单卡联机 - Revision history

T at 12:35, 26 May 2013

2013-05-26T10:35:00Z

← Older revision		Revision as of 14:35, 26 May 2013
Line 1:		Line 1:
			译自[[Download_Play]]

	3DS dlplay有两个dlplay模式：3DS和DS。DS dlplay是只是普通的dsmode dlplay，使用了和从前同的接口和协议。与DS游戏卡相同，进入dsmode dlplay应用时按住start +select，3DS会禁用拉伸屏幕。		3DS dlplay有两个dlplay模式：3DS和DS。DS dlplay是只是普通的dsmode dlplay，使用了和从前同的接口和协议。与DS游戏卡相同，进入dsmode dlplay应用时按住start +select，3DS会禁用拉伸屏幕。

Line 20:		Line 22:
	080: 25 f2 56 c4 19 88 64 13 78 68 e2		080: 25 f2 56 c4 19 88 64 13 78 68 e2

	== ~~WPA2 加密~~ ==		== WPA2密钥 ==
	~~Download Play 协议和所以的本地无线通讯使用相同的WPA2加密机制。输入数据使用~~ [[~~Process_Services~~\|~~EncryptDecryptAes~~]] 和 [[PSPXI:EncryptDecryptAes\|keytype1]] 是一个 0x10-byte 哈希值. Download Play输入的口令是固定的，区别在于每一个本地无线协议。 CTR是一个0x10-byte 经过哈希的16-byte结构，包含了主机MAC地址, 正常应用的titleID中的uniqueID。(然而用于Download Play的uniqueID是固定的)。输出的十六进制加密数据是最终WPA2密码。这个有可能是MD5的0x10-byte哈希值是未知的。		用于引导单卡联机的可执行通信有一个单独的WPA2密钥，它是由 [[NWM_Services\|NWM]] 模块生成的一个随机的十六进制字符串。
	~~引导Download Play可执行文件的wpa2通讯使用上述方法生成的随机十六进制字符串作为密码。~~

	== 广播应用数据 ==		== 广播应用数据 ==

T: moved 下载游戏 to 单卡联机

2013-04-02T09:48:16Z

moved 下载游戏 to 单卡联机

← Older revision		Revision as of 13:48, 2 April 2013
(No difference)

T: /* 远程分布式系统更新 */

2013-03-26T13:28:38Z

远程分布式系统更新

← Older revision		Revision as of 16:28, 26 March 2013
Line 36:		Line 36:
	== 远程分布式系统更新 ==		== 远程分布式系统更新 ==

	As part of the child distribution process, a 3DS acting as the server in a local Download Play session, can send firmware updates to another 3DS unit acting as the client, through first sending the system update package then instructing the client to install reboot and reinstantiate a connection (~~which it caches information about temporarily~~) ~~remotely, if it finds system updates are necessary before distributing the child-application.~~ ( ~~eg. multiplayer game or a demo.~~ ) ~~Like "update" partitions on CTR Cards~~, ~~this is not an "automatic feature" and not implemented for all Download~~ Play ~~titles.~~		作为分布式系统的一部分，一台3DS扮演了本地Download Play服务器的角色，可以给作为客户端的机器发送固件更新。首先发送系统升级包，然后给客户端发送指令安装升级包并重启。在比如远程连接时 (缓存临时信息)，如果在发现运行分布式子应用(比如多人游戏)必须进行系统更新，就像升级CTR卡的分区一样, 这不是一个“自动功能”，并没有在所有的Download Play titles中实现。

T at 14:02, 26 March 2013

2013-03-26T13:02:09Z

← Older revision		Revision as of 16:02, 26 March 2013
Line 27:		Line 27:
	Download Play协议以[[CIA]] 格式广播3DS应用数据, 包含certificate chain, ticket, TMD各一,以及[[CXI\|CXI format]]格式封装的应用本体。广播的归档数据临时存储在内部的NAND Flash直至其他游戏通过Download Play协议占用此空间。		Download Play协议以[[CIA]] 格式广播3DS应用数据, 包含certificate chain, ticket, TMD各一,以及[[CXI\|CXI format]]格式封装的应用本体。广播的归档数据临时存储在内部的NAND Flash直至其他游戏通过Download Play协议占用此空间。

	CXI 应用数据使用了128-bit AES CBC加密. ~~The encryption uses the decrypted titlekey of the ticket~~, ~~and the titleid padded with zeros as the IV. To get the decrypted titlekey~~, ~~the titlekey stored in the ticket must be decrypted using 128~~-~~bit AES-CBC with the 3DS common key, and the same IV as mentioned previously.~~		CXI 应用数据使用了128-bit AES CBC加密. ticket中有加密的titlekey , 和titleID补零构成的IV。为了得到解密的titlekey,ticket中存储的titlekey必须使用128位AES-CBC的3DS公钥解密，以及前面提到的IV。
	的使用加密解密titlekey的票，的TitleID用零填充的IV。为了得到解密titlekey，titlekey存储在机票必须使用128位AES-CBC的3DS公用密钥解密，和相同的IV正如前面提到的。

	所以，事实上通过无线传输的3DS的应用程序，经过了3次加密：		所以，事实上通过无线传输的3DS的应用程序，经过了3次加密：
Line 35:		Line 34:
	* 第三次使用128位AES的WPA2加密CTR。		* 第三次使用128位AES的WPA2加密CTR。

	== ~~Remote Distribution of System-Updates~~ ==		== 远程分布式系统更新 ==

	As part of the child distribution process, a 3DS acting as the server in a local Download Play session, can send firmware updates to another 3DS unit acting as the client, through first sending the system update package then instructing the client to install reboot and reinstantiate a connection (which it caches information about temporarily) remotely, if it finds system updates are necessary before distributing the child-application. ( eg. multiplayer game or a demo. ) Like "update" partitions on CTR Cards, this is not an "automatic feature" and not implemented for all Download Play titles.		As part of the child distribution process, a 3DS acting as the server in a local Download Play session, can send firmware updates to another 3DS unit acting as the client, through first sending the system update package then instructing the client to install reboot and reinstantiate a connection (which it caches information about temporarily) remotely, if it finds system updates are necessary before distributing the child-application. ( eg. multiplayer game or a demo. ) Like "update" partitions on CTR Cards, this is not an "automatic feature" and not implemented for all Download Play titles.

T: /* Broadcasted application data */ translate v0.5

2013-03-26T12:39:54Z

Broadcasted application data: translate v0.5

← Older revision		Revision as of 15:39, 26 March 2013
Line 24:		Line 24:
	引导Download Play可执行文件的wpa2通讯使用上述方法生成的随机十六进制字符串作为密码。		引导Download Play可执行文件的wpa2通讯使用上述方法生成的随机十六进制字符串作为密码。

	== ~~Broadcasted application data~~ ==		== 广播应用数据 ==
	~~The~~ Download ~~Play protocol broadcasts 3DS application data in the~~ [[CIA]] ~~format~~, ~~which contains a certificate~~ chain, a ticket, ~~a TMD, and the actual application itself~~, in [[CXI\|CXI format]]. The broadcasted archive data is temporarily stored as a file on the internal NAND Flash storage, and is kept there until new archive data from a different game is received through the Download Play protocol.		Download Play协议以[[CIA]] 格式广播3DS应用数据, 包含certificate chain, ticket, TMD各一,以及[[CXI\|CXI format]]格式封装的应用本体。广播的归档数据临时存储在内部的NAND Flash直至其他游戏通过Download Play协议占用此空间。

	~~The~~ CXI ~~application content is again encrypted, this time using 128~~-bit AES ~~CBC~~. The encryption uses the decrypted titlekey of the ticket, and the titleid padded with zeros as the IV. To get the decrypted titlekey, the titlekey stored in the ticket must be decrypted using 128-bit AES-CBC with the 3DS common key, and the same IV as mentioned previously.		CXI 应用数据使用了128-bit AES CBC加密. The encryption uses the decrypted titlekey of the ticket, and the titleid padded with zeros as the IV. To get the decrypted titlekey, the titlekey stored in the ticket must be decrypted using 128-bit AES-CBC with the 3DS common key, and the same IV as mentioned previously.
			的使用加密解密titlekey的票，的TitleID用零填充的IV。为了得到解密titlekey，titlekey存储在机票必须使用128位AES-CBC的3DS公用密钥解密，和相同的IV正如前面提到的。

	~~So in actuality, the 3DS application code, as it is being transmitted wirelessly has been encrypted 3 times:~~		所以，事实上通过无线传输的3DS的应用程序，经过了3次加密：
	* ~~The first time is using 128-bit AES CTR encryption for the ExeFS of the CXI format,~~		* 第一次使用128位AES CTR加密的CXI格式的ExeFS
	* ~~the second time is using 128-bit AES CBC encryption in the archive data,~~		* 第二次使用128位AES CBC加密的归档数据
	* ~~and the third time is using 128-bit AES CTR for the WPA2 encryption.~~		* 第三次使用128位AES的WPA2加密CTR。

	== Remote Distribution of System-Updates ==		== Remote Distribution of System-Updates ==

	As part of the child distribution process, a 3DS acting as the server in a local Download Play session, can send firmware updates to another 3DS unit acting as the client, through first sending the system update package then instructing the client to install reboot and reinstantiate a connection (which it caches information about temporarily) remotely, if it finds system updates are necessary before distributing the child-application. ( eg. multiplayer game or a demo. ) Like "update" partitions on CTR Cards, this is not an "automatic feature" and not implemented for all Download Play titles.		As part of the child distribution process, a 3DS acting as the server in a local Download Play session, can send firmware updates to another 3DS unit acting as the client, through first sending the system update package then instructing the client to install reboot and reinstantiate a connection (which it caches information about temporarily) remotely, if it finds system updates are necessary before distributing the child-application. ( eg. multiplayer game or a demo. ) Like "update" partitions on CTR Cards, this is not an "automatic feature" and not implemented for all Download Play titles.

T: /* WPA2 Passphrase */

2013-03-26T12:26:12Z

WPA2 Passphrase

← Older revision		Revision as of 15:26, 26 March 2013
Line 20:		Line 20:
	080: 25 f2 56 c4 19 88 64 13 78 68 e2		080: 25 f2 56 c4 19 88 64 13 78 68 e2

	== WPA2 ~~Passphrase~~ ==		== WPA2 加密 ==
	~~The~~ Download Play ~~protocol and all local-WLAN communications have the WPA2 passphrase generated the same way. The input data used with~~ [[Process_Services\|EncryptDecryptAes]] ~~with~~ [[PSPXI:EncryptDecryptAes\|keytype1]] ~~is a~~ 0x10-byte ~~hash over an input passphrase~~. ~~This input passphrase is fixed for~~ Download ~~Play, it's unique per local-WLAN protocol. The CTR is a 0x10~~-byte ~~hash over a 16~~-~~byte structure which among other data includes the host MAC address~~, ~~and an ID which is normally from the application's uniqueID in the titleID.~~(~~The uniqueID used for Download Play is fixed however~~) ~~The hex output from crypting that data is the final WPA2 passphrase. This 0x10~~-~~byte hash is unknown, however this might be MD5.~~		Download Play 协议和所以的本地无线通讯使用相同的WPA2加密机制。输入数据使用 [[Process_Services\|EncryptDecryptAes]] 和 [[PSPXI:EncryptDecryptAes\|keytype1]] 是一个 0x10-byte 哈希值. Download Play输入的口令是固定的，区别在于每一个本地无线协议。 CTR是一个0x10-byte 经过哈希的16-byte结构，包含了主机MAC地址, 正常应用的titleID中的uniqueID。(然而用于Download Play的uniqueID是固定的)。输出的十六进制加密数据是最终WPA2密码。这个有可能是MD5的0x10-byte哈希值是未知的。
			引导Download Play可执行文件的wpa2通讯使用上述方法生成的随机十六进制字符串作为密码。
	~~The WPA2 passphrase used for communications with the booted Download Play executable is a separate passphrase, generated using the above method where the input passphrase is a random hex string.~~

	== Broadcasted application data ==		== Broadcasted application data ==

T: translate 20%

2013-03-26T11:47:28Z

translate 20%

← Older revision		Revision as of 14:47, 26 March 2013
Line 1:		Line 1:
	~~The~~ 3DS ~~dlplay title has two dlplay modes: 3DS and DS. DS dlplay is just regular dsmode dlplay, same interface and protocol as before. Like DS gamecards, holding down start~~+~~select while starting the dsmode dlplay client will disable stretching the screens.~~		3DS dlplay有两个dlplay模式：3DS和DS。DS dlplay是只是普通的dsmode dlplay，使用了和从前同的接口和协议。与DS游戏卡相同，进入dsmode dlplay应用时按住start +select，3DS会禁用拉伸屏幕。

	3DS dlplay有两个dlplay模式：3DS和DS。DS dlplay是只是普通的dsmode dlplay，使用了和从前同的接口和协议。就像DS gamecards一样，进入dsmode dlplay应用时按住start +select，将禁用拉伸屏幕。		== Download Play 协议 ==

	~~== Download~~ Play ~~协议 ==~~		3DS的Download Play 协议与 DS Wireless Multiboot (WMB) 协议完全不同。DS WMB协议用于无线以纯文本形式发送程序代码，而3DS的 download play协议使用WPA2加密的128位AES CTR广播应用程序。

	~~3DS的Download Play 协议与 DS Wireless Multiboot~~ (~~WMB~~) 协议完全不同. While the DS WMB protocol used to send program code in plaintext over wireless, the Download Play protocol is now using WPA2 encryption with 128-bit AES CTR to broadcast the application.		广播的信标(beacons)有以0.102400 / s的速度广播的静态的任天堂标签数据和 WPA2广播的数据帧，他们的大小不尽相同。
			客户端向主机请求身份验证，主机发送连接响应，响应包含了一个随机的ASCII十六进制SSID (如“EB6FAB77”)。之后使用WPA2加密的数据帧进行系统的通讯和传输的二进制文件。

	~~The broad-casted beacons have static Nintendo tag data, broad-casted at a rate of 0.102400/s. WPA2 data frames are broad-casted as well, the size of these varies.~~		这是从猴子球3D(vendor 001f32)导出的一个任天堂标签。数据中包含的vendor tag数据是加密的：
	After a client authenticates to the host, the host sends an association response, with a random ASCII hex SSID, like: "EB6FAB77". After that the systems communicate and transfer the binary with WPA2 encrypted data frames.

	~~This is a dump of the Nintendo tag of the beacon from Monkey ball 3D, with vendor 001f32. The data contained in this vendor tag is encrypted:~~
	000: 18 05 9f ae 17 c8 a5 1d 0b 81 28 be 74 0f d4 af		000: 18 05 9f ae 17 c8 a5 1d 0b 81 28 be 74 0f d4 af
	010: 97 30 04 60 fd 2d f3 d9 8d bc 22 80 51 60 3c 75		010: 97 30 04 60 fd 2d f3 d9 8d bc 22 80 51 60 3c 75

T: translate 15%

2013-03-26T11:23:09Z

translate 15%

New page

The 3DS dlplay title has two dlplay modes: 3DS and DS. DS dlplay is just regular dsmode dlplay, same interface and protocol as before. Like DS gamecards, holding down start+select while starting the dsmode dlplay client will disable stretching the screens.

3DS dlplay有两个dlplay模式：3DS和DS。DS dlplay是只是普通的dsmode dlplay，使用了和从前同的接口和协议。就像DS gamecards一样，进入dsmode dlplay应用时按住start +select，将禁用拉伸屏幕。

== Download Play 协议 ==

3DS的Download Play 协议与 DS Wireless Multiboot (WMB) 协议完全不同. While the DS WMB protocol used to send program code in plaintext over wireless, the Download Play protocol is now using WPA2 encryption with 128-bit AES CTR to broadcast the application.

The broad-casted beacons have static Nintendo tag data, broad-casted at a rate of 0.102400/s. WPA2 data frames are broad-casted as well, the size of these varies.
After a client authenticates to the host, the host sends an association response, with a random ASCII hex SSID, like: "EB6FAB77". After that the systems communicate and transfer the binary with WPA2 encrypted data frames.

This is a dump of the Nintendo tag of the beacon from Monkey ball 3D, with vendor 001f32. The data contained in this vendor tag is encrypted:
000: 18 05 9f ae 17 c8 a5 1d 0b 81 28 be 74 0f d4 af
010: 97 30 04 60 fd 2d f3 d9 8d bc 22 80 51 60 3c 75
020: d9 89 6d 16 c4 f3 aa 89 26 d4 14 25 67 75 8e 4b
030: 3c 97 85 c9 83 15 d4 96 06 b1 29 b6 f5 51 57 71
040: cc b6 1f 4a c8 bd 4f c0 57 43 cb ab fa 37 74 b0
050: 64 6b 87 69 a1 de a4 05 7c 7c 49 5d f5 21 25 83
060: 4c f2 d0 70 38 14 7b 0f f4 97 f7 ff f3 ff 36 cd
070: c2 e2 c0 78 98 d1 d5 4d 3d d4 9b 57 84 6c e2 4f
080: 25 f2 56 c4 19 88 64 13 78 68 e2

== WPA2 Passphrase ==
The Download Play protocol and all local-WLAN communications have the WPA2 passphrase generated the same way. The input data used with [[Process_Services|EncryptDecryptAes]] with [[PSPXI:EncryptDecryptAes|keytype1]] is a 0x10-byte hash over an input passphrase. This input passphrase is fixed for Download Play, it's unique per local-WLAN protocol. The CTR is a 0x10-byte hash over a 16-byte structure which among other data includes the host MAC address, and an ID which is normally from the application's uniqueID in the titleID.(The uniqueID used for Download Play is fixed however) The hex output from crypting that data is the final WPA2 passphrase. This 0x10-byte hash is unknown, however this might be MD5.

The WPA2 passphrase used for communications with the booted Download Play executable is a separate passphrase, generated using the above method where the input passphrase is a random hex string.

== Broadcasted application data ==
The Download Play protocol broadcasts 3DS application data in the [[CIA]] format, which contains a certificate chain, a ticket, a TMD, and the actual application itself, in [[CXI|CXI format]]. The broadcasted archive data is temporarily stored as a file on the internal NAND Flash storage, and is kept there until new archive data from a different game is received through the Download Play protocol.

The CXI application content is again encrypted, this time using 128-bit AES CBC. The encryption uses the decrypted titlekey of the ticket, and the titleid padded with zeros as the IV. To get the decrypted titlekey, the titlekey stored in the ticket must be decrypted using 128-bit AES-CBC with the 3DS common key, and the same IV as mentioned previously.

So in actuality, the 3DS application code, as it is being transmitted wirelessly has been encrypted 3 times:
* The first time is using 128-bit AES CTR encryption for the ExeFS of the CXI format,
* the second time is using 128-bit AES CBC encryption in the archive data,
* and the third time is using 128-bit AES CTR for the WPA2 encryption.

== Remote Distribution of System-Updates ==

As part of the child distribution process, a 3DS acting as the server in a local Download Play session, can send firmware updates to another 3DS unit acting as the client, through first sending the system update package then instructing the client to install reboot and reinstantiate a connection (which it caches information about temporarily) remotely, if it finds system updates are necessary before distributing the child-application. ( eg. multiplayer game or a demo. ) Like "update" partitions on CTR Cards, this is not an "automatic feature" and not implemented for all Download Play titles.