Certificates - Revision history

Luigoalma: Unknown parameter has use on CTCert Certificates

2020-08-06T16:34:47Z

Unknown parameter has use on CTCert Certificates

← Older revision		Revision as of 20:34, 6 August 2020
Line 32:		Line 32:
	\| 0x88 + X		\| 0x88 + X
	\| 0x4		\| 0x4
	\| ~~Unknown~~		\| Expiration time as UNIX Timestamp, used at least for [[CTCert]]
	\|-		\|-
	\| 0x8C + X		\| 0x8C + X

3dsguy: /* Public Key */

2013-08-02T05:18:41Z

Public Key

@@ Line 56: / Line 56: @@
 |-
 | 0x0
-| RSA_4096 ?
+| RSA_4096
 |-
 | 0x1
@@ Line 62: / Line 62: @@
 |-
 | 0x2
-| Elliptic Curve ?
+| Elliptic Curve
 |}
 === RSA ===
-This contains the Public Key(i.e. Modulus & Public Exponent). For RSA-2048 public keys, this section is as follows:
+This contains the Public Key(i.e. Modulus & Public Exponent)
 {| class="wikitable"
 |-
@@ Line 83: / Line 104: @@
 | 0x104
 | 0x34
 | Padding
 |}

3dsguy at 02:24, 27 April 2013

2013-04-27T00:24:59Z

← Older revision		Revision as of 04:24, 27 April 2013
Line 26:		Line 26:
	\| Key Type		\| Key Type
	\|-		\|-
	\| ~~0x84~~ + X		\| 0x48 + X
	\| 0x40		\| 0x40
	\| Name		\| Name
	\|-		\|-
	\| ~~0xC4~~ + X		\| 0x88 + X
	\| 0x4		\| 0x4
	\| Unknown		\| Unknown
	\|-		\|-
	\| ~~0xC8~~ + X		\| 0x8C + X
	\| *		\| *
	\| Public Key		\| Public Key

3dsguy at 02:21, 27 April 2013

2013-04-27T00:21:31Z

@@ Line 48: / Line 48: @@
 == Public Key ==
 === RSA ===
 This contains the Public Key(i.e. Modulus & Public Exponent). For RSA-2048 public keys, this section is as follows:

3dsguy at 02:04, 27 April 2013

2013-04-27T00:04:37Z

← Older revision		Revision as of 04:04, 27 April 2013
Line 1:		Line 1:
	== Overview ==		== Overview ==
	Certificates contain cryptography information for verifying Signatures. These certificates are also signed. The parent/child relationship between certificates, makes all the certificates effectively signed by 'Root', the public key for which is stored in NATIVE_FIRM.		Certificates contain cryptography information for verifying Signatures. These certificates are also signed. The parent/child relationship between certificates, makes all the certificates effectively signed by 'Root', the public key for which is stored in NATIVE_FIRM.

	~~The signature method used to sign the certificate can be determined by checking the Signature Type:~~
	~~{{Signature Types}}~~

	~~The hash for the signature is calculated over the actual certificate data(from the start of the "Issuer", to the end of the "Public Key", aligned to 0x40 bytes).~~

	== Format ==		== Format ==
Line 21:		Line 16:
	\| 0x4		\| 0x4
	\| X		\| X
	\| Signature		\| Signature with Padding (aligning next data to 0x40 bytes)
	\|-		\|-
	\| 0x4 + X		\| 0x4 + X
	~~\| 0x3C~~
	~~\| Signature Padding(aligning signature with padding to 0x40 bytes)~~
	\|-
	~~\| 0x40 + X~~
	\| 0x40		\| 0x40
	\| Issuer		\| Issuer
	\|-		\|-
	\| ~~0x80~~ + X		\| 0x44 + X
	\| 0x4		\| 0x4
	\| Key Type		\| Key Type
Line 44:		Line 35:
	\|-		\|-
	\| 0xC8 + X		\| 0xC8 + X
	\|		\| *
	\| Public Key		\| Public Key
	\|}		\|}

			== Signature ==

			The signature method used to sign the certificate can be determined by checking the Signature Type:
			{{Signature Types}}

			The hash for the signature is calculated over the actual certificate data(from the start of the "Issuer", to the end of the "Public Key", aligned to 0x40 bytes).

	== Public Key ==		== Public Key ==

3dsguy at 09:03, 26 April 2013

2013-04-26T07:03:58Z

← Older revision		Revision as of 11:03, 26 April 2013
Line 33:		Line 33:
	\| 0x80 + X		\| 0x80 + X
	\| 0x4		\| 0x4
	\| Key Type?		\| Key Type
	\|-		\|-
	\| 0x84 + X		\| 0x84 + X

3dsguy: /* Overview */

2013-04-25T02:16:44Z

Overview

@@ Line 3: / Line 3: @@
 The signature method used to sign the certificate can be determined by checking the Signature Type:
+{{Signature Types}}
 The hash for the signature is calculated over the actual certificate data(from the start of the "Issuer", to the end of the "Public Key", aligned to 0x40 bytes).

3dsguy at 03:08, 25 April 2013

2013-04-25T01:08:45Z

← Older revision		Revision as of 05:08, 25 April 2013
Line 31:		Line 31:
	\|}		\|}

	The ~~SHA-256~~ hash for the signature is calculated over the actual certificate data(from the start of the "Issuer", to the end of the "Public Key", aligned to 0x40 bytes).		The hash for the signature is calculated over the actual certificate data(from the start of the "Issuer", to the end of the "Public Key", aligned to 0x40 bytes).

	== Format ==		== Format ==

3dsguy at 03:04, 25 April 2013

2013-04-25T01:04:10Z

← Older revision		Revision as of 05:04, 25 April 2013
Line 31:		Line 31:
	\|}		\|}

	The ~~signatures~~ is ~~taken~~ over the actual certificate data(from the start of the "Issuer", to the end of the "Public Key", aligned to 0x40 bytes).		The SHA-256 hash for the signature is calculated over the actual certificate data(from the start of the "Issuer", to the end of the "Public Key", aligned to 0x40 bytes).

	== Format ==		== Format ==

3dsguy at 07:51, 24 April 2013

2013-04-24T05:51:42Z

← Older revision		Revision as of 09:51, 24 April 2013
Line 31:		Line 31:
	\|}		\|}

	The ~~for the RSA-SHA~~ signatures, the ~~hash is generated~~ from the start of the Issuer, to the end of the ~~certificate (~~aligned to 0x40 bytes).		The signatures is taken over the actual certificate data(from the start of the "Issuer", to the end of the "Public Key", aligned to 0x40 bytes).

	== Format ==		== Format ==
Line 51:		Line 51:
	\| 0x4 + X		\| 0x4 + X
	\| 0x3C		\| 0x3C
	\| Signature Padding		\| Signature Padding(aligning signature with padding to 0x40 bytes)
	\|-		\|-
	\| 0x40 + X		\| 0x40 + X