Line 186: |
Line 186: |
| per_console_key /* slot13 */ = aes_unwrap(4f025f0e.., old_keyblob_key) | | per_console_key /* slot13 */ = aes_unwrap(4f025f0e.., old_keyblob_key) |
| | | |
| + | .. and on 4.0.0 it was further moved around: |
| + | |
| + | old_keyblob_key /* slot15 */ = aes_unwrap(aes_unwrap(df206f59.., tsec_key /* slot13 */), sbk /* slot14 */) |
| + | keyblob_key /* slot13 */ = aes_unwrap(aes_unwrap(wrapped_keyblob_key, tsec_key /* slot13 */), sbk /* slot14 */) |
| + | cmac_key /* slot11 */ = aes_unwrap(59c7fb6f.., keyblob_key) |
| + | |
| + | if aes_cmac(buf=keyblob+0x10, len=0xA0, cmac_key) != keyblob[0:0x10]: |
| + | panic() |
| + | |
| + | aes_ctr_decrypt(buf=keyblob+0x20, len=0x90, iv=keyblob+0x10 key=keyblob_key) |
| + | |
| + | // Final keys: |
| + | hmm |
| | | |
| SBK and SSK keyslots are cleared after keys have been generated. | | SBK and SSK keyslots are cleared after keys have been generated. |
Line 219: |
Line 232: |
| [3.0.1] normalseed_dev = cd88155b... | | [3.0.1] normalseed_dev = cd88155b... |
| [3.0.1] normalseed_retail = d8a2410a... | | [3.0.1] normalseed_retail = d8a2410a... |
| + | |
| + | [4.0.0] wrapped_keyblob_key = 2d1f4880... |
| | | |
| ==== Table of used keyblobs ==== | | ==== Table of used keyblobs ==== |