1,359
edits
Changes
Jump to navigation
Jump to search
Line 57:
Line 57: − + Line 64:
Line 64: − ! Cleared by − ! Introduced in − ! Deprecated on − | [[Package1]] − + − + + + + + + + + + + + + + + + + + + + + + + − | Forever − | [[1.0.0]] − | Never − | Forever − + − + + + + − + − + + + + + + + − | ? − | Yes − + − | Never − + − + − | Bootrom + − | No − | [[1.0.0]] − | Never − + − | ? − | [[4.0.0]] − | Never − |- − | 15 − | SecureStorageKey − | Bootrom − | [[Package1]] − | Yes − | No − | [[1.0.0]] − | Never − | Forever − | [[4.0.0]] − | Never + + + + +
this table is way too unreadable, trying to keep complexity down
== Package1 ==
== Package1 ==
=== Key generation ===
=== Key table during package1 ===
{| class="wikitable" border="1"
{| class="wikitable" border="1"
! Name
! Name
! Set by
! Set by
! Per-console
! Per-console
! Per-firmware
! Per-firmware
|-
|-
| 11
| 11
| Package1Key
| Package1Key
| [[Package1]]
| [[Package1]]
| No
| No
| Yes
| Yes
| [[1.0.0]]
|-
| Never
| 14
| SecureBootKey
| Bootrom
| No
| No
|-
| 15
| SecureStorageKey
| Bootrom
| Yes
| No
|}
=== [1.0.0-3.0.2] Key table after package1 ===
{| class="wikitable" border="1"
|-
! Keyslot
! Name
! Set by
! Per-console
! Per-firmware
|-
|-
| 12
| 12
| MasterKey
| MasterKey
| [[Package1]]
| [[Package1]]
| No
| No
| Yes, on security updates
| Yes, on security updates
|-
|-
| 13
| 13
| PerConsoleKey
| PerConsoleKey
| [[Package1]]
| [[Package1]]
| Yes
| Yes
| No
| No
| [[1.0.0]]
|}
| [[4.0.0]]
=== [4.0.0]+ Key table after package1 ===
{| class="wikitable" border="1"
|-
|-
| 13
! Keyslot
| OtherPerConsoleKey
! Name
! Set by
! Per-console
! Per-firmware
|-
| 12
| MasterKey
| [[Package1]]
| [[Package1]]
| No
| No
| [[4.0.0]]
| Yes, on security updates
|-
|-
| 14
| 13
| SecureBootKey
| PerConsoleKey_40
| [[Package1]]
| [[Package1]]
| Yes
| No
| No
|-
|-
| 14
| 14
| OtherMasterKey
| MasterKey_40
| [[Package1]]
| [[Package1]]
| No
| No
| Yes, on security updates
| Yes, on security updates
|-
|-
| 15
| 15
| PerConsoleKey
| PerConsoleKey
| [[Package1]]
| [[Package1]]
| Yes
| Yes
| No
| No
|}
|}
=== Key generation ===
Note: aes_unwrap(wrapped_key, wrap_key) is just another name for a single AES-128 block decryption.
Note: aes_unwrap(wrapped_key, wrap_key) is just another name for a single AES-128 block decryption.