Cryptosystem: Difference between revisions
this table is way too unreadable, trying to keep complexity down |
|||
| Line 57: | Line 57: | ||
== Package1 == | == Package1 == | ||
=== Key | === Key table during package1 === | ||
{| class="wikitable" border="1" | {| class="wikitable" border="1" | ||
| Line 64: | Line 64: | ||
! Name | ! Name | ||
! Set by | ! Set by | ||
! Per-console | ! Per-console | ||
! Per-firmware | ! Per-firmware | ||
|- | |- | ||
| 11 | | 11 | ||
| Package1Key | | Package1Key | ||
| [[Package1]] | | [[Package1]] | ||
| No | | No | ||
| Yes | | Yes | ||
| | |- | ||
| | | 14 | ||
| SecureBootKey | |||
| Bootrom | |||
| No | |||
| No | |||
|- | |||
| 15 | |||
| SecureStorageKey | |||
| Bootrom | |||
| Yes | |||
| No | |||
|} | |||
=== [1.0.0-3.0.2] Key table after package1 === | |||
{| class="wikitable" border="1" | |||
|- | |||
! Keyslot | |||
! Name | |||
! Set by | |||
! Per-console | |||
! Per-firmware | |||
|- | |- | ||
| 12 | | 12 | ||
| MasterKey | | MasterKey | ||
| [[Package1]] | | [[Package1]] | ||
| No | | No | ||
| Yes, on security updates | | Yes, on security updates | ||
|- | |- | ||
| 13 | | 13 | ||
| PerConsoleKey | | PerConsoleKey | ||
| [[Package1]] | | [[Package1]] | ||
| Yes | | Yes | ||
| No | | No | ||
| [ | |} | ||
| | |||
=== [4.0.0]+ Key table after package1 === | |||
{| class="wikitable" border="1" | |||
|- | |- | ||
| | ! Keyslot | ||
| | ! Name | ||
! Set by | |||
! Per-console | |||
! Per-firmware | |||
|- | |||
| 12 | |||
| MasterKey | |||
| [[Package1]] | | [[Package1]] | ||
| No | | No | ||
| | | Yes, on security updates | ||
|- | |- | ||
| | | 13 | ||
| | | PerConsoleKey_40 | ||
| [[Package1]] | | [[Package1]] | ||
| Yes | |||
| No | | No | ||
|- | |- | ||
| 14 | | 14 | ||
| | | MasterKey_40 | ||
| [[Package1]] | | [[Package1]] | ||
| No | | No | ||
| Yes, on security updates | | Yes, on security updates | ||
|- | |- | ||
| 15 | | 15 | ||
| PerConsoleKey | | PerConsoleKey | ||
| [[Package1]] | | [[Package1]] | ||
| Yes | | Yes | ||
| No | | No | ||
|} | |} | ||
=== Key generation === | |||
Note: aes_unwrap(wrapped_key, wrap_key) is just another name for a single AES-128 block decryption. | Note: aes_unwrap(wrapped_key, wrap_key) is just another name for a single AES-128 block decryption. | ||