Cryptosystem: Difference between revisions

Line 186: Line 186:
   per_console_key /* slot13 */ = aes_unwrap(4f025f0e.., old_keyblob_key)
   per_console_key /* slot13 */ = aes_unwrap(4f025f0e.., old_keyblob_key)


.. and on 4.0.0 it was further moved around:
  old_keyblob_key /* slot15 */ = aes_unwrap(aes_unwrap(df206f59.., tsec_key /* slot13 */), sbk /* slot14 */)
  keyblob_key    /* slot13 */ = aes_unwrap(aes_unwrap(wrapped_keyblob_key, tsec_key /* slot13 */), sbk /* slot14 */)
  cmac_key        /* slot11 */ = aes_unwrap(59c7fb6f.., keyblob_key)
 
  if aes_cmac(buf=keyblob+0x10, len=0xA0, cmac_key) != keyblob[0:0x10]:
    panic()
 
  aes_ctr_decrypt(buf=keyblob+0x20, len=0x90, iv=keyblob+0x10 key=keyblob_key)
 
  // Final keys:
  hmm


SBK and SSK keyslots are cleared after keys have been generated.
SBK and SSK keyslots are cleared after keys have been generated.
Line 219: Line 232:
   [3.0.1] normalseed_dev    = cd88155b...
   [3.0.1] normalseed_dev    = cd88155b...
   [3.0.1] normalseed_retail = d8a2410a...
   [3.0.1] normalseed_retail = d8a2410a...
 
  [4.0.0] wrapped_keyblob_key = 2d1f4880...


==== Table of used keyblobs ====
==== Table of used keyblobs ====