SPL ("Secure Platform services") is responsible for handling all cryptographic operations within the system and relaying them to the Secure Monitor when necessary.
During [1.0.0-3.0.2], the only existing services were "csrng" and "spl:". However, in [4.0.0+] the "spl:" service was refactored and split into new services with different permission levels. Each service exposes the IPC command list differently in order to prevent cryptographic operations to take place in the wrong context.
In [2.0.0+] where previously only one AES keyslot was used, there is now support for 4 of them and when the session closes, all allocated AES keyslots are automatically freed.
csrng
This is "nn::spl::detail::IRandomInterface".
| Cmd | Name |
|---|---|
| 0 | #GenerateRandomBytes |
GenerateRandomBytes
Takes an output type-0xA buffer and fills it with random data from GetRandomBytes SMC. Same command for "spl:" and "csrng" services, except for buffer-type.
spl:
This is "nn::spl::detail::IGeneralInterface".
| Cmd | Name |
|---|---|
| 0 | #GetConfig |
| 1 | #ExpMod |
| 5 | #SetConfig |
| 7 | #GenerateRandomBytes |
| 11 | #IsDevelopment |
| 24 | [3.0.0+] #SetBootReason |
| 25 | [3.0.0+] #GetBootReason |
spl:mig
This is "nn::spl::detail::ICryptoInterface".
| Cmd | Name |
|---|---|
| 0 | #GetConfig |
| 1 | #ExpMod |
| 5 | #SetConfig |
| 7 | #GenerateRandomBytes |
| 11 | #IsDevelopment |
| 24 | [3.0.0+] #SetBootReason |
| 25 | [3.0.0+] #GetBootReason |
| 2 | #GenerateAesKek |
| 3 | #LoadAesKey |
| 4 | #GenerateAesKey |
| 14 | #DecryptAesKey |
| 15 | #CryptAesCtr |
| 16 | #ComputeCmac |
| 21 | [2.0.0+] #AllocateAesKeyslot |
| 22 | [2.0.0+] #FreeAesKeyslot |
| 23 | [2.0.0+] #GetAesKeyslotAvailableEvent |
spl:fs
This is "nn::spl::detail::IFsInterface".
| Cmd | Name |
|---|---|
| 0 | #GetConfig |
| 1 | #ExpMod |
| 5 | #SetConfig |
| 7 | #GenerateRandomBytes |
| 11 | #IsDevelopment |
| 24 | [3.0.0+] #SetBootReason |
| 25 | [3.0.0+] #GetBootReason |
| 2 | #GenerateAesKek |
| 3 | #LoadAesKey |
| 4 | #GenerateAesKey |
| 14 | #DecryptAesKey |
| 15 | #CryptAesCtr |
| 16 | #ComputeCmac |
| 21 | [2.0.0+] #AllocateAesKeyslot |
| 22 | [2.0.0+] #FreeAesKeyslot |
| 23 | [2.0.0+] #GetAesKeyslotAvailableEvent |
| 9 | #ImportLotusKey |
| 10 | #DecryptLotusMessage |
| 12 | #GenerateSpecificAesKey |
| 19 | #LoadTitleKey |
| 31 | [5.0.0+] GetPackage2Hash |
spl:ssl
This is "nn::spl::detail::ISslInterface".
| Cmd | Name |
|---|---|
| 0 | #GetConfig |
| 1 | #ExpMod |
| 5 | #SetConfig |
| 7 | #GenerateRandomBytes |
| 11 | #IsDevelopment |
| 24 | [3.0.0+] #SetBootReason |
| 25 | [3.0.0+] #GetBootReason |
| 2 | #GenerateAesKek |
| 3 | #LoadAesKey |
| 4 | #GenerateAesKey |
| 14 | #DecryptAesKey |
| 15 | #CryptAesCtr |
| 16 | #ComputeCmac |
| 21 | [2.0.0+] #AllocateAesKeyslot |
| 22 | [2.0.0+] #FreeAesKeyslot |
| 23 | [2.0.0+] #GetAesKeyslotAvailableEvent |
| 13 | #DecryptRsaPrivateKey |
| 26 | [5.0.0+] ImportSslKey |
| 27 | [5.0.0+] SslExpMod |
spl:es
This is "nn::spl::detail::IEsInterface".
| Cmd | Name |
|---|---|
| 0 | #GetConfig |
| 1 | #ExpMod |
| 5 | #SetConfig |
| 7 | #GenerateRandomBytes |
| 11 | #IsDevelopment |
| 24 | [3.0.0+] #SetBootReason |
| 25 | [3.0.0+] #GetBootReason |
| 2 | #GenerateAesKek |
| 3 | #LoadAesKey |
| 4 | #GenerateAesKey |
| 14 | #DecryptAesKey |
| 15 | #CryptAesCtr |
| 16 | #ComputeCmac |
| 21 | [2.0.0+] #AllocateAesKeyslot |
| 22 | [2.0.0+] #FreeAesKeyslot |
| 23 | [2.0.0+] #GetAesKeyslotAvailableEvent |
| 13 | #DecryptRsaPrivateKey |
| 17 | #ImportEsKey |
| 18 | #UnwrapTitleKey |
| 20 | [2.0.0+] #UnwrapCommonTitleKey |
| 28 | [5.0.0+] ImportDrmKey |
| 29 | [5.0.0+] DrmExpMod |
| 31 | [6.0.0+] UnwrapElicenseKey |
| 32 | [6.0.0+] #LoadElicenseKey |
spl:manu
This is "nn::spl::detail::IManuInterface".
| Cmd | Name |
|---|---|
| 0 | #GetConfig |
| 1 | #ExpMod |
| 5 | #SetConfig |
| 7 | #GenerateRandomBytes |
| 11 | #IsDevelopment |
| 24 | [3.0.0+] #SetBootReason |
| 25 | [3.0.0+] #GetBootReason |
| 2 | #GenerateAesKek |
| 3 | #LoadAesKey |
| 4 | #GenerateAesKey |
| 14 | #DecryptAesKey |
| 15 | #CryptAesCtr |
| 16 | #ComputeCmac |
| 21 | [2.0.0+] #AllocateAesKeyslot |
| 22 | [2.0.0+] #FreeAesKeyslot |
| 23 | [2.0.0+] #GetAesKeyslotAvailableEvent |
| 13 | #DecryptRsaPrivateKey |
| 30 | [5.0.0+] ReEncryptRsaPrivateKey |
GetConfig
Wrapper for GetConfig SMC.
Takes an input u32 ConfigItem. Returns one or more output u64s ConfigValue.
ExpMod
Wrapper for ExpMod SMC.
Takes an output type-0xA buffer DataOut and 3 input type-0x9 buffers DataIn, ExpIn and ModIn.
Performs asymmetric crypto with user supplied modulus and exponent.
GenerateAesKek
Wrapper for GenerateAesKek SMC.
Takes an input 16-byte KeySource and two input u32s Generation and Option. Returns an output 16-byte AccessKey.
LoadAesKey
Wrapper for LoadAesKey SMC.
Takes an input u32 Keyslot , an input 16-byte AccessKey and an input 16-byte KeySource.
Sets the specified Keyslot with a key generated from AccessKey and KeySource.
[2.0.0+] Now verifies that the keyslot in use (0..3) is allocated by the current spl session, otherwise errors with 0xD21A. Previously, keyslot was hardcoded to 0.
GenerateAesKey
Takes an input 16-byte AccessKey and an input 16-byte KeySource. Returns an output 16-byte AesKey.
Generates a new key by decrypting (AES-ECB) KeySource with a key generated from the supplied AccessKey and the key set with LoadAesKey SMC.
[2.0.0+] Previously, it always used keyslot 0. Now it tries to allocate a keyslot to be used and returns 0xD01A if they're all busy. When the command is done, the keyslot is released.
SetConfig
Wrapper for SetConfig SMC.
Takes an input u32 ConfigItem and an input u64 ConfigValue.
Only ConfigItem 13 (IsChargerHiZModeEnabled) can be set.
ImportLotusKey
Wrapper for ImportLotusKey SMC.
Takes an input type-0x9 buffer DataIn, an input 16-byte AccessKey, an input 16-byte KeySource and an input u32 Version (0 for normal keys or 1 for extended keys).
Decrypts DataIn with a key generated from AccessKey and KeySource and imports it for later usage.
[5.0.0+] The Version argument was removed and this now calls the ReEncryptRsaPrivateKey SMC instead.
DecryptLotusMessage
Takes 3 input type-0x9 buffers DataIn, ModIn and LabelHashIn.
Uses the SecureExpMod SMC to decrypt DataIn using the private key imported with #ImportLotusKey and the supplied ModIn and LabelHashIn.
IsDevelopment
No input. Returns an output u8 bool.
Uses #GetConfig internally.
GenerateSpecificAesKey
Wrapper for GenerateSpecificAesKey SMC.
Takes an input 16-byte KeySource and two input u32s Generation and Option. Returns an output 16-byte AesKey.
DecryptRsaPrivateKey
Wrapper for DecryptRsaPrivateKey SMC.
Takes an output type-0xA buffer DataOut, an input type-0x9 DataIn, an input 16-byte AccessKey, an input 16-byte KeySource and an input u32 Version (0 for normal keys or 1 for extended keys).
Decrypts DataIn into DataOut with a key generated from AccessKey and KeySource.
Used by SSL for TLS client-privk.
[5.0.0+] The Version argument was removed and this now calls DecryptOrImportRsaPrivateKey SMC instead.
DecryptAesKey
Takes an input 16-byte KeySource and two input u32s Generation and Option. Returns an output 16-byte AesKey.
Decrypts (AES-ECB) KeySource with a key set with LoadAesKey SMC.
[2.0.0+] Introduced same keyslot allocation code as for #GenerateAesKey.
CryptAesCtr
Takes an output type-0x46 buffer DataOut, an input u32 Keyslot, an input type-0x45 buffer DataIn and an input 16-byte IvCtr.
Uses ComputeAes SMC to decrypt DataIn into DataOut using the key set in the specified Keyslot.
[2.0.0+] Verifies the keyslot was allocated by the current session.
ComputeCmac
Wrapper for ComputeCmac SMC.
Takes an input type-0x9 buffer DataIn and an input u32 Keyslot. Returns an output 16-byte Cmac.
[2.0.0+] Verifies the keyslot was allocated by the current session.
ImportEsKey
Wrapper for ImportEsKey SMC.
Takes an input type-0x9 buffer DataIn, an input 16-byte AccessKey, an input 16-byte KeySource and an input u32 Version (0 for normal keys or 1 for extended keys).
Decrypts DataIn with a key generated from AccessKey and KeySource and imports it for later usage.
[5.0.0+] The Version argument was removed and this now calls the ReEncryptRsaPrivateKey SMC instead.
UnwrapTitleKey
Wrapper for UnwrapTitleKey SMC.
Takes an output type-0xA buffer DataOut and 3 input type-0x9 buffers DataIn, ModIn and LabelHashIn. Returns an output u32 DataOutSize.
[3.0.0+] Now takes an input u32 Generation.
Decrypts DataIn into DataOut using the private key imported with #ImportEsKey and the supplied ModIn. Afterwards, verifies RSA-OAEP encoding using LabelHashIn.
LoadTitleKey
Wrapper for LoadTitleKey SMC.
Takes an input u32 Keyslot and an input 16-byte AccessKey.
[2.0.0+] Verifies the keyslot was allocated in the current session.
UnwrapCommonTitleKey
Wrapper for UnwrapCommonTitleKey SMC.
Takes an input 16-byte KeySource. Returns an output 16-byte AccessKey.
[3.0.0+] Now takes an input u32 Generation.
AllocateAesKeyslot
Returns an output u32 Keyslot.
Returns error 0xD01A if all keyslots are taken.
FreeAesKeyslot
Takes an input u32 Keyslot.
Returns error 0xD21A if the keyslot wasn't allocated by current session.
GetAesKeyslotAvailableEvent
Returns an output event handle for synchronizing with the AES keyslots.
SetBootReason
Takes an input u32 BootReason.
[4.0.0+] Returns 0xD41A if a value has been previously set without being gotten.
GetBootReason
Returns an output u32 BootReason.
[4.0.0+] Returns 0xD61A if a value has not previously been set and unsets the value after getting it.
LoadElicenseKey
Same as LoadTitleKey.