Memory layout: Difference between revisions
follow up |
|||
| Line 507: | Line 507: | ||
| 0x80 | | 0x80 | ||
| Unknown, not used by [[FIRM]]. This isn't console-unique. | | Unknown, not used by [[FIRM]]. This isn't console-unique. | ||
The first 0x10-bytes are checked by the v6.0/v7.0 NATIVE_FIRM keyinit function, when non-zero it clears this block and continues to do the key generation. Otherwise when this block was already all-zero, it immediately returns. This memclear was probably an attempt at destroying the RSA slot0 modulus, that missed (exactly 0x1000-bytes away). Even | The first 0x10-bytes are checked by the v6.0/v7.0 NATIVE_FIRM keyinit function, when non-zero it clears this block and continues to do the key generation. Otherwise when this block was already all-zero, it immediately returns. This memclear was probably an attempt at destroying the RSA slot0 modulus, that missed (exactly 0x1000-bytes away). Even though they "failed" here, one would still need to derive the private exponent, which would require obtaining a ciphertext and plaintext. | ||
|- | |- | ||
| 0x01FFCD80 | | 0x01FFCD80 | ||