUE // if theKey is not a 128-bit AESKey
39 | ````
40 | Encrypt/decrypt supported data:
41 | ````java
42 | public short doFinal(byte[] inBuff, short inOffset, short inLength, byte[] outBuff, short outOffset)
43 |
44 | inBuff // input buffer
45 | inOffset // input buffer offset
46 | inLength // input buffer length
47 | outBuff // output buffer
48 | outOffset // output buffer offset
49 | return // the length of processed data (same as inLength if properly executed)
50 | throws UNINITIALIZED_KEY // if cipher wasn't initialized using the init() method.
51 | throws ILLEGAL_VALUE // if inLength is not a multiple of 16 (because Zorro is NOPAD)
52 | throws INVALID_INIT // if mode is neither MODE_ENCRYPT nor MODE_DECRYPT
53 | ````
54 | Get ZorroCipher algorithm tag:
55 | ```` java
56 | public byte getAlgorithm()
57 |
58 | return ALG_ZORRO // 18
59 | ````
60 | Update (not supported):
61 | ```` java
62 | public short update(byte[] inBuff, short inOffset, short inLength, byte[] outBuff, short outOffset)
63 |
64 | throws ILLEGAL_USE // always throws this
65 | // this method is not supported on lightweight Zorro cipher (just use doFinal)
66 | ````
67 | Initialize with array (not supported)
68 | ```` java
69 | public void init(Key theKey, byte theMode, byte[] bArray, short bOff, short bLen)
70 | throws ILLEGAL_USE // always throws this
71 | // this method is not supported on lightweight Zorro cipher (use supported init)
72 | ````
73 |
74 | ## Example
75 | Simple example how to create, instantiate and use ZorroCipher in the JavaCard applet:
76 | ```` java
77 | //create entities
78 | private Cipher m_zorro = null; // cipher
79 | private AESKey m_aes = null; // key
80 |
81 | //instantiate the 128-bit cipher and key
82 | m_zorro = ZorroCipher.getInstance();
83 | m_aes = (AESKey) KeyBuilder.buildKey(KeyBuilder.TYPE_AES, KeyBuilder.LENGTH_AES_128, false);
84 |
85 | //init aes key and Zorro cipher for encrpytion
86 | m_aes.setKey(m_ramArray, (short) 0);
87 | m_zorro.init(m_aes, Cipher.MODE_ENCRYPT);
88 |
89 | //encrypt 32 bytes of data
90 | short ret = m_zorro.doFinal(m_ramArray1, (short) 0, (short) 32, apdubuf, ISO7816.OFFSET_CDATA);
91 | ````
92 |
93 | ## Optimizations used
94 | * DESKey changed to AESKey (no impact on performance, but is more true to the nature of Zorro)
95 | * Changed visibility of non-interface methods to package-only (safer)
96 | * Temporary variables are now all stored in one array (faster)
97 | * Minimized number of method parameters (worse readability but faster)
98 | * Beautified code (better readability) (not complete)
99 | * Created proper Cipher interface
100 |
101 | ## Performance measurement results
102 | ### Speed
103 | Old Zorro encrypting 16 bytes of data:
104 | ```
105 | init: 7 ms
106 |
107 | getKey: 2 ms
108 | Encrypt:
109 | xor key: 4 ms
110 | mix1Column: 24 ms
111 | mix4Columns: 89 ms
112 | 1 round: 97 ms
113 | 4 rounds: 389 ms
114 | 24 rounds: 2338 ms
115 |
116 | encrypt: 2361 ms
117 | cleanup: n/a
118 | ```
119 | New Zorro encrypting 16 bytes of data:
120 | ```
121 | init: 7 ms
122 |
123 | getKey: 2 ms
124 | Encrypt:
125 | xor key: 4 ms
126 | mix1Column: 22 ms
127 | mix4Columns: 80 ms
128 | 1 round: 93 ms
129 | 4 rounds: 375 ms
130 | 24 rounds: 2232 ms
131 |
132 | encrypt: 2259 ms
133 | cleanup: 4 ms
134 | ```
135 | The new - optimized Zorro is about 100 ms faster. This is because of loop unrolling and better handling of arrays. We also added cleanup for safety reasons, which takes only 4 ms therefore is negligible time-wise. Alltogether we report a 4.5% speed increase.
136 |
137 | We see that whole encryption takes around 2250 ms. This is split into 6 steps, each containing 4 rounds. Each step lasts 375 ms. Each round lasts 93 ms, split into 4 functions: SubBytes, AddConstant and ShiftRows last together about 13 ms, where MixColumns itself lasts 80 ms. In MixColumns, there are 4 identical steps, each lasting about 20-22 ms. Each step is 16 multiplications over Galois field (mGF). Each multiplication is over 1 ms long. Since we perform ``16 x 4 x 4 x 6 = 1546`` multiplications, the computation can't last less than that many milliseconds. All other computations also take some time (although that's only a small portion), resulting in an average 2250 ms long computation. So mGF is what takes so long and cannot be further optimized.
138 |
139 | ### Memory
140 |
141 | ```
142 | 40 bytes
143 | ```
144 | Zorro only needs 40 bytes to save the state. Nothing more.
145 |
--------------------------------------------------------------------------------
/AEAD/ASCON/src/AsconApplet.java:
--------------------------------------------------------------------------------
1 | /*
2 | * PACKAGEID: 41 53 43 4F 4E 3A // ASCON:
3 | * APPLETID: 41 53 43 4F 4E 3A 50 04 47 // ASCON:PKG
4 | */
5 | package ascon;
6 |
7 | //import javacard.framework.*;
8 | import javacard.framework.APDU;
9 | import javacard.framework.ISO7816;
10 | import javacard.framework.ISOException;
11 | import javacard.framework.JCSystem;
12 | import javacard.framework.Util;
13 |
14 |
15 | /**
16 | *
17 | * @author rajesh
18 | * @review matej
19 | */
20 | public class AsconApplet extends javacard.framework.Applet
21 | {
22 | // MAIN INSTRUCTION CLASS
23 | final static byte CLA_SIMPLEAPPLET = (byte) 0xB0;
24 |
25 | // INSTRUCTIONS
26 | final static byte INS_ASCONENCRYPTION = (byte) 0x61;
27 | final static byte INS_ASCONDECRYPTION = (byte) 0x62;
28 |
29 | final static short ARRAY_LENGTH = (short) 0xff;
30 | final static byte AES_BLOCK_LENGTH = (short) 0x16;
31 |
32 | final static short SW_BAD_TEST_DATA_LEN = (short) 0x6680;
33 | final static short SW_KEY_LENGTH_BAD = (short) 0x6715;
34 | final static short SW_CIPHER_DATA_LENGTH_BAD = (short) 0x6710;
35 | final static short SW_OBJECT_NOT_AVAILABLE = (short) 0x6711;
36 | final static short SW_BAD_PIN = (short) 0x6900;
37 |
38 | private AsconCore myascon = null; //ASCON engine
39 |
40 | //ASCON Parameters
41 | byte[] AD = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00};
42 | short ADLEN = (short)AD.length;
43 | byte[] NSEC = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
44 | byte[] NPUB = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
45 | byte[] KEY = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
46 | // TEMPORARRY ARRAY IN RAM
47 | private byte m_ramArray[] = null;
48 | // PERSISTENT ARRAY IN EEPROM
49 | private byte m_dataArray[] = null;
50 |
51 | protected AsconApplet(byte[] buffer, short offset, byte length)
52 | {
53 | // data offset is used for application specific parameter.
54 | // initialization with default offset (AID offset).
55 | short dataOffset = offset;
56 | boolean isOP2 = false;
57 |
58 | if(length > 9) {
59 |
60 | // shift to privilege offset
61 | dataOffset += (short)( 1 + buffer[offset]);
62 | // finally shift to Application specific offset
63 | dataOffset += (short)( 1 + buffer[dataOffset]);
64 |
65 | // go to proprietary data
66 | dataOffset++;
67 |
68 | // PERSISTENT BUFFER IN EEPROM
69 | m_dataArray = new byte[ARRAY_LENGTH];
70 | Util.arrayFillNonAtomic(m_dataArray, (short) 0, ARRAY_LENGTH, (byte) 0);
71 | // TEMPORARY BUFFER USED FOR FAST OPERATION WITH MEMORY LOCATED IN RAM
72 | m_ramArray = JCSystem.makeTransientByteArray((short) 260, JCSystem.CLEAR_ON_DESELECT);
73 |
74 | //Create ASCON OBJECT
75 | myascon = new AsconCore();
76 |
77 | // update flag
78 | isOP2 = true;
79 |
80 | } else {}
81 | register();
82 | }
83 |
84 | /**
85 | * Method installing the applet.
86 | * @param bArray the array containing installation parameters
87 | * @param bOffset the starting offset in bArray
88 | * @param bLength the length in bytes of the data parameter in bArray
89 | */
90 | public static void install(byte[] bArray, short bOffset, byte bLength) throws ISOException
91 | {
92 | new AsconApplet(bArray, bOffset, bLength);
93 | }
94 |
95 | @Override
96 | public boolean select()
97 | {
98 | return true;
99 | }
100 |
101 | @Override
102 | public void deselect()
103 | {}
104 |
105 | @Override
106 | public void process(APDU apdu) throws ISOException
107 | {
108 | // get the APDU buffer
109 | byte[] apduBuffer = apdu.getBuffer();
110 |
111 | // ignore the applet select command dispatched to the process
112 | if (selectingApplet())
113 | return;
114 |
115 | // APDU instruction parser
116 | if (apduBuffer[ISO7816.OFFSET_CLA] == CLA_SIMPLEAPPLET) {
117 | switch ( apduBuffer[ISO7816.OFFSET_INS] )
118 | {
119 | case INS_ASCONENCRYPTION: ASCONEncryption(apdu); break;
120 | case INS_ASCONDECRYPTION: ASCONDecryption(apdu); break;
121 | default :
122 | // The INS code is not supported by the dispatcher
123 | ISOException.throwIt( ISO7816.SW_INS_NOT_SUPPORTED ) ;
124 | break ;
125 |
126 | }
127 | }
128 | else ISOException.throwIt( ISO7816.SW_CLA_NOT_SUPPORTED);
129 | }
130 |
131 |
132 | public void ASCONEncryption(APDU apdu){
133 | byte[] apdubuf = apdu.getBuffer();
134 | short dataLen = apdu.setIncomingAndReceive();
135 |
136 | // Copy message to m_ramArray for encryption
137 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArray, (short)0, dataLen);
138 |
139 | // ASCON Encryption
140 | myascon.encrypt(apdubuf, (short)0, m_ramArray, dataLen, AD, ADLEN, NSEC, NPUB, KEY);
141 |
142 | // SEND OUTGOING BUFFER
143 | apdu.setOutgoingAndSend((short)0, (short)(dataLen+16));
144 | }
145 |
146 |
147 | public void ASCONDecryption(APDU apdu){
148 | byte[] apdubuf = apdu.getBuffer();
149 | short dataLen = apdu.setIncomingAndReceive();
150 |
151 | // Copy cipher to m_ramArray for decryption
152 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArray, (short)0, dataLen);
153 |
154 | // ASCON Decryption
155 | myascon.decrypt(apdubuf, (short)0, NSEC, m_ramArray, dataLen, AD, ADLEN, NPUB, KEY);
156 |
157 | // SEND OUTGOING BUFFER
158 | apdu.setOutgoingAndSend((short)0, (short)(dataLen-16));
159 | }
160 |
161 |
162 | }
163 |
--------------------------------------------------------------------------------
/AEAD/MORUS/src/MorusApplet.java:
--------------------------------------------------------------------------------
1 | /*
2 | * PACKAGEID: 4D 4F 52 55 53 3A // MORUS:
3 | * APPLETID: 4D 4F 52 55 53 3A 50 04 47 // MORUS:PKG
4 | */
5 | package morus;
6 |
7 | import javacard.framework.APDU;
8 | import javacard.framework.ISO7816;
9 | import javacard.framework.ISOException;
10 | import javacard.framework.JCSystem;
11 | import javacard.framework.Util;
12 |
13 |
14 | /**
15 | *
16 | * @author rajesh
17 | */
18 | public class MorusApplet extends javacard.framework.Applet
19 | {
20 | // MAIN INSTRUCTION CLASS
21 | final static byte CLA_SIMPLEAPPLET = (byte) 0xB0;
22 |
23 | // INSTRUCTIONS
24 | final static byte INS_MORUSENCRYPTION = (byte) 0x61;
25 | final static byte INS_MORUSDECRYPTION = (byte) 0x62;
26 |
27 | final static short ARRAY_LENGTH = (short) 0xff;
28 | final static byte AES_BLOCK_LENGTH = (short) 0x16;
29 |
30 | final static short SW_BAD_TEST_DATA_LEN = (short) 0x6680;
31 | final static short SW_KEY_LENGTH_BAD = (short) 0x6715;
32 | final static short SW_CIPHER_DATA_LENGTH_BAD = (short) 0x6710;
33 | final static short SW_OBJECT_NOT_AVAILABLE = (short) 0x6711;
34 | final static short SW_BAD_PIN = (short) 0x6900;
35 |
36 | private MorusCore m_morus = null;
37 |
38 | //ASCON Parameters-- Encryption
39 | public byte[] AD = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02};
40 | public short ADLEN = (short)AD.length;
41 | public byte[] NSEC = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
42 | public byte[] NPUB = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
43 | public byte[] KEY = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
44 |
45 | //ASCON Parameters-- Decryption
46 | public byte[] AD1 = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02};
47 | public short ADLEN1 = (short)AD1.length;
48 | public byte[] NSEC1 = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
49 | public byte[] NPUB1 = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
50 | public byte[] KEY1 = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
51 |
52 |
53 | // TEMPORARRY ARRAY IN RAM
54 | private byte m_ramArray[] = null;
55 |
56 | /**
57 | * AezApplet constructor
58 | * Only this class's install method should create the applet object.
59 | */
60 | protected MorusApplet(byte[] buffer, short offset, byte length)
61 | {
62 | // data offset is used for application specific parameter.
63 | // initialization with default offset (AID offset).
64 | short dataOffset = offset;
65 | boolean isOP2 = false;
66 |
67 | if(length > 9) {
68 |
69 | // shift to privilege offset
70 | dataOffset += (short)( 1 + buffer[offset]);
71 | // finally shift to Application specific offset
72 | dataOffset += (short)( 1 + buffer[dataOffset]);
73 |
74 | // go to proprietary data
75 | dataOffset++;
76 |
77 | // TEMPORARY BUFFER USED FOR FAST OPERATION WITH MEMORY LOCATED IN RAM
78 | m_ramArray = JCSystem.makeTransientByteArray((short) 260, JCSystem.CLEAR_ON_DESELECT);
79 |
80 | //Create ASCON OBJECT
81 | m_morus = new MorusCore();
82 |
83 | // update flag
84 | isOP2 = true;
85 |
86 | } else {}
87 | register();
88 | }
89 |
90 | public static void install(byte[] bArray, short bOffset, byte bLength) throws ISOException
91 | {
92 | new MorusApplet (bArray, bOffset, bLength);
93 | }
94 |
95 | public boolean select()
96 | {
97 | return true;
98 | }
99 |
100 | public void deselect() {}
101 |
102 | public void process(APDU apdu) throws ISOException
103 | {
104 | // get the APDU buffer
105 | byte[] apduBuffer = apdu.getBuffer();
106 |
107 | // ignore the applet select command dispatched to the process
108 | if (selectingApplet())
109 | return;
110 |
111 | // APDU instruction parser
112 | if (apduBuffer[ISO7816.OFFSET_CLA] == CLA_SIMPLEAPPLET) {
113 | switch ( apduBuffer[ISO7816.OFFSET_INS] )
114 | {
115 | case INS_MORUSENCRYPTION: MORUSEncryption(apdu); break;
116 | case INS_MORUSDECRYPTION: MORUSDecryption(apdu); break;
117 | default :
118 | // The INS code is not supported by the dispatcher
119 | ISOException.throwIt( ISO7816.SW_INS_NOT_SUPPORTED ) ;
120 | break ;
121 |
122 | }
123 | }
124 | else ISOException.throwIt( ISO7816.SW_CLA_NOT_SUPPORTED);
125 | }
126 |
127 |
128 | public void MORUSEncryption(APDU apdu){
129 | byte[] apdubuf = apdu.getBuffer();
130 | short dataLen = apdu.setIncomingAndReceive();
131 |
132 | // Copy message to m_ramArray for encryption
133 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArray, (short)0, dataLen);
134 |
135 | m_morus.init(NSEC, NPUB, KEY);
136 |
137 | // MORUS Encryption
138 | m_morus.encrypt(m_ramArray, (short)0, m_ramArray, dataLen, AD, ADLEN);
139 | Util.arrayCopyNonAtomic(m_ramArray, (short)0, apdubuf, (short)0, (short)(dataLen+16));
140 |
141 | // SEND OUTGOING BUFFER
142 | apdu.setOutgoingAndSend((short)0, (short)(dataLen+16));
143 | }
144 |
145 |
146 | public void MORUSDecryption(APDU apdu){
147 | byte[] apdubuf = apdu.getBuffer();
148 | short dataLen = apdu.setIncomingAndReceive();
149 |
150 | // Copy cipher to m_ramArray for decryption
151 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArray, (short)0, dataLen);
152 |
153 | m_morus.init(NSEC1, NPUB1, KEY1);
154 | // MORUS Decryption
155 | m_morus.decrypt(m_ramArray, dataLen, m_ramArray, (short)0, AD1, ADLEN1);
156 | Util.arrayCopyNonAtomic(m_ramArray, (short)0, apdubuf, (short)0, (short)(dataLen-16));
157 |
158 | // SEND OUTGOING BUFFER
159 | apdu.setOutgoingAndSend((short)0, (short)(dataLen-16));
160 | }
161 | }
162 |
--------------------------------------------------------------------------------
/AEAD/AEGIS/src/AegisApplet.java:
--------------------------------------------------------------------------------
1 | /*
2 | * PACKAGEID: 41 45 47 49 53 3A // AEGIS:
3 | * APPLETID: 41 45 47 49 53 3A 50 04 47 // AEGIS:PKG
4 | */
5 | package aegis;
6 |
7 | //import javacard.framework.*;
8 | import javacard.framework.APDU;
9 | import javacard.framework.ISO7816;
10 | import javacard.framework.ISOException;
11 | import javacard.framework.JCSystem;
12 | import javacard.framework.Util;
13 |
14 |
15 | /**
16 | *
17 | * @author rajesh
18 | * @review matej
19 | */
20 | public class AegisApplet extends javacard.framework.Applet
21 | {
22 | // MAIN INSTRUCTION CLASS
23 | final static byte CLA_SIMPLEAPPLET = (byte) 0xB0;
24 |
25 | // INSTRUCTIONS
26 | final static byte INS_AEGISENCRYPTION = (byte) 0x61;
27 | final static byte INS_AEGISDECRYPTION = (byte) 0x62;
28 |
29 | final static short ARRAY_LENGTH = (short) 0xff;
30 | final static byte AES_BLOCK_LENGTH = (short) 0x16;
31 |
32 | final static short SW_BAD_TEST_DATA_LEN = (short) 0x6680;
33 | final static short SW_KEY_LENGTH_BAD = (short) 0x6715;
34 | final static short SW_CIPHER_DATA_LENGTH_BAD = (short) 0x6710;
35 | final static short SW_OBJECT_NOT_AVAILABLE = (short) 0x6711;
36 |
37 | private AegisCore myaegis = null; //AEGIS engine
38 |
39 | //AEGIS Parameters-- Encryption
40 | byte[] AD = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02};
41 | short ADLEN = (short)AD.length;
42 | byte[] NSEC = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
43 | byte[] NPUB = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
44 | byte[] KEY = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
45 | short KEYLEN = (short)KEY.length;
46 |
47 | /*AEGIS Parameters-- Decryption
48 | byte[] AD1 = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02};
49 | short ADLEN1 = (short)AD1.length;
50 | byte[] NSEC1 = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
51 | byte[] NPUB1 = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
52 | byte[] KEY1 = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
53 | short KEYLEN1 = (short)KEY1.length;*/
54 |
55 | // TEMPORARRY ARRAY IN RAM
56 | private byte m_ramArrayPt[] = null; //plaintext array
57 | private byte m_ramArrayCt[] = null; //ciphertext array
58 |
59 | //constructor
60 | protected AegisApplet(byte[] buffer, short offset, byte length)
61 | {
62 |
63 | short dataOffset = offset;
64 | boolean isOP2 = false;
65 |
66 | if(length > 9) {
67 |
68 | // shift to privilege offset
69 | dataOffset += (short)( 1 + buffer[offset]);
70 | // finally shift to Application specific offset
71 | dataOffset += (short)( 1 + buffer[dataOffset]);
72 |
73 | // go to proprietary data
74 | dataOffset++;
75 |
76 | // TEMPORARY BUFFER USED FOR FAST OPERATION WITH MEMORY LOCATED IN RAM
77 | m_ramArrayPt = JCSystem.makeTransientByteArray((short) 260, JCSystem.CLEAR_ON_DESELECT);
78 | m_ramArrayCt = JCSystem.makeTransientByteArray((short) 260, JCSystem.CLEAR_ON_DESELECT);
79 |
80 | //Create AEGIS OBJECT
81 | myaegis = new AegisCore();
82 |
83 | // update flag
84 | isOP2 = true;
85 |
86 | } else {}
87 | register();
88 | }
89 |
90 | public static void install(byte[] bArray, short bOffset, byte bLength) throws ISOException
91 | {
92 | new AegisApplet(bArray, bOffset, bLength);
93 | }
94 |
95 | public boolean select()
96 | {
97 | return true;
98 | }
99 |
100 | public void deselect()
101 | {
102 | return;
103 | }
104 |
105 | public void process(APDU apdu) throws ISOException
106 | {
107 | // get the APDU buffer
108 | byte[] apduBuffer = apdu.getBuffer();
109 |
110 | // ignore the applet select command dispatched to the process
111 | if (selectingApplet())
112 | return;
113 |
114 | // APDU instruction parser
115 | if (apduBuffer[ISO7816.OFFSET_CLA] == CLA_SIMPLEAPPLET) {
116 | switch ( apduBuffer[ISO7816.OFFSET_INS] )
117 | {
118 | case INS_AEGISENCRYPTION: AEGISEncryption(apdu); break;
119 | case INS_AEGISDECRYPTION: AEGISDecryption(apdu); break;
120 | default :
121 | ISOException.throwIt( ISO7816.SW_INS_NOT_SUPPORTED);
122 | break ;
123 |
124 | }
125 | }
126 | else ISOException.throwIt(ISO7816.SW_CLA_NOT_SUPPORTED);
127 | }
128 |
129 |
130 | public void AEGISEncryption(APDU apdu){
131 | byte[] apdubuf = apdu.getBuffer();
132 | short dataLen = apdu.setIncomingAndReceive();
133 |
134 | // Copy message to m_ramArrayPt for encryption
135 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArrayPt, (short)0, dataLen);
136 |
137 | myaegis.init(NSEC, NPUB, KEY, KEYLEN);
138 |
139 | // AEGIS Encryption
140 | myaegis.encrypt(m_ramArrayCt, (short)0, m_ramArrayPt, dataLen, AD, ADLEN);
141 |
142 | // Copy ciphertext
143 | Util.arrayCopyNonAtomic(m_ramArrayCt, (short)0, apdubuf, (short)0, (short)(dataLen+16));
144 |
145 | // SEND OUTGOING BUFFER
146 | apdu.setOutgoingAndSend((short)0, (short)(dataLen+16));
147 | }
148 |
149 |
150 | public void AEGISDecryption(APDU apdu){
151 | byte[] apdubuf = apdu.getBuffer();
152 | short dataLen = apdu.setIncomingAndReceive();
153 |
154 | // Copy cipher to m_ramArrayCt for decryption
155 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArrayCt, (short)0, dataLen);
156 |
157 | myaegis.init(NSEC, NPUB, KEY, KEYLEN);
158 | // AEGIS Decryption
159 | myaegis.decrypt(m_ramArrayCt, dataLen, m_ramArrayPt, (short)0, AD, ADLEN);
160 |
161 | // Copy retrieved message (plaintext)
162 | Util.arrayCopyNonAtomic(m_ramArrayPt, (short)0, apdubuf, (short)0, (short)(dataLen-16));
163 |
164 | // SEND OUTGOING BUFFER
165 | apdu.setOutgoingAndSend((short)0, (short)(dataLen-16));
166 | }
167 | }
168 |
--------------------------------------------------------------------------------
/AEAD/ACORN/src/AcornApplet.java:
--------------------------------------------------------------------------------
1 | /*
2 | * PACKAGEID: 43 4C 4F 43 4B 3A // ACORN:
3 | * APPLETID: 43 4C 4F 43 4B 3A 50 04 47 // ACORN:PKG
4 | */
5 | package acorn;
6 |
7 | import javacard.framework.APDU;
8 | import javacard.framework.ISO7816;
9 | import javacard.framework.ISOException;
10 | import javacard.framework.JCSystem;
11 | import javacard.framework.Util;
12 |
13 |
14 | /**
15 | *
16 | * @author rajesh
17 | * @review matej
18 | */
19 | public class AcornApplet extends javacard.framework.Applet
20 | {
21 | // MAIN INSTRUCTION CLASS
22 | final static byte CLA_SIMPLEAPPLET = (byte) 0xB0;
23 |
24 | // INSTRUCTIONS
25 | final static byte INS_ACORNENCRYPTION = (byte) 0x61;
26 | final static byte INS_ACORNDECRYPTION = (byte) 0x62;
27 |
28 | final static short ARRAY_LENGTH = (short) 0xff;
29 | final static byte AES_BLOCK_LENGTH = (short) 0x16;
30 |
31 | final static short SW_BAD_TEST_DATA_LEN = (short) 0x6680;
32 | final static short SW_KEY_LENGTH_BAD = (short) 0x6715;
33 | final static short SW_CIPHER_DATA_LENGTH_BAD = (short) 0x6710;
34 | final static short SW_OBJECT_NOT_AVAILABLE = (short) 0x6711;
35 |
36 | private AcornCore m_acorn = null; //ACORN engine
37 |
38 | //ACORN Parameters-- Encryption
39 | byte[] AD = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02};
40 | short ADLEN = (short)AD.length;
41 | byte[] NSEC = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
42 | byte[] NPUB = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
43 | byte[] KEY = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
44 | short KEYLEN = (short)KEY.length;
45 |
46 | //ACORN Parameters-- Decryption
47 | byte[] AD1 = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02};
48 | short ADLEN1 = (short)AD1.length;
49 | byte[] NSEC1 = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
50 | byte[] NPUB1 = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
51 | byte[] KEY1 = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
52 | short KEYLEN1 = (short)KEY1.length;
53 |
54 | // TEMPORARRY ARRAY IN RAM
55 | private byte m_ramArrayPt[] = null;
56 | private byte m_ramArrayCt[] = null;
57 | // PERSISTENT ARRAY IN EEPROM
58 |
59 | /**
60 | * AcornApplet constructor
61 | * Only this class's install method should create the applet object.
62 | */
63 | protected AcornApplet(byte[] buffer, short offset, byte length)
64 | {
65 | // data offset is used for application specific parameter.
66 | // initialization with default offset (AID offset).
67 | short dataOffset = offset;
68 | boolean isOP2 = false;
69 |
70 | if(length > 9) {
71 |
72 | // shift to privilege offset
73 | dataOffset += (short)( 1 + buffer[offset]);
74 | // finally shift to Application specific offset
75 | dataOffset += (short)( 1 + buffer[dataOffset]);
76 |
77 | // go to proprietary data
78 | dataOffset++;
79 |
80 | // TEMPORARY BUFFER USED FOR FAST OPERATION WITH MEMORY LOCATED IN RAM
81 | m_ramArrayPt = JCSystem.makeTransientByteArray((short) 260, JCSystem.CLEAR_ON_DESELECT);
82 | m_ramArrayCt = JCSystem.makeTransientByteArray((short) 260, JCSystem.CLEAR_ON_DESELECT);
83 |
84 | //Create ASCON OBJECT
85 | m_acorn = new AcornCore();
86 |
87 | // update flag
88 | isOP2 = true;
89 |
90 | } else {}
91 | register();
92 | }
93 |
94 | public static void install(byte[] bArray, short bOffset, byte bLength) throws ISOException
95 | {
96 | new AcornApplet (bArray, bOffset, bLength);
97 | }
98 |
99 | public boolean select()
100 | {
101 | return true;
102 | }
103 |
104 | public void deselect()
105 | {
106 | return;
107 | }
108 |
109 | public void process(APDU apdu) throws ISOException
110 | {
111 | // get the APDU buffer
112 | byte[] apduBuffer = apdu.getBuffer();
113 |
114 | // ignore the applet select command dispatched to the process
115 | if (selectingApplet())
116 | return;
117 |
118 | // APDU instruction parser
119 | if (apduBuffer[ISO7816.OFFSET_CLA] == CLA_SIMPLEAPPLET) {
120 | switch ( apduBuffer[ISO7816.OFFSET_INS] )
121 | {
122 | case INS_ACORNENCRYPTION: ACORNEncryption(apdu); break;
123 | case INS_ACORNDECRYPTION: ACORNDecryption(apdu); break;
124 | default :
125 | // The INS code is not supported by the dispatcher
126 | ISOException.throwIt( ISO7816.SW_INS_NOT_SUPPORTED ) ;
127 | break ;
128 |
129 | }
130 | }
131 | else ISOException.throwIt( ISO7816.SW_CLA_NOT_SUPPORTED);
132 | }
133 |
134 |
135 | public void ACORNEncryption(APDU apdu){
136 | byte[] apdubuf = apdu.getBuffer();
137 | short dataLen = apdu.setIncomingAndReceive();
138 |
139 | // Copy message to m_ramArrayPt for encryption
140 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArrayPt, (short)0, dataLen);
141 |
142 | m_acorn.init(NSEC, NPUB, KEY, KEYLEN);
143 | // ACORN Encryption
144 | m_acorn.encrypt(m_ramArrayCt, (short)0, m_ramArrayPt, dataLen, AD, ADLEN);
145 |
146 | // Copy ciphertext
147 | Util.arrayCopyNonAtomic(m_ramArrayCt, (short)0, apdubuf, (short)0, (short)(dataLen+16));
148 |
149 | // SEND OUTGOING BUFFER
150 | apdu.setOutgoingAndSend((short)0, (short)(dataLen+16));
151 | }
152 |
153 |
154 | public void ACORNDecryption(APDU apdu){
155 | byte[] apdubuf = apdu.getBuffer();
156 | short dataLen = apdu.setIncomingAndReceive();
157 |
158 | // Copy cipher to m_ramArrayCt for decryption
159 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArrayCt, (short)0, dataLen);
160 |
161 | m_acorn.init(NSEC1, NPUB1, KEY1, KEYLEN1);
162 | // ACORN Decryption
163 | m_acorn.decrypt(m_ramArrayCt, dataLen, m_ramArrayPt, (short)0, AD1, ADLEN1);
164 |
165 | // Copy retrieved message (plaintext)
166 | Util.arrayCopyNonAtomic(m_ramArrayPt, (short)0, apdubuf, (short)0, (short)(dataLen-16));
167 |
168 | // SEND OUTGOING BUFFER
169 | apdu.setOutgoingAndSend((short)0, (short)(dataLen-16));
170 | }
171 | }
172 |
--------------------------------------------------------------------------------
/AEAD/CLOC/src/ClocApplet.java:
--------------------------------------------------------------------------------
1 | /*
2 | * PACKAGEID: 43 4C 4F 43 4B 3A // CLOC:
3 | * APPLETID: 43 4C 4F 43 4B 3A 50 04 47 // CLOC:PKG
4 | */
5 | package cloc;
6 |
7 | import javacard.framework.*;
8 |
9 | /**
10 | *
11 | * @author rajesh
12 | */
13 | public class ClocApplet extends javacard.framework.Applet
14 | {
15 | // MAIN INSTRUCTION CLASS
16 | final static byte CLA_SIMPLEAPPLET = (byte) 0xB0;
17 |
18 | // INSTRUCTIONS
19 | final static byte INS_CLOCENCRYPTION = (byte) 0x61;
20 | final static byte INS_CLOCDECRYPTION = (byte) 0x62;
21 |
22 | final static short ARRAY_LENGTH = (short) 0xff;
23 | final static byte AES_BLOCK_LENGTH = (short) 0x16;
24 |
25 | final static short SW_BAD_TEST_DATA_LEN = (short) 0x6680;
26 | final static short SW_KEY_LENGTH_BAD = (short) 0x6715;
27 | final static short SW_CIPHER_DATA_LENGTH_BAD = (short) 0x6710;
28 | final static short SW_OBJECT_NOT_AVAILABLE = (short) 0x6711;
29 | final static short SW_BAD_PIN = (short) 0x6900;
30 |
31 | private ClocCore mycloc = null; //CLOC engine
32 |
33 | //CLOC Parameters-- Encryption
34 | byte[] AD = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x09, (byte)0x00, (byte)0x02};
35 | short ADLEN = (short)AD.length;
36 | byte[] NSEC = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
37 | byte[] NPUB = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
38 | byte[] KEY = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
39 | short KEYLEN = (short)KEY.length;
40 |
41 | //CLOC Parameters-- Decryption
42 | byte[] AD1 = {(byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x05, (byte)0x09, (byte)0x09, (byte)0x00, (byte)0x02, (byte)0x09, (byte)0x00, (byte)0x02};
43 | short ADLEN1 = (short)AD1.length;
44 | byte[] NSEC1 = {(byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01, (byte)0x01};
45 | byte[] NPUB1 = {(byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02, (byte)0x02};
46 | byte[] KEY1 = {(byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06, (byte)0x07, (byte)0x08, (byte)0x09, (byte)0x00, (byte)0x01, (byte)0x02, (byte)0x03, (byte)0x04, (byte)0x05, (byte)0x06};
47 | short KEYLEN1 = (short)KEY1.length;
48 |
49 | // TEMPORARRY ARRAY IN RAM
50 | private byte m_ramArrayPt[] = null;
51 | private byte m_ramArrayCt[] = null;
52 | // PERSISTENT ARRAY IN EEPROM
53 | private byte m_dataArray[] = null;
54 |
55 | /**
56 | * ClocApplet constructor
57 | * Only this class's install method should create the applet object.
58 | */
59 | protected ClocApplet(byte[] buffer, short offset, byte length)
60 | {
61 | short dataOffset = offset;
62 | boolean isOP2 = false;
63 |
64 | if(length > 9) {
65 |
66 | // shift to privilege offset
67 | dataOffset += (short)( 1 + buffer[offset]);
68 | // finally shift to Application specific offset
69 | dataOffset += (short)( 1 + buffer[dataOffset]);
70 |
71 | // go to proprietary data
72 | dataOffset++;
73 |
74 | // PERSISTENT BUFFER IN EEPROM
75 | m_dataArray = new byte[ARRAY_LENGTH];
76 | Util.arrayFillNonAtomic(m_dataArray, (short) 0, ARRAY_LENGTH, (byte) 0);
77 | // TEMPORARY BUFFER USED FOR FAST OPERATION WITH MEMORY LOCATED IN RAM
78 | m_ramArrayPt = JCSystem.makeTransientByteArray((short) 260, JCSystem.CLEAR_ON_DESELECT);
79 | m_ramArrayCt = JCSystem.makeTransientByteArray((short) 260, JCSystem.CLEAR_ON_DESELECT);
80 |
81 | //Create ASCON OBJECT
82 | mycloc = new ClocCore();
83 |
84 | // update flag
85 | isOP2 = true;
86 |
87 | } else {}
88 | register();
89 | }
90 |
91 | public static void install(byte[] bArray, short bOffset, byte bLength) throws ISOException
92 | {
93 | new ClocApplet (bArray, bOffset, bLength);
94 | }
95 |
96 | public boolean select()
97 | {
98 | return true;
99 | }
100 |
101 | public void deselect()
102 | {
103 | return;
104 | }
105 |
106 | public void process(APDU apdu) throws ISOException
107 | {
108 | // get the APDU buffer
109 | byte[] apduBuffer = apdu.getBuffer();
110 |
111 | // ignore the applet select command dispatched to the process
112 | if (selectingApplet())
113 | return;
114 |
115 | // APDU instruction parser
116 | if (apduBuffer[ISO7816.OFFSET_CLA] == CLA_SIMPLEAPPLET) {
117 | switch ( apduBuffer[ISO7816.OFFSET_INS] )
118 | {
119 | case INS_CLOCENCRYPTION: CLOCEncryption(apdu); break;
120 | case INS_CLOCDECRYPTION: CLOCDecryption(apdu); break;
121 | default :
122 | // The INS code is not supported by the dispatcher
123 | ISOException.throwIt( ISO7816.SW_INS_NOT_SUPPORTED ) ;
124 | break ;
125 |
126 | }
127 | }
128 | else ISOException.throwIt( ISO7816.SW_CLA_NOT_SUPPORTED);
129 | }
130 |
131 |
132 | public void CLOCEncryption(APDU apdu){
133 | byte[] apdubuf = apdu.getBuffer();
134 | short dataLen = apdu.setIncomingAndReceive();
135 |
136 | // Copy message to m_ramArrayPt for encryption
137 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArrayPt, (short)0, dataLen);
138 |
139 | mycloc.init(NSEC, NPUB, KEY, KEYLEN);
140 | // CLOC Encryption
141 | mycloc.encrypt(m_ramArrayPt, dataLen, m_ramArrayCt, AD, ADLEN);
142 |
143 | // Copy ciphertext
144 | Util.arrayCopyNonAtomic(m_ramArrayCt, (short)0, apdubuf, (short)0, (short)(dataLen+8));
145 |
146 | // SEND OUTGOING BUFFER
147 | apdu.setOutgoingAndSend((short)0, (short)(dataLen+8));
148 | }
149 |
150 |
151 | public void CLOCDecryption(APDU apdu){
152 | byte[] apdubuf = apdu.getBuffer();
153 | short dataLen = apdu.setIncomingAndReceive();
154 |
155 | // Copy cipher to m_ramArrayCt for decryption
156 | Util.arrayCopyNonAtomic(apdubuf, ISO7816.OFFSET_CDATA, m_ramArrayCt, (short)0, dataLen);
157 |
158 | mycloc.init(NSEC1, NPUB1, KEY1, KEYLEN1);
159 | // CLOC Decryption
160 | mycloc.decrypt(m_ramArrayCt, dataLen, m_ramArrayPt, AD1, ADLEN1);
161 |
162 | // Copy retrieved message (plaintext)
163 | Util.arrayCopyNonAtomic(m_ramArrayPt, (short)0, apdubuf, (short)0, (short)(dataLen-8));
164 |
165 | // SEND OUTGOING BUFFER
166 | apdu.setOutgoingAndSend((short)0, (short)(dataLen-8));
167 | }
168 | }
169 |
--------------------------------------------------------------------------------
/_ext/java_card_kit-2_1_2/samples/classes/com/sun/javacard/samples/JavaLoyalty/javacard/JavaLoyalty.jca:
--------------------------------------------------------------------------------
1 | // converted by version 1.2
2 | // on Mon Apr 09 13:40:50 PDT 2001
3 |
4 | .package com/sun/javacard/samples/JavaLoyalty {
5 | .aid 0xA0:0x0:0x0:0x0:0x62:0x3:0x1:0xC:0x5;
6 | .version 1.0;
7 |
8 | .imports {
9 | 0xA0:0x0:0x0:0x0:0x62:0x1:0x1 1.0; //javacard/framework
10 | 0xA0:0x0:0x0:0x0:0x62:0x3:0x1:0xC:0x4 1.0; //com/sun/javacard/samples/SampleLibrary
11 | }
12 |
13 | .applet {
14 | 0xA0:0x0:0x0:0x0:0x62:0x3:0x1:0xC:0x5:0x1 JavaLoyalty;
15 | }
16 |
17 | .constantPool {
18 | // 0
19 | instanceFieldRef short JavaLoyalty/balance;
20 | // 1
21 | staticMethodRef 0.3.0()V; // javacard/framework/Applet.Copyright © 1998, 2010,
15 | Oracle and/or its affiliates. All rights reserved.
17 | 18 |
73 | Copyright © 1998, 2010, Oracle 74 | et/ou ses affiliés. 75 | Tous droits réservés. 76 | 77 |
170 |
171 |
172 |
--------------------------------------------------------------------------------
17 | 18 |
This software and related documentation are provided under a license 19 | agreement containing restrictions on use and disclosure and are 20 | protected by intellectual property laws. Except as expressly permitted 21 | in your license agreement or allowed by law, you may not use, copy, 22 | reproduce, translate, broadcast, modify, license, transmit, distribute, 23 | exhibit, perform, publish, or display any part, in any form, or by any 24 | means. Reverse engineering, disassembly, or decompilation of this 25 | software, unless required by law for interoperability, is prohibited.
26 |The information contained herein is subject to change without notice 27 | and is not warranted to be error-free. If you find any errors, please 28 | report them to us in writing.
29 |If this is software or related software documentation that is 30 | delivered to the U.S. Government or anyone licensing it on behalf of 31 | the U.S. Government, the following notice is applicable:
32 |U.S. GOVERNMENT RIGHTS Programs, software, databases, and related 33 | documentation and technical data delivered to U.S. Government customers 34 | are "commercial computer software" or "commercial technical data" 35 | pursuant to the applicable Federal Acquisition Regulation and 36 | agency-specific supplemental regulations. As such, the use, 37 | duplication, disclosure, modification, and adaptation shall be subject 38 | to the restrictions and license terms set forth in the applicable 39 | Government contract, and, to the extent applicable by the terms of the 40 | Government contract, the additional rights set forth in FAR 52.227-19, 41 | Commercial Computer Software License (December 2007). Oracle USA, Inc., 42 | 500 Oracle Parkway, Redwood City, CA 94065.
43 |This software or hardware is developed for general use in a variety 44 | of information management applications. It is not developed or intended 45 | for use in any inherently dangerous applications, including 46 | applications which may create a risk of personal injury. If you use 47 | this software or hardware in dangerous applications, then you shall be 48 | responsible to take all appropriate fail-safe, backup, redundancy, and 49 | other measures to ensure the safe use. Oracle Corporation and its 50 | affiliates disclaim any liability for any damages caused by use of this 51 | software or hardware in dangerous applications.
52 |Oracle and Java are registered trademarks of Oracle Corporation 53 | and/or its 54 | affiliates. Oracle and Java are registered trademarks of Oracle and/or 55 | its affiliates. Other names may be trademarks of their respective 56 | owners.
57 |AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks 58 | or registered trademarks of Advanced Micro Devices. Intel and Intel 59 | Xeon are trademarks or registered trademarks of Intel Corporation. All 60 | SPARC trademarks are used under license and are trademarks or 61 | registered trademarks of SPARC International, Inc. UNIX is a registered 62 | trademark licensed through X/Open Company, Ltd.
63 |This software or hardware and documentation may provide access to or
64 | information on content, products, and services from third parties.
65 | Oracle Corporation and its affiliates are not responsible for and
66 | expressly disclaim all warranties of any kind with respect to
67 | third-party content, products, and services. Oracle Corporation and its
68 | affiliates will not be responsible for any loss, costs, or damages
69 | incurred due to your access to or use of third-party content, products,
70 | or services.
71 |
73 | Copyright © 1998, 2010, Oracle 74 | et/ou ses affiliés. 75 | Tous droits réservés. 76 | 77 |
Ce logiciel et la documentation qui l’accompagne sont 78 | protégés par les 79 | lois sur la propriété intellectuelle. Ils sont 80 | concédés sous licence et soumis à 81 | des restrictions d’utilisation et de divulgation. Sauf disposition de 82 | votre contrat de licence ou 83 | de la loi, vous ne pouvez pas copier, reproduire, traduire, diffuser, 84 | modifier, breveter, 85 | transmettre, distribuer, exposer, exécuter, publier ou afficher 86 | le logiciel, même partiellement, sous quelque forme 87 | et par quelque procédé que ce soit. Par ailleurs, il est 88 | interdit de 89 | procéder à toute ingénierie inverse du logiciel, 90 | de le désassembler ou de le décompiler, 91 | excepté à des fins d’interopérabilité avec 92 | des logiciels tiers ou tel que prescrit par 93 | la loi.
94 |Les informations fournies dans ce document sont susceptibles de 95 | modification sans préavis. 96 | Par ailleurs, Oracle Corporation ne garantit pas qu’elles soient 97 | exemptes d’erreurs et vous invite, 98 | le cas échéant, à lui en faire part par 99 | écrit.
100 |Si ce logiciel, ou 101 | la documentation qui l’accompagne, est concédé sous 102 | licence au Gouvernement des Etats-Unis, ou à 103 | toute entité qui délivre la licence de ce logiciel ou 104 | l’utilise pour le 105 | compte du Gouvernement des Etats-Unis, la notice suivante s’applique:
106 |U.S. GOVERNMENT RIGHTS. Programs, 107 | software, databases, and related documentation and technical data 108 | delivered to U.S. Government customers are 109 | "commercial computer software" or "commercial technical data" pursuant 110 | to the applicable Federal Acquisition 111 | Regulation and agency-specific supplemental regulations. As such, the 112 | use, duplication, disclosure, modification, and 113 | adaptation shall be subject to the restrictions and license terms set 114 | forth in 115 | the applicable Government contract, and, to the extent applicable by 116 | the terms of the 117 | Government contract, the additional rights set forth in FAR 52.227-19, 118 | Commercial Computer Software 119 | License (December 2007). Oracle America, Inc., 500 Oracle Parkway, 120 | Redwood City, CA 121 | 94065.
122 |Ce logiciel ou matériel a été 123 | développé pour un usage général dans le 124 | cadre d’applications de gestion des informations. Ce logiciel ou 125 | matériel n’est pas conçu ni 126 | n’est destiné à être utilisé dans des 127 | applications à risque, notamment dans des applications 128 | pouvant causer des dommages corporels. Si vous utilisez ce logiciel ou 129 | matériel dans 130 | le cadre d’applications dangereuses, il est de votre 131 | responsabilité de prendre toutes les mesures 132 | de secours, de sauvegarde, de redondance et autres mesures 133 | nécessaires à son utilisation 134 | dans des conditions optimales de sécurité. Oracle 135 | Corporation et ses affiliés déclinent toute 136 | responsabilité 137 | quant aux dommages causés par l’utilisation de ce logiciel ou 138 | matériel pour ce type 139 | d’applications.
140 |Oracle et Java sont des marques déposées d’Oracle 141 | Corporation et/ou de ses affiliés.Tout 142 | autre nom mentionné peut correspondre à des marques 143 | appartenant à d’autres propriétaires qu’Oracle.
144 |AMD, Opteron, 145 | le logo AMD et le logo AMD Opteron sont des marques ou des 146 | marques déposées d’Advanced Micro Devices. Intel et Intel 147 | Xeon sont des marques ou 148 | des marques déposées d’Intel Corporation. Toutes les 149 | marques SPARC sont utilisées sous licence et 150 | sont des marques ou des marques déposées de SPARC 151 | International, Inc. UNIX est une 152 | marque déposée concédée sous licence par 153 | X/Open Company, Ltd.
154 |Ce logiciel ou matériel et
155 | la documentation qui l’accompagne peuvent fournir des informations ou
156 | des liens donnant accès à
157 | des contenus, des produits et des services émanant de tiers.
158 | Oracle Corporation et
159 | ses affiliés déclinent toute responsabilité ou
160 | garantie expresse quant aux contenus, produits ou services
161 | émanant de tiers. En aucun cas, Oracle Corporation et ses
162 | affiliés ne sauraient
163 | être tenus pour responsables des pertes subies, des coûts
164 | occasionnés ou des dommages causés
165 | par l’accès à des contenus, produits ou services tiers,
166 | ou à leur utilisation.
167 |