mirror of
https://github.com/DarkMatterCore/nxdumptool.git
synced 2024-11-26 20:22:17 +00:00
75 lines
2.7 KiB
C
75 lines
2.7 KiB
C
#pragma once
|
|
|
|
#ifndef __KEYS_H__
|
|
#define __KEYS_H__
|
|
|
|
#include <switch.h>
|
|
#include "nca.h"
|
|
|
|
#define FS_TID (u64)0x0100000000000000
|
|
|
|
#define SEG_TEXT BIT(0)
|
|
#define SEG_RODATA BIT(1)
|
|
#define SEG_DATA BIT(2)
|
|
|
|
#define SHA256_HASH_LENGTH 0x20
|
|
|
|
#define ETICKET_DEVKEY_DATA_SIZE 0x244
|
|
#define ETICKET_DEVKEY_CTR_OFFSET 0x4
|
|
#define ETICKET_DEVKEY_RSA_OFFSET 0x14
|
|
#define ETICKET_DEVKEY_RSA_SIZE (ETICKET_DEVKEY_DATA_SIZE - ETICKET_DEVKEY_RSA_OFFSET)
|
|
|
|
#define SIGTYPE_RSA2048_SHA1 (u32)0x10001
|
|
#define SIGTYPE_RSA2048_SHA256 (u32)0x10004
|
|
|
|
#define BIS_SYSTEM_PARTITION 31
|
|
|
|
#define COMMON_ETICKET_FILENAME "80000000000000e1"
|
|
#define PERSONALIZED_ETICKET_FILENAME "80000000000000e2"
|
|
|
|
typedef struct {
|
|
u64 titleID;
|
|
u8 mask;
|
|
u8 *data;
|
|
u64 dataSize;
|
|
} PACKED keyLocation;
|
|
|
|
typedef struct {
|
|
char name[128];
|
|
u8 hash[SHA256_HASH_LENGTH];
|
|
u64 size;
|
|
} PACKED keyInfo;
|
|
|
|
typedef struct {
|
|
u16 memory_key_cnt; /* Key counter for keys retrieved from memory. */
|
|
u16 ext_key_cnt; /* Key counter for keys retrieved from keysfile. */
|
|
u32 total_key_cnt; /* Total key counter. */
|
|
|
|
// Needed to decrypt the NCA header using AES-128-XTS
|
|
u8 header_kek_source[0x10]; /* Seed for header kek. */
|
|
u8 header_key_source[0x20]; /* Seed for NCA header key. */
|
|
u8 header_kek[0x10]; /* NCA header kek. */
|
|
u8 header_key[0x20]; /* NCA header key. */
|
|
|
|
// Needed to derive the KAEK needed to decrypt the NCA key area
|
|
u8 key_area_key_application_source[0x10]; /* Seed for kaek 0. */
|
|
u8 key_area_key_ocean_source[0x10]; /* Seed for kaek 1. */
|
|
u8 key_area_key_system_source[0x10]; /* Seed for kaek 2. */
|
|
|
|
// Needed to decrypt the title key block from an eTicket
|
|
u8 eticket_rsa_kek[0x10]; /* eTicket RSA kek. */
|
|
u8 titlekeks[0x20][0x10]; /* Title key encryption keys. */
|
|
|
|
// Needed to reencrypt the NCA key area for tik-less NSP dumps
|
|
u8 key_area_keys[0x20][3][0x10]; /* Key area encryption keys. */
|
|
} PACKED nca_keyset_t;
|
|
|
|
bool loadMemoryKeys();
|
|
bool decryptNcaKeyArea(nca_header_t *dec_nca_header, u8 *out);
|
|
bool loadExternalKeys();
|
|
bool retrieveNcaTikTitleKey(nca_header_t *dec_nca_header, u8 *out_tik, u8 *out_enc_key, u8 *out_dec_key);
|
|
bool generateEncryptedNcaKeyAreaWithTitlekey(nca_header_t *dec_nca_header, u8 *decrypted_nca_keys);
|
|
bool readCertsFromApplicationRomFs();
|
|
bool retrieveCertData(u8 *out_cert, bool personalized);
|
|
|
|
#endif
|