From Nintendo Switch Brew
Jump to navigation
Jump to search
| Offset
|
Size
|
Name
|
Description
|
| 0x0000 |
4 |
HeaderMagic |
|
| 0x0004 |
0x40 |
OuterDigest |
|
| Outer Section Begin
|
|
|
|
| 0x0044 |
0xC |
Reserved |
|
| 0x0050 |
0x40 |
InnerDigest |
|
| 0x0090 |
0x40 |
Stage2Signature |
|
| 0x0BA0 |
0x180 |
Stage2Pcp |
Pinned by fuses.
|
| Stage 2 Signed Section Begin
|
|
|
|
| 0x0FC0 |
16 |
Salt2 |
Random 16 bytes.
|
| 0x0FD0 |
16 |
Stage2Ecid |
|
| 0x0FE0 |
4 |
Stage2NumBinaries |
|
| 0x0FE4 |
0x100 |
? |
|
| 0x13F0 |
8 |
BrbctBinding |
Must match BR-BCT+0x19B0.
|
| 0x1400 |
8 * 0xA0 |
Stage2Components[8] |
|
| 0x1900 |
0x180 |
Stage1Signature |
Always RSA-3072.
|
| Stage 1 Signed Section Begin
|
|
|
|
| 0x1A80 |
16 |
Salt3 |
|
| 0x1A90 |
16 |
Stage1Ecid |
|
| 0x1AA0 |
4 |
Stage1NumBinaries |
|
| 0x1AA4 |
8 |
Key7KdfLabel |
|
| 0x1EE0 |
1 * 0x90 |
Stage1Components[1] |
|
| Outer Section End / Stage 2 Signed Section End / Stage 1 Signed Section End
|
|
|
|
NvStage1Component
| Offset
|
Size
|
Name
|
| AAD Section Start
|
|
|
| 0x0 |
4 |
BinaryMagic
|
| 0x4 |
4 |
BinaryLen
|
| 0x8 |
4 |
LoadDestination
|
| 0xC |
4 |
EntryPoint
|
| 0x10 |
4 |
Version
|
| 0x14 |
4 |
Reserved
|
| 0x18 |
8 |
PartitionOffset (Only used for MEM-BCT)
|
| 0x20 |
16 |
KdfLabel
|
| 0x30 |
4 |
Zeroes
|
| 0x34 |
12 |
GcmIv
|
| AAD Section End
|
|
|
| 0x40 |
16 |
GcmAuthTag
|
| 0x50 |
64 |
PayloadDigest (SHA512 of 0x2000..)
|
NvStage2Component
| Offset
|
Size
|
Name
|
| AAD Section Start
|
|
|
| 0x0 |
4 |
BinaryMagic
|
| 0x4 |
4 |
BinaryLen
|
| 0x8 |
4 |
LoadDestination
|
| 0xC |
4 |
EntryPoint
|
| 0x10 |
4 |
Version
|
| 0x24 |
0x1C |
?
|
| 0x30 |
16 |
KdfLabel
|
| 0x40 |
4 |
Zeroes
|
| 0x44 |
12 |
GcmIv
|
| AAD Section End
|
|
|
| 0x50 |
16 |
GcmAuthTag
|
| 0x60 |
64 |
PayloadDigest (SHA512 of 0x2000..)
|
NvBootComponentVersion
| Offset
|
Size
|
Name
|
| 0x0 |
1 |
Major
|
| 0x1 |
1 |
Minor
|
| 0x2 |
1 |
Ratchet (others)
|
| 0x2 |
2 |
BigRatchet (NVDEC only)
|
NvBootCryptoSignatures
This is a union.
| Offset
|
Size
|
Name
|
| 0x0 |
0x20 |
Sha256Signature
|
| 0x0 |
0x40 |
Sha512Signature
|
| 0x0 |
0x40 |
Rsa3072Signature
|
| 0x0 |
0xB10 |
XmssSignature
|