Changes

Jump to navigation Jump to search
2,065 bytes added ,  18:44, 12 May 2020
no edit summary
SPL ("Secure Platform services") is responsible for handling all cryptographic operations within the system and relaying them to the [[SMC|Secure Monitor]] when necessary.
 
During [1.0.0-3.0.2], the only existing services were "csrng" and "spl:". However, in [4.0.0+] the "spl:" service was refactored and split into new services with different permission levels. Each service exposes the IPC command list differently in order to prevent cryptographic operations to take place in the wrong context.
 
In [2.0.0+] where previously only one AES keyslot was used, there is now support for 4 of them and when the session closes, all allocated AES keyslots are automatically freed.
 
= csrng =
This is "nn::spl::detail::IRandomInterface".
 
{| class="wikitable" border="1"
|-
! Cmd || Name
|-
| 0 || [[#GetRandomBytesGenerateRandomBytes]]
|}
== GetRandomBytes GenerateRandomBytes ==Takes a an output type-6 0xA buffer and fills it with random datafrom [[SMC#GenerateRandomBytes|GenerateRandomBytes SMC]]. Same command for "spl:" and "csrng" services, except for buffer-type.
= spl: =
[2.0.0+] Where previously only one AES engine was utilized, there This is now support for 4 of them. [2.0.0+] When the session closes, all AES engines that were locked are automatically unlocked"nn::spl::detail::IGeneralInterface".
{| class="wikitable" border="1"
|-
! Cmd || Name || Notes|-| 0 || [[#GetConfig]] || Wrapper for [[SMC#GetConfig|GetConfig SMC]].|-| 1 || [[#UserExpMod]] || Speculative name. Wrapper for [[SMC#ExpMod|ExpMod SMC]].|-| 2 || [[#GenerateAesKek]] || Wrapper for [[SMC#GenerateAesKek|GenerateAesKek SMC]].|-| 3 || [[#LoadAesKey]] || Wrapper for [[SMC#LoadAesKey|LoadAesKey SMC]].|-| 4 || [[#GenerateAesKey]] || Decrypts 0x10 bytes using AES ECB and uses [[SMC#LoadAesKey|LoadAesKey SMC]] with a fixed Y.|-| 5 || [[#SetConfig]] || Wrapper for [[SMC#SetConfig|SetConfig SMC]].|-| 7 || [[#GetRandomBytes]] || Uses [[SMC#GetRandomBytes|GetRandomBytes SMC]].|-| 9 || [[#DecryptImportPrivkForExpMod0]] || Speculative name. Wrapper for [[SMC#LoadRsaPublicKey|LoadRsaPublicKey SMC]].|-| 10 || [[#ExpMod0]] || Speculative name. Wrapper for [[SMC#PublicRsa|PublicRsa SMC]].|-| 11 || [[#IsDevelopment]] ||
|-
| 12 0 || [[#GenerateSpecificAesKeyGetConfig]] || Wrapper for [[SMC#GenerateSpecificAesKey|GenerateSpecificAesKey SMC]].
|-
| 13 1 || [[#DecryptPrivkModularExponentiate]] || Speculative name. Wrapper for [[SMC#PrivateRsa|PrivateRsa SMC]].
|-
| 14 5 || [[#DecryptAesKeySetConfig]] || Decrypts 0x10 bytes using AES ECB and uses [[SMC#LoadAesKey|LoadAesKey SMC]] with fixed X and Y.
|-
| 15 7 || [[#DecryptAesCtrGenerateRandomBytes]] || Wrapper for [[SMC#CryptAes|CryptAes SMC]].
|-
| 16 11 || [[#ComputeCmacIsDevelopment]] || Wrapper for [[SMC#ComputeCmac|ComputeCmac SMC]].
|-
| 17 24 || [[#DecryptImportPrivkForExpMod1]3.0.0+] || Speculative name. Wrapper for [[SMC#LoadRsaPrivateKey|LoadRsaPrivateKey SMCSetBootReason]].
|-
| 18 25 || [[#ExpMod1]] || Speculative name. Wrapper for [[SMC#UnwrapPreparedAesKey|UnwrapPreparedAesKey SMC]].|-| 19 || [[#LoadPreparedAesKey]] || Wrapper for [[SMC#LoadPreparedAesKey|LoadPreparedAesKey SMC]].|-| 20 || [2.0.0+] [[#GeneratePreparedAesKek]] || Wrapper for [[SMC#GeneratePreparedAesKek|GeneratePreparedAesKek SMC]].|-| 21 || [2.0.0+] [[#LockAesEngine]] |||-| 22 || [23.0.0+] [[#UnlockAesEngineGetBootReason]] |||-| 23 || [2.0.0+] [[#GetSplWaitEvent]] ||
|}
== GetConfig ==
Takes a u32 ('''ConfigItem'''), and returns a u64 ('''ConfigVal'''). {| class="wikitable" border="1"|-! ConfigItem || Name|-| 1 || DisableProgramVerification|-| 2 || MemoryConfiguration|-| 3 || SecurityEngineIRQNumber|-| 4 || Returns 0x02?|-| 5 || HardwareType (0=Icosa, 1=Copper)|-| 6 || IsRetail|-| 7 || IsRecoveryBoot|-| 8 || DeviceId (byte7 clear)|-| 9 || BootReason|-| 10 || MemoryArrange|-| 11 || IsDebugMode|-| 12 || KernelMemoryConfiguration|-| 13 || BatteryProfile|}  [[PCV_services|PCV]] configures memory profiles based on id2.{| class="wikitable" border="1"|-! Platform! Version! Revision! id2|-| "jetson-tx1"| "11_40800_01_V9.8.3_V1.6"| N/A| N/A|-| "nx-abcb"| "10_40800_NoCfgVersion_V9.8.4_V1.6"| 0| 0|-| "nx-abca2"| "10_40800_NoCfgVersion_V9.8.7_V1.6"| 0| 0 or 3|-| "nx-abca2"| "10_40800_NoCfgVersion_V9.8.7_V1.6"| 1| 4|-| "nx-abca2"| "10_40800_NoCfgVersion_V9.8.7_V1.6"| 2| 1|-| "nx-abca2"| "10_40800_NoCfgVersion_V9.8.7_V1.6"| 3| 2|-|} [[SPL_services|SPL]] uses id3 Wrapper for setting up the security engine IRQ. [[Process Manager services|PM]] checks id1 and if non-zero, calls fsp-pr SetEnabledProgramVerification(false). [[NIM_services|NIM]] checks that id8 output must match the [[Settings_services|set:cal]] DeviceId with byte7 cleared, otherwise panic. [3.0.0+] [[Loader servicesSMC#GetConfig|ROGetConfig SMC]] checks id11, if set then skipping NRR rsa signatures is allowed.
Kernel uses id11 to determine behavior of svcBreak positive argumentsTakes an input u32 '''ConfigItem'''. It will break instead of just force-exiting the process which is what happens on retail. [2.0.0+] This is also used with certain debug [[SVC|SVCs]]Returns one or more output u64s '''ConfigValue'''.
Kernel reads id12 when setting up memory-related code. If bit0 is set, it will memset various allocated memory-regions with 0x58, 0x59, 0x5A ('X', 'Y', 'Z') instead of zero. This allows Nintendo devs to find uninitialized memory bugs. If bit17-16 is 0b01, the kernel assumes 6GB of DRAM instead of 4GB== ModularExponentiate ==Wrapper for [[SMC#ModularExponentiate|ModularExponentiate SMC]].
== UserExpMod ==Takes one an output type-10 (C descriptor) 0xA buffer ('''data_out_bufDataOut''') and 3 input type-9 (X descriptor) 0x9 buffers ('''data_in_bufDataIn''', '''exp_in_bufExpIn''' and '''mod_in_bufModIn''').
Performs asymmetric crypto with user supplied modulus and exponent.
== GenerateAesKek ==
Takes a 16-byte EKS ('''Encryption Key Source''') and two words ('''KeyGeneration''' and '''option''') as input.'''KeyGeneration''' ranges from 0 to 2Wrapper for [[SMC#GenerateAesKek|GenerateAesKek SMC]].
Returns a scrambled sealed KEK (Takes an input 16-byte '''KeySource''' and two input u32s '''Generation''' and '''Key Encryption KeyOption''' used as . Returns an output 16-byte '''key_xAccessKey''').
== LoadAesKey ==
Takes a u32 ('''keyslot''') and two 16-byte keys ('''key_x''' and '''key_y''')Wrapper for [[SMC#LoadAesKey|LoadAesKey SMC]].
Sets the specified Takes an input u32 '''keyslotKeyslot''' with a key generated from , an input 16-byte '''key_xAccessKey''' and an input 16-byte '''key_yKeySource'''.
Sets the specified '''Keyslot''' with a key generated from '''AccessKey''' and '''KeySource'''. [2.0.0+] Now verifies that the engine keyslot in use (0..3) is locked/owned allocated by the current spl session, otherwise errors with 0xD21A. Previously engine , keyslot was hardcoded to 0.
== GenerateAesKey ==
Takes a an input 16-byte KEK ('''key_xAccessKey''') and a an input 16-byte encrypted key ('''enc_keyKeySource'''. Returns an output 16-byte '''AesKey''').
Generates a new key by decrypting (AES-ECB) '''enc_keyKeySource''' with a key generated from the supplied '''key_xAccessKey''' and a fixed '''key_y'''the key set with [[SMC#LoadAesKey|LoadAesKey SMC]].
[2.0.0+] Previously, it always used engine keyslot 0. Now it tries to allocate an engine a keyslot to be used and returns 0xD01A if they're all busy. When the command is done, the engine keyslot is released.
== SetConfig ==
Takes a u32 ('''ConfigItem''') and a u64 ('''ConfigVal''')Wrapper for [[SMC#SetConfig|SetConfig SMC]].
{| class="wikitable" border="1"Takes an input u32 '''ConfigItem''' and an input u64 '''ConfigValue'''.|-! Only '''ConfigItem || Name|-| ''' 13 || BatteryProfile|}(IsChargerHiZModeEnabled) can be set.
Any other '''ConfigItem''', besides 13, can't be set== ImportLotusKey ==Wrapper for [[SMC#DecryptAndImportLotusKey|DecryptAndImportLotusKey SMC]].
== DecryptImportPrivkForExpMod0 ==Takes one an input type-9 (X descriptor) 0x9 buffer ('''enc_privk_in_bufDataIn'''), a an input 16-byte KEK ('''key_xAccessKey'''), a an input 16-byte key ('''key_yKeySource''') and a an input u32 ('''versionVersion''').'''version''' is (0 for normal keys or 1 for extended keys).
Decrypts '''enc_privk_in_bufDataIn''' with a key generated from '''key_xAccessKey''' and '''key_yKeySource''' and imports it for later usage.
== ExpMod0 ==Takes one type-10 (C descriptor) buffer ([5.0.0+] The '''data_out_bufVersion''') argument was removed and 3 type-9 (X descriptor) buffers ('''data_in_buf''', '''param0_in_buf''' and '''param1_in_buf''')this now calls the [[SMC#ReencryptDeviceUniqueData|ReencryptDeviceUniqueData SMC]] instead.
Decrypts == DecryptLotusMessage ==Takes 3 input type-0x9 buffers '''data_in_bufDataIn''' into '''data_out_buf''' using the private key imported with [[#DecryptImportPrivkForExpMod0]] and the supplied buffers , '''param0_in_bufModIn''' and '''param1_in_bufLabelHashIn'''.
Returns Uses the [[SMC#ModularExponentiateByStorageKey|ModularExponentiateByStorageKey SMC]] to decrypt '''DataIn''' using the private key imported with [[#ImportLotusKey]] and unknown u32the supplied '''ModIn''' and '''LabelHashIn'''.
== IsDevelopment ==
No input params. Returns an output u8 bool. Uses [[#GetConfig]] internally.
Uses == GenerateSpecificAesKey ==Wrapper for [[SMC#GetConfigGenerateSpecificAesKey|GenerateSpecificAesKey SMC]] internally with id=6. Returns true if output from that is 0, or if the SMC returned error 2.
Takes an input 16-byte '''KeySource''' and two input u32s '''Generation''' and '''Option'''. Returns an u8 flag for whether the system is devunit. Output flag is 0 on retailoutput 16-byte '''AesKey'''.
== GenerateSpecificAesKey DecryptDeviceUniqueData ==Takes a 16-byte seed ('''key_seed''') and two words ('''KeyGeneration''' and '''option''') as input.'''KeyGeneration''' ranges from 0 to 2Wrapper for [[SMC#DecryptDeviceUniqueData|DecryptDeviceUniqueData SMC]].
Returns a scrambled (unsealed?) key (Takes an output type-0xA buffer '''DataOut''', an input type-0x9 '''DataIn''', an input 16-byte '''AccessKey''', an input 16-byte '''KeySource''' and an input u32 '''key_aVersion'''(0 for normal keys or 1 for extended keys).
== DecryptPrivk ==Takes one type-10 (C descriptor) buffer (Decrypts '''dec_privk_out_bufDataIn'''), one type-9 (X descriptor) buffer (into '''enc_privk_in_bufDataOut'''), with a 16-byte KEK ('''key_x'''), a 16-byte key (generated from '''key_yAccessKey''') and a u32 ('''version''').'''versionKeySource''' is 0 for normal keys or 1 for extended keys.
Decrypts '''enc_privk_in_buf''' into '''dec_privk_out_buf''' with a key generated from '''key_x''' and '''key_y'''Used by [[SSL_services|SSL]] for TLS client-privk.
Used by [[SSL_services|SSL]5.0.0+]-sysmodule for TLS client-privkThe '''Version''' argument was removed.
== DecryptAesKey ==
Takes a an input 16-byte encrypted key ('''enc_keyKeySource''') and two words (input u32s '''KeyGenerationGeneration''' and '''optionOption''') as input.Returns an output 16-byte '''KeyGenerationAesKey''' ranges from 0 to 2.
Decrypts (AES-ECB) '''enc_keyKeySource''' with a key generated from fixed '''key_x''' and '''key_y''' and returns a 16-byte decrypted key ('''dec_key''')set with [[SMC#LoadAesKey|LoadAesKey SMC]].
[2.0.0+] Introduced same engine keyslot allocation code as for [[#GenerateAesKey]].
== DecryptAesCtr CryptAesCtr ==Takes a an output type-0x46 (B descriptor) buffer ('''data_out_bufDataOut'''), a an input u32 ('''keyslotKeyslot'''), a an input type-0x45 (A descriptor) buffer ('''data_in_bufDataIn''') and a an input 16-byte CTR ('''aes_ctrIvCtr''').
Decrypts Uses [[SMC#ComputeAes|ComputeAes SMC]] to decrypt '''data_in_bufDataIn''' into '''data_out_bufDataOut''' using the key set in the specified '''keyslotKeyslot'''.
[2.0.0+] Verifies the engine is locked keyslot was allocated by the current session.
== ComputeCmac ==
Wrapper for [[SMC#ComputeCmac|ComputeCmac SMC]]. Takes one an input type-9 (X descriptor) 0x9 buffer ('''data_in_bufDataIn''') and a an input u32 ('''Keyslot'''. Returns an output 16-byte '''Cmac'''. [2.0.0+] Verifies the keyslot was allocated by the current session. == ImportEsKey ==Wrapper for [[SMC#DecryptAndImportEsDeviceKey|DecryptAndImportEsDeviceKey SMC]]. Takes an input type?-0x9 buffer '''DataIn''', an input 16-byte '''AccessKey''', an input 16-byte '''KeySource''' and an input u32 '''Version''' (0 for normal keys or 1 for extended keys).
Returns Decrypts '''DataIn''' with a 16-byte CMAC calculated over key generated from '''AccessKey''' and '''data_in_bufKeySource'''and imports it for later usage.
[25.0.0+] Verifies The '''Version''' argument was removed and this now calls the engine is locked by current session[[SMC#ReencryptDeviceUniqueData|ReencryptDeviceUniqueData SMC]] instead.
== DecryptImportPrivkForExpMod1 UnwrapTitleKey ==Takes one type-9 (X descriptor) buffer ('''enc_privk_in_buf'''), a 16-byte KEK ('''key_x'''), a 16-byte key ('''key_y''') and a u32 ('''version''').'''version''' is 0 for normal keys or 1 Wrapper for extended keys[[SMC#PrepareEsDeviceUniqueKey|PrepareEsDeviceUniqueKey SMC]].
Decrypts Takes an output type-0xA buffer '''enc_privk_in_bufDataOut''' with a key generated from and 3 input type-0x9 buffers '''DataIn''', '''key_xModIn''' and '''key_yLabelHashIn'''. Returns an output u32 '''DataOutSize''' and imports it for later usage.
== ExpMod1 ==Takes [3 type-9 (X descriptor) buffers (.0.0+] Now takes an input u32 '''data_in_bufGeneration''', '''param0_in_buf''' and '''param1_in_buf''').
Decrypts '''data_in_bufDataIn''' into '''DataOut''' using the private key imported with [[#DecryptImportPrivkForExpMod1ImportEsKey]] and the supplied buffers '''param0_in_bufModIn''' and . Afterwards, verifies RSA-OAEP encoding using '''param1_in_bufLabelHashIn'''.
Generates == LoadTitleKey ==Wrapper for [[SMC#LoadPreparedAesKey|LoadPreparedAesKey SMC]]. Takes an input u32 '''Keyslot''' and returns a an input 16-byte '''AccessKey'''. [2.0.0+] Verifies the keyslot was allocated in the current session. == UnwrapCommonTitleKey ==Wrapper for [[SMC#PrepareEsCommonKey|PrepareEsCommonKey SMC]]. Takes an input 16-byte '''KeySource'''. Returns an output 16-byte key ('''key_zAccessKey'''. [3.0.0+] Now takes an input u32 ')''Generation'''. == AllocateAesKeyslot ==Returns an output u32 '''Keyslot'''. Returns error 0xD01A if all keyslots are taken. == DeallocateAesKeySlot ==Takes an input u32 '''Keyslot'''. Returns error 0xD21A if the keyslot wasn't allocated by current session. == GetAesKeyslotAvailableEvent ==Returns an output event handle for synchronizing with the AES keyslots. == SetBootReason ==Takes an input u32 '''BootReason'''. [4.0.0+] Returns 0xD41A if a value has been previously set without being [[#GetBootReason|gotten]]. == GetBootReason ==Returns an output u32 '''BootReason'''. [4.0.0+] Returns 0xD61A if a value has not previously been set and unsets the value after getting it.
== LoadPreparedAesKey ==
Takes a u32 ('''keyslot''') and a 16-byte key ('''key_z''')Same as [[#LoadTitleKey|LoadTitleKey]].
Sets the specified '''keyslot''' with a key generated from '''key_z'''= spl:mig =This is "nn::spl::detail::ICryptoInterface".
{| class="wikitable" border="1"|-! Cmd || Name|-| 0 || [[#GetConfig]]|-| 1 || [[#ModularExponentiate]]|-| 5 || [[#SetConfig]]|-| 7 || [[#GenerateRandomBytes]]|-| 11 || [[#IsDevelopment]]|-| 24 || [3.0.0+] [[#SetBootReason]]|-| 25 || [3.0.0+] [[#GetBootReason]]|-| 2 || [[#GenerateAesKek]]|-| 3 || [[#LoadAesKey]]|-| 4 || [[#GenerateAesKey]]|-| 14 || [[#DecryptAesKey]]|-| 15 || [[#CryptAesCtr]]|-| 16 || [[#ComputeCmac]]|-| 21 || [2.0.0+] Verifies the engine is locked by current session[[#AllocateAesKeyslot]]|-| 22 || [2.0.0+] [[#DeallocateAesKeySlot]]|-| 23 || [2.0.0+] [[#GetAesKeyslotAvailableEvent]]|}
== GeneratePreparedAesKek =spl:fs =Takes a 16-byte EKS ('''Encryption Key Source''')This is "nn::spl::detail::IFsInterface".
Returns a scrambled sealed KEK ('''Key Encryption Key''' used as '''key_z'''){| class="wikitable" border="1"|-! Cmd || Name|-| 0 || [[#GetConfig]]|-| 1 || [[#ModularExponentiate]]|-| 5 || [[#SetConfig]]|-| 7 || [[#GenerateRandomBytes]]|-| 11 || [[#IsDevelopment]]|-| 24 || [3.0.0+] [[#SetBootReason]]|-| 25 || [3.0.0+] [[#GetBootReason]]|-| 2 || [[#GenerateAesKek]]|-| 3 || [[#LoadAesKey]]|-| 4 || [[#GenerateAesKey]]|-| 14 || [[#DecryptAesKey]]|-| 15 || [[#CryptAesCtr]]|-| 16 || [[#ComputeCmac]]|-| 21 || [2.0.0+] [[#AllocateAesKeyslot]]|-| 22 || [2.0.0+] [[#DeallocateAesKeySlot]]|-| 23 || [2.0.0+] [[#GetAesKeyslotAvailableEvent]]|-| 9 || [[#ImportLotusKey]]|-| 10 || [[#DecryptLotusMessage]]|-| 12 || [[#GenerateSpecificAesKey]]|-| 19 || [[#LoadTitleKey]]|-| 31 || [5.0.0+] GetPackage2Hash|}
== LockAesEngine =spl:ssl =Returns the id of the engine that was locked, or 0xD01A if all engines are busy. You need to lock an engine before using AES functionsThis is "nn::spl::detail::ISslInterface".
{| class="wikitable" border= UnlockAesEngine "1"|-! Cmd || Name|-| 0 || [[#GetConfig]]|-| 1 || [[#ModularExponentiate]]|-| 5 || [[#SetConfig]]|-| 7 || [[#GenerateRandomBytes]]|-| 11 || [[#IsDevelopment]]|-| 24 || [3.0.0+] [[#SetBootReason]]|-| 25 || [3.0.0+] [[#GetBootReason]]|-| 2 || [[#GenerateAesKek]]|-| 3 || [[#LoadAesKey]]|-| 4 || [[#GenerateAesKey]]|-| 14 || [[#DecryptAesKey]]|-| 15 || [[#CryptAesCtr]]|-| 16 || [[#ComputeCmac]]|-| 21 || [2.0.0+] [[#AllocateAesKeyslot]]|-| 22 || [2.0.0+] [[#DeallocateAesKeySlot]]|-| 23 || [2.0.0+] [[#GetAesKeyslotAvailableEvent]]|-| 13 || [[#DecryptDeviceUniqueData]]|-| 26 || [5.0.0+] DecryptAndStoreSslClientCertKey|-| 27 || [5.0.0+] ModularExponentiateWithSslClientCertKey|} = spl:es =This is "nn::spl::detail::IEsInterface". {| class="wikitable" border="1"|-! Cmd || Name|-| 0 || [[#GetConfig]]|-| 1 || [[#ModularExponentiate]]|-| 5 || [[#SetConfig]]|-| 7 || [[#GenerateRandomBytes]]|-| 11 || [[#IsDevelopment]]|-| 24 || [3.0.0+] [[#SetBootReason]]|-| 25 || [3.0.0+] [[#GetBootReason]]|-| 2 || [[#GenerateAesKek]]|-| 3 || [[#LoadAesKey]]|-| 4 || [[#GenerateAesKey]]|-| 14 || [[#DecryptAesKey]]|-| 15 || [[#CryptAesCtr]]|-| 16 || [[#ComputeCmac]]|-| 21 || [2.0.0+] [[#AllocateAesKeyslot]]|-| 22 || [2.0.0+] [[#DeallocateAesKeySlot]]|-| 23 || [2.0.0+] [[#GetAesKeyslotAvailableEvent]]|-| 13 || [[#DecryptDeviceUniqueData]]|-| 17 || [[#ImportEsKey]]|-| 18 || [[#UnwrapTitleKey]]|-| 20 || [2.0.0+] [[#PrepareEsCommonKey]]|-| 28 || [5.0.0+] DecryptAndStoreDrmDeviceCertKey|-| 29 || [5.0.0+] ModularExponentiateWithDrmDeviceCertKey|-| 31 || [6.0.0+] PrepareEsArchiveKey|-| 32 || [6.0.0+] [[#LoadPreparedAesKey]]|} = spl:manu =This is "nn::spl::detail::IManuInterface". {| class="wikitable" border="1"|-! Cmd || Name|-| 0 || [[#GetConfig]]|-| 1 || [[#ModularExponentiate]]|-| 5 || [[#SetConfig]]|-| 7 || [[#GenerateRandomBytes]]|-| 11 || [[#IsDevelopment]]|-| 24 || [3.0.0+] [[#SetBootReason]]|-| 25 || [3.0.0+] [[#GetBootReason]]|-| 2 || [[#GenerateAesKek]]|-| 3 || [[#LoadAesKey]]|-| 4 || [[#GenerateAesKey]]|-| 14 || [[#DecryptAesKey]]|-| 15 || [[#CryptAesCtr]]|-| 16 || [[#ComputeCmac]]|-| 21 || [2.0.0+] [[#AllocateAesKeyslot]]|-| 22 || [2.0.0+] [[#DeallocateAesKeySlot]]|-| 23 || [2.0.0+] [[#GetAesKeyslotAvailableEvent]]|-| 13 || [[#DecryptDeviceUniqueData]]Takes a single u32 and unlocks the engine with that id|-| 30 || [5. It must be owned by current session otherwise 0xD21A will be returned0.0+] ReencryptDeviceUniqueData|}
== GetSplWaitEvent ==Returns an event handle for synchronizing with the locked AES engine.[[Category:Services]]

Navigation menu