NRR0 - Revision history

Ootulp: Ootulp moved page NRR to NRR0

2025-12-19T06:25:25Z

Ootulp moved page NRR to NRR0

← Older revision		Revision as of 09:25, 19 December 2025
(No difference)

Hexkyz at 19:43, 25 September 2024

2024-09-25T17:43:57Z

← Older revision		Revision as of 21:43, 25 September 2024
Line 1:		Line 1:
	The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.		The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.

			= NrrHeader =
			This is "nn::ro::detail::NrrHeader".

	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
Line 9:		Line 12:
	\| 0x0		\| 0x0
	\| 0x4		\| 0x4
	\| ~~Magic~~ ("NRR0")		\| Signature ("NRR0")
	\|-		\|-
	\| 0x4		\| 0x4
	\| ~~0x4~~		\| 0x1
	\| [9.0.0+] ~~SignatureKeyGeneration~~		\| [9.0.0+] SignKeyGeneration
	\|-		\|-
	\| ~~0x8~~		\| 0x5
	\| ~~0x8~~		\| 0xB
	\| Reserved		\| Reserved
	\|-		\|-
	\| 0x10		\| 0x10
	\| 0x220		\| 0x220
	\| [[#~~Certification~~\|Certification]]		\| [[#NrrCertification\|Certification]]
	\|-		\|-
	\| 0x230		\| 0x230
	\| 0x100		\| 0x100
	\| ~~Signature~~ (verifiable with the certification key, over the rest of the file)		\| Sign (signature verifiable with the certification key, over the rest of the file)
	\|-		\|-
	\| 0x330		\| 0x330
	\| 0x8		\| 0x8
	\| ~~ApplicationId~~		\| ProgramId
	\|-		\|-
	\| 0x338		\| 0x338
Line 45:		Line 48:
	\| 0x340		\| 0x340
	\| 0x4		\| 0x4
	\| ~~HashOffset~~ (always 0x350)		\| HashListOffsetAddress (always 0x350)
	\|-		\|-
	\| 0x344		\| 0x344
Line 60:		Line 63:
	\|}		\|}

	= ~~Certification~~ =		= NrrCertification =
			This is "nn::ro::detail::NrrCertification".

	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
	\|-		\|-
Line 69:		Line 74:
	\| 0x0		\| 0x0
	\| 0x8		\| 0x8
	\| ~~ApplicationIdMask~~		\| ProgramIdMask
	\|-		\|-
	\| 0x8		\| 0x8
	\| 0x8		\| 0x8
	\| ~~ApplicationIdPattern~~		\| ProgramIdPattern
	\|-		\|-
	\| 0x10		\| 0x10
Line 85:		Line 90:
	\| 0x120		\| 0x120
	\| 0x100		\| 0x100
	\| ~~Signature~~ (over the above contents)		\| Sign (signature over the above contents)
	\|}		\|}

Hexkyz at 19:25, 18 April 2022

2022-04-18T17:25:01Z

← Older revision		Revision as of 21:25, 18 April 2022
Line 9:		Line 9:
	\| 0x0		\| 0x0
	\| 0x4		\| 0x4
	\| Magic "NRR0"		\| Magic ("NRR0")
	\|-		\|-
	\| 0x4		\| 0x4
	\| 0x4		\| 0x4
	\| [9.0.0+] ~~CertificationSignatureKeyGeneration (0 or 1)~~		\| [9.0.0+] SignatureKeyGeneration
	\|-		\|-
	\| 0x8		\| 0x8

Hexkyz at 18:39, 22 February 2020

2020-02-22T17:39:53Z

← Older revision		Revision as of 20:39, 22 February 2020
Line 13:		Line 13:
	\| 0x4		\| 0x4
	\| 0x4		\| 0x4
	\| [9.0.0+] ~~KeyGeneration~~		\| [9.0.0+] CertificationSignatureKeyGeneration (0 or 1)
	\|-		\|-
	\| 0x8		\| 0x8

Hexkyz at 18:18, 22 February 2020

2020-02-22T17:18:55Z

← Older revision		Revision as of 20:18, 22 February 2020
Line 1:		Line 1:
	~~[[Category:File formats]]~~
	The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.		The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.

Line 14:		Line 13:
	\| 0x4		\| 0x4
	\| 0x4		\| 0x4
	\| [9.0.0+] ~~NRR signing key selector~~		\| [9.0.0+] KeyGeneration
	\|-		\|-
	\| 0x8		\| 0x8
Line 21:		Line 20:
	\|-		\|-
	\| 0x10		\| 0x10
	\| ~~0x8~~		\| 0x220
	\| ~~Title ID Mask~~		\| [[#Certification\|Certification]]
	\|-
	~~\| 0x18~~
	~~\| 0x8~~
	~~\| Title ID Pattern~~
	\|-
	~~\| 0x20~~
	~~\| 0x10~~
	~~\| Reserved~~
	\|-
	~~\| 0x30~~
	~~\| 0x100~~
	~~\| Modulus for verifying the second signature~~
	\|-
	~~\| 0x130~~
	~~\| 0x100~~
	\| ~~First signature signed by a Nintendo key, over the above contents~~
	\|-		\|-
	\| 0x230		\| 0x230
	\| 0x100		\| 0x100
	\| ~~Second signature~~ verifiable with the ~~above~~ key, over the rest of the file		\| Signature (verifiable with the certification key, over the rest of the file)
	\|-		\|-
	\| 0x330		\| 0x330
	\| 0x8		\| 0x8
	\| ~~Title ID~~		\| ApplicationId
	\|-		\|-
	\| 0x338		\| 0x338
	\| 0x4		\| 0x4
	\| ~~File~~ Size		\| Size
	\|-		\|-
	\| 0x33C		\| 0x33C
	\| ~~0x4~~		\| 0x1
	\| ~~Module Type~~		\| NrrKind (0 = User, 1 = JitPlugin)
			\|-
			\| 0x33D
			\| 0x3
			\| Reserved
	\|-		\|-
	\| 0x340		\| 0x340
	\| 0x4		\| 0x4
	\| ~~Hash Offset~~ (~~Always~~ 0x350)		\| HashOffset (always 0x350)
	\|-		\|-
	\| 0x344		\| 0x344
	\| 0x4		\| 0x4
	\| ~~Hash Count~~		\| NumHash
	\|-		\|-
	\| 0x348		\| 0x348
Line 69:		Line 56:
	\|-		\|-
	\| 0x350		\| 0x350
	\| 0x20 * ~~Hash Count~~		\| 0x20 * NumHash
	\| ~~NRO hashes~~ (SHA-256)		\| NroHashList (SHA-256)
			\|}

			= Certification =
			{\| class="wikitable" border="1"
			\|-
			! Offset
			! Size
			! Description
			\|-
			\| 0x0
			\| 0x8
			\| ApplicationIdMask
			\|-
			\| 0x8
			\| 0x8
			\| ApplicationIdPattern
			\|-
			\| 0x10
			\| 0x10
			\| Reserved
			\|-
			\| 0x20
			\| 0x100
			\| PublicKey (modulus for verifying the NRR signature)
			\|-
			\| 0x120
			\| 0x100
			\| Signature (over the above contents)
	\|}		\|}

SciresM at 03:01, 22 February 2020

2020-02-22T02:01:44Z

← Older revision		Revision as of 05:01, 22 February 2020
Line 13:		Line 13:
	\|-		\|-
	\| 0x4		\| 0x4
	\| ~~0xC~~		\| 0x4
			\| [9.0.0+] NRR signing key selector
			\|-
			\| 0x8
			\| 0x8
	\| Reserved		\| Reserved
	\|-		\|-

Liam: update structure

2019-08-20T13:55:07Z

update structure

← Older revision		Revision as of 17:55, 20 August 2019
Line 8:		Line 8:
	! Description		! Description
	\|-		\|-
	\| ~~0x00~~		\| 0x0
	\| 4		\| 0x4
	\| ~~“NRR0” magic~~		\| Magic "NRR0"
	\|-		\|-
	\| ~~0x04~~		\| 0x4
	\| 28		\| 0xC
	\| ~~Unknown (0)~~		\| Reserved
			\|-
			\| 0x10
			\| 0x8
			\| Title ID Mask
			\|-
			\| 0x18
			\| 0x8
			\| Title ID Pattern
	\|-		\|-
	\| 0x20		\| 0x20
	\| 8		\| 0x10
	\| ~~Title ID mask?~~		\| Reserved
	\|-
	~~\| 0x28~~
	~~\| 8~~
	~~\| Title ID pattern?~~
	\|-		\|-
	\| 0x30		\| 0x30
	\| ~~256~~		\| 0x100
	\| Modulus for verifying the second signature		\| Modulus for verifying the second signature
	\|-		\|-
	\| 0x130		\| 0x130
	\| ~~256~~		\| 0x100
	\| First signature signed by a Nintendo key, over the above contents		\| First signature signed by a Nintendo key, over the above contents
	\|-		\|-
	\| 0x230		\| 0x230
	\| ~~256~~		\| 0x100
	\| Second signature verifiable with the above key, over the rest of the file		\| Second signature verifiable with the above key, over the rest of the file
	\|-		\|-
	\| 0x330		\| 0x330
	\| 8		\| 0x8
	\| Title ID		\| Title ID
	\|-		\|-
	\| 0x338		\| 0x338
	\| 4		\| 0x4
	\| Size		\| File Size
	\|-		\|-
	\| 0x33C		\| 0x33C
	\| 4		\| 0x4
	\| ~~Unknown (0)~~		\| Module Type
	\|-		\|-
	\| 0x340		\| 0x340
	\| 4		\| 0x4
	\| Hash ~~offset~~ (0x350)		\| Hash Offset (Always 0x350)
	\|-		\|-
	\| 0x344		\| 0x344
	\| 4		\| 0x4
	\| Hash ~~count~~		\| Hash Count
	\|-		\|-
	\| 0x348		\| 0x348
	\| 8		\| 0x8
	\| ~~Unknown (0)~~		\| Reserved
	\|-		\|-
	\| 0x350		\| 0x350
	\| 32 * ~~count~~		\| 0x20 * Hash Count
	\| NRO hashes (SHA-256)		\| NRO hashes (SHA-256)
	\|}		\|}

Roblabla: Initial commit (port from https://web.archive.org/web/20180712234431/https://reswitched.tech/software/fileformats/nrr)

2019-01-07T01:01:16Z

Initial commit (port from https://web.archive.org/web/20180712234431/https://reswitched.tech/software/fileformats/nrr)

New page

[[Category:File formats]]
The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.

{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x00
| 4
| “NRR0” magic
|-
| 0x04
| 28
| Unknown (0)
|-
| 0x20
| 8
| Title ID mask?
|-
| 0x28
| 8
| Title ID pattern?
|-
| 0x30
| 256
| Modulus for verifying the second signature
|-
| 0x130
| 256
| First signature signed by a Nintendo key, over the above contents
|-
| 0x230
| 256
| Second signature verifiable with the above key, over the rest of the file
|-
| 0x330
| 8
| Title ID
|-
| 0x338
| 4
| Size
|-
| 0x33C
| 4
| Unknown (0)
|-
| 0x340
| 4
| Hash offset (0x350)
|-
| 0x344
| 4
| Hash count
|-
| 0x348
| 8
| Unknown (0)
|-
| 0x350
| 32 * count
| NRO hashes (SHA-256)
|}