From Nintendo Switch Brew
Revision as of 03:01, 22 February 2020 by SciresM (talk | contribs)
Jump to navigation Jump to search

The Switch uses the NRR file format to verify NRO at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.

Offset Size Description
0x0 0x4 Magic "NRR0"
0x4 0x4 [9.0.0+] NRR signing key selector
0x8 0x8 Reserved
0x10 0x8 Title ID Mask
0x18 0x8 Title ID Pattern
0x20 0x10 Reserved
0x30 0x100 Modulus for verifying the second signature
0x130 0x100 First signature signed by a Nintendo key, over the above contents
0x230 0x100 Second signature verifiable with the above key, over the rest of the file
0x330 0x8 Title ID
0x338 0x4 File Size
0x33C 0x4 Module Type
0x340 0x4 Hash Offset (Always 0x350)
0x344 0x4 Hash Count
0x348 0x8 Reserved
0x350 0x20 * Hash Count NRO hashes (SHA-256)