Ticket - Revision history

DarkMatterCore at 00:08, 16 October 2023

2023-10-15T22:08:49Z

← Older revision		Revision as of 02:08, 16 October 2023
Line 38:		Line 38:
	\|-		\|-
	\| 0x010000		\| 0x010000
	\| ~~RSA_4096 SHA1~~		\| RSA-4096 PKCS#1 v1.5 with SHA-1
	\| 0x200		\| 0x200
	\| 0x3C		\| 0x3C
	\|-		\|-
	\| 0x010001		\| 0x010001
	\| ~~RSA_2048 SHA1~~		\| RSA-2048 PKCS#1 v1.5 with SHA-1
	\| 0x100		\| 0x100
	\| 0x3C		\| 0x3C
	\|-		\|-
	\| 0x010002		\| 0x010002
	\| ECDSA ~~SHA1~~		\| ECDSA with SHA-1
	\| 0x3C		\| 0x3C
	\| 0x40		\| 0x40
	\|-		\|-
	\| 0x010003		\| 0x010003
	\| ~~RSA_4096 SHA256~~		\| RSA-4096 PKCS#1 v1.5 with SHA-256
	\| 0x200		\| 0x200
	\| 0x3C		\| 0x3C
	\|-		\|-
	\| 0x010004		\| 0x010004
	\| ~~RSA_2048 SHA256~~		\| RSA-2048 PKCS#1 v1.5 with SHA-256
	\| 0x100		\| 0x100
	\| 0x3C		\| 0x3C
	\|-		\|-
	\| 0x010005		\| 0x010005
	\| ECDSA ~~SHA256~~		\| ECDSA with SHA-256
	\| 0x3C		\| 0x3C
	\| 0x40		\| 0x40
			\|-
			\| 0x010006
			\| HMAC-SHA1-160
			\| 0x14
			\| 0x28
	\|}		\|}

Line 127:		Line 132:
	\| RSA-2048		\| RSA-2048
	\| colspan="2" style="text-align:center;" \| XS00000021		\| colspan="2" style="text-align:center;" \| XS00000021
			\| Used to verify ticket signatures using RSA title key block ("personalized" tickets)
			\|-
			\| Ticket
			\| RSA-2048
			\| colspan="2" style="text-align:center;" \| [9.0.0+] XS00000024
	\| Used to verify ticket signatures using RSA title key block ("personalized" tickets)		\| Used to verify ticket signatures using RSA title key block ("personalized" tickets)
	\|-		\|-
	\| CA		\| CA
	\| RSA-4096		\| RSA-4096
	\| CA00000003		\| style="text-align:center;" \| CA00000003
	\| CA00000004		\| style="text-align:center;" \| CA00000004
	\| Used to verify the ticket certificate		\| Used to verify the ticket certificate
	\|}		\|}

	The CA certificate is issued by 'Root', the public key for which is stored in ES.		The CA certificate is issued by 'Root', the public key for which is stored in ES.

DarkMatterCore: Update debug cert names + change certificate chain table entry order

2023-10-14T13:35:23Z

Update debug cert names + change certificate chain table entry order

← Older revision		Revision as of 17:35, 14 October 2023
Line 121:		Line 121:
	\| Ticket		\| Ticket
	\| RSA-2048		\| RSA-2048
	\| ~~XS00000021~~		\| colspan="2" style="text-align:center;" \| XS00000020
	\| ?		\| Used to verify ticket signatures using AES title key block ("common" tickets)
	\| Used to verify ticket signatures using ~~RSA~~ title key block ("~~personalized~~" tickets)
	\|-		\|-
	\| Ticket		\| Ticket
	\| RSA-2048		\| RSA-2048
	\| ~~XS00000020~~		\| colspan="2" style="text-align:center;" \| XS00000021
	\| ?		\| Used to verify ticket signatures using RSA title key block ("personalized" tickets)
	\| Used to verify ticket signatures using ~~AES~~ title key block
	\|-		\|-
	\| CA		\| CA

Roobscoob at 03:14, 31 May 2023

2023-05-31T01:14:37Z

← Older revision		Revision as of 05:14, 31 May 2023
Line 80:		Line 80:
	\| 0x40 \|\| 0x100 \|\| Title key block		\| 0x40 \|\| 0x100 \|\| Title key block
	\|-		\|-
	\| 0x140 \|\| 0x1 \|\| ~~Unknown~~		\| 0x140 \|\| 0x1 \|\| Ticket Version (Always 2 for Switch (ES) Tickets)
	\|-		\|-
	\| 0x141 \|\| 0x1 \|\| Title key type		\| 0x141 \|\| 0x1 \|\| Title key type
	\|-		\|-
	\| 0x142 \|\| ~~0x3~~ \|\| ~~Unknown~~		\| 0x142 \|\| 0x2 \|\| Ticket Version
			\|-
			\| 0x144 \|\| 0x1 \|\| License Type
	\|-		\|-
	\| 0x145 \|\| 0x1 \|\| Master key revision		\| 0x145 \|\| 0x1 \|\| Master key revision
	\|-		\|-
	\| 0x146 \|\| ~~0xA~~ \|\| ~~Unknown~~		\| 0x146 \|\| 0x2 \|\| Properties Bitfield
			\|-
			\| 0x148 \|\| 0x8 \|\| Reserved
	\|-		\|-
	\| 0x150 \|\| 0x8 \|\| Ticket ID		\| 0x150 \|\| 0x8 \|\| Ticket ID

Moosehunter: /* Ticket data */

2018-07-09T19:31:51Z

Ticket data

← Older revision		Revision as of 23:31, 9 July 2018
Line 84:		Line 84:
	\| 0x141 \|\| 0x1 \|\| Title key type		\| 0x141 \|\| 0x1 \|\| Title key type
	\|-		\|-
	\| 0x142 \|\| ~~0xE~~ \|\| Unknown		\| 0x142 \|\| 0x3 \|\| Unknown
			\|-
			\| 0x145 \|\| 0x1 \|\| Master key revision
			\|-
			\| 0x146 \|\| 0xA \|\| Unknown
	\|-		\|-
	\| 0x150 \|\| 0x8 \|\| Ticket ID		\| 0x150 \|\| 0x8 \|\| Ticket ID
Line 90:		Line 94:
	\| 0x158 \|\| 0x8 \|\| Device ID		\| 0x158 \|\| 0x8 \|\| Device ID
	\|-		\|-
	\| 0x160 \|\| ~~0x8~~ \|\| ~~Title~~ ID		\| 0x160 \|\| 0x10 \|\| Rights ID
	\|-
	~~\| 0x168 \|\| 0x8 \|\| Unknown~~
	\|-		\|-
	\| 0x170 \|\| 0x4 \|\| Account ID		\| 0x170 \|\| 0x4 \|\| Account ID

SciresM: re-add removed type #

2017-10-09T13:56:03Z

re-add removed type #

← Older revision		Revision as of 17:56, 9 October 2017
Line 101:		Line 101:
	\|}		\|}

	The title key can be stored as a 16-byte block when tickets are "common" [2.0.0+], or as a "personalized" RSA-2048 message when title key type is 1. The latter is used for titles requiring stronger licensing (applications, add-on content), while the former (old) method is used for patches.		The title key can be stored as a 16-byte block when tickets are "common" [2.0.0+] with title key type 0, or as a "personalized" RSA-2048 message when title key type is 1. The latter is used for titles requiring stronger licensing (applications, add-on content), while the former (old) method is used for patches.

	When RSA is used, this uses an SPL key handle that is initialized with the console-unique RSA-2048 ticket key.		When RSA is used, this uses an SPL key handle that is initialized with the console-unique RSA-2048 ticket key.

SciresM: Game updates are cetks, support added in 2.0.0.

2017-10-09T13:55:22Z

Game updates are cetks, support added in 2.0.0.

← Older revision		Revision as of 17:55, 9 October 2017
Line 101:		Line 101:
	\|}		\|}

	The title key can be ~~encrypted~~ as a ~~single AES~~ block when ~~title key type is~~ 0 ~~(presumably AES-128-CBC)~~ or as a "personalized" RSA-2048 message when title key type is 1. The latter is used for titles requiring stronger licensing (applications, add-on content), while the former (old) method is used for patches.		The title key can be stored as a 16-byte block when tickets are "common" [2.0.0+], or as a "personalized" RSA-2048 message when title key type is 1. The latter is used for titles requiring stronger licensing (applications, add-on content), while the former (old) method is used for patches.

	When RSA is used, this uses an SPL key handle that is initialized with the console-unique RSA-2048 ticket key.		When RSA is used, this uses an SPL key handle that is initialized with the console-unique RSA-2048 ticket key.

	~~CommonETicket (or cetk) no longer exist.~~

	== Certificate chain ==		== Certificate chain ==

Magic at 23:30, 6 July 2017

2017-07-06T21:30:42Z

← Older revision		Revision as of 01:30, 7 July 2017
Line 101:		Line 101:
	\|}		\|}

	The title key can be encrypted as a single AES block when title key type is 0 (presumably AES-128-CBC) or as an RSA-2048 message when title key type is 1. The latter is used for titles requiring stronger licensing (applications, add-on content), while the former (old) method is used for patches.		The title key can be encrypted as a single AES block when title key type is 0 (presumably AES-128-CBC) or as a "personalized" RSA-2048 message when title key type is 1. The latter is used for titles requiring stronger licensing (applications, add-on content), while the former (old) method is used for patches.

	When RSA is used, this uses an SPL key handle that is initialized with the console-unique RSA-2048 ticket key.		When RSA is used, this uses an SPL key handle that is initialized with the console-unique RSA-2048 ticket key.
Line 119:		Line 119:
	\| XS00000021		\| XS00000021
	\| ?		\| ?
	\| Used to verify ticket signatures using RSA title key block		\| Used to verify ticket signatures using RSA title key block ("personalized" tickets)
	\|-		\|-
	\| Ticket		\| Ticket

Magic at 23:28, 6 July 2017

2017-07-06T21:28:24Z

← Older revision		Revision as of 01:28, 7 July 2017
Line 48:		Line 48:
	\|-		\|-
	\| 0x010002		\| 0x010002
	\| ~~Elliptic Curve with~~ SHA1		\| ECDSA SHA1
	\| 0x3C		\| 0x3C
	\| 0x40		\| 0x40
Line 63:		Line 63:
	\|-		\|-
	\| 0x010005		\| 0x010005
	\| ECDSA ~~with~~ SHA256		\| ECDSA SHA256
	\| 0x3C		\| 0x3C
	\| 0x40		\| 0x40
Line 119:		Line 119:
	\| XS00000021		\| XS00000021
	\| ?		\| ?
	\| Used to verify ~~(some?)~~ ticket signatures		\| Used to verify ticket signatures using RSA title key block
	\|-		\|-
	\| Ticket		\| Ticket
Line 125:		Line 125:
	\| XS00000020		\| XS00000020
	\| ?		\| ?
	\| Used to verify ~~(some?)~~ ticket signatures		\| Used to verify ticket signatures using AES title key block
	\|-		\|-
	\| CA		\| CA

Magic: Created page with "Tickets are a format used to store an encrypted title key. The format has been updated again since 3DS. == Structure == {| class="wikitable" ! Offset ! Size ! Description |-..."

2017-07-06T18:24:18Z

Created page with "Tickets are a format used to store an encrypted title key. The format has been updated again since 3DS. == Structure == {| class="wikitable" ! Offset ! Size ! Description |-..."

New page

Tickets are a format used to store an encrypted title key. The format has been updated again since 3DS.

== Structure ==

{| class="wikitable"
! Offset
! Size
! Description
|-
| 0x000 || Y || Signature data
|-
| Y || 0x2C0 || Ticket data
|}

Y denotes the total size of the "signature data" section and depends on the signature type.

=== Signature data ===

{| class="wikitable"
! Offset
! Size
! Description
|-
| 0x0 || 0x4 || Signature type
|-
| 0x4 || X || Signature
|-
| 0x4 + X || || Padding to align the signature data to 0x40 bytes
|}

==== Signature type ====

{| class="wikitable"
! Value
! Signature method
! Signature size
! Padding size
|-
| 0x010000
| RSA_4096 SHA1
| 0x200
| 0x3C
|-
| 0x010001
| RSA_2048 SHA1
| 0x100
| 0x3C
|-
| 0x010002
| Elliptic Curve with SHA1
| 0x3C
| 0x40
|-
| 0x010003
| RSA_4096 SHA256
| 0x200
| 0x3C
|-
| 0x010004
| RSA_2048 SHA256
| 0x100
| 0x3C
|-
| 0x010005
| ECDSA with SHA256
| 0x3C
| 0x40
|}

The hash for the signature is calculated over the ticket data.

=== Ticket data ===
{| class="wikitable"
! Offset
! Size
! Description
|-
| 0x0 || 0x40 || Issuer
|-
| 0x40 || 0x100 || Title key block
|-
| 0x140 || 0x1 || Unknown
|-
| 0x141 || 0x1 || Title key type
|-
| 0x142 || 0xE || Unknown
|-
| 0x150 || 0x8 || Ticket ID
|-
| 0x158 || 0x8 || Device ID
|-
| 0x160 || 0x8 || Title ID
|-
| 0x168 || 0x8 || Unknown
|-
| 0x170 || 0x4 || Account ID
|-
| 0x174 || 0xC || Unknown
|-
| 0x180 || 0x140 || Unknown
|}

The title key can be encrypted as a single AES block when title key type is 0 (presumably AES-128-CBC) or as an RSA-2048 message when title key type is 1. The latter is used for titles requiring stronger licensing (applications, add-on content), while the former (old) method is used for patches.

When RSA is used, this uses an SPL key handle that is initialized with the console-unique RSA-2048 ticket key.

CommonETicket (or cetk) no longer exist.

== Certificate chain ==
{| class="wikitable"
! Certificate
! Signature type
! Retail cert name
! Debug cert name
! Description
|-
| Ticket
| RSA-2048
| XS00000021
| ?
| Used to verify (some?) ticket signatures
|-
| Ticket
| RSA-2048
| XS00000020
| ?
| Used to verify (some?) ticket signatures
|-
| CA
| RSA-4096
| CA00000003
| CA00000004
| Used to verify the ticket certificate
|}

The CA certificate is issued by 'Root', the public key for which is stored in ES.