Nintendo Switch Brew

NRR: Difference between revisions

Roblabla (talk | contribs)
151 edits
Initial commit (port from https://web.archive.org/web/20180712234431/https://reswitched.tech/software/fileformats/nrr)
 
No edit summary
 
(5 intermediate revisions by 3 users not shown)
Line 1: Line 1:
[[Category:File formats]]
The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.
The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.
= NrrHeader =
This is "nn::ro::detail::NrrHeader".


{| class="wikitable" border="1"
{| class="wikitable" border="1"
Line 8: Line 10:
! Description
! Description
|-
|-
| 0x00
| 0x0
| 4
| 0x4
| “NRR0” magic
| Signature ("NRR0")
|-
|-
| 0x04
| 0x4
| 28
| 0x1
| Unknown (0)
| [9.0.0+] SignKeyGeneration
|-
|-
| 0x20
| 0x5
| 8
| 0xB
| Title ID mask?
| Reserved
|-
|-
| 0x28
| 0x10
| 8
| 0x220
| Title ID pattern?
| [[#NrrCertification|Certification]]
|-
| 0x30
| 256
| Modulus for verifying the second signature
|-
| 0x130
| 256
| First signature signed by a Nintendo key, over the above contents
|-
|-
| 0x230
| 0x230
| 256
| 0x100
| Second signature verifiable with the above key, over the rest of the file
| Sign (signature verifiable with the certification key, over the rest of the file)
|-
|-
| 0x330
| 0x330
| 8
| 0x8
| Title ID
| ProgramId
|-
|-
| 0x338
| 0x338
| 4
| 0x4
| Size
| Size
|-
|-
| 0x33C
| 0x33C
| 4
| 0x1
| Unknown (0)
| NrrKind (0 = User, 1 = JitPlugin)
|-
| 0x33D
| 0x3
| Reserved
|-
|-
| 0x340
| 0x340
| 4
| 0x4
| Hash offset (0x350)
| HashListOffsetAddress (always 0x350)
|-
|-
| 0x344
| 0x344
| 4
| 0x4
| Hash count
| NumHash
|-
|-
| 0x348
| 0x348
| 8
| 0x8
| Unknown (0)
| Reserved
|-
|-
| 0x350
| 0x350
| 32 * count
| 0x20 * NumHash
| NRO hashes (SHA-256)  
| NroHashList (SHA-256)
|}
 
= NrrCertification =
This is "nn::ro::detail::NrrCertification".
 
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x8
| ProgramIdMask
|-
| 0x8
| 0x8
| ProgramIdPattern
|-
| 0x10
| 0x10
| Reserved
|-
| 0x20
| 0x100
| PublicKey (modulus for verifying the NRR signature)
|-
| 0x120
| 0x100
| Sign (signature over the above contents)
|}
|}
Retrieved from "https://switchbrew.org/wiki/NRR"