Amiibo: Difference between revisions
No edit summary |
|||
Line 8: | Line 8: | ||
Most of the NFC pages are [[Process_Services_PXI|encrypted]]. This includes the actual Mii data for the owner, an UTF-16 string for the Amiibo nickname, etc. | Most of the NFC pages are [[Process_Services_PXI|encrypted]]. This includes the actual Mii data for the owner, an UTF-16 string for the Amiibo nickname, etc. | ||
The NFC tag for Amiibo is NTAG215. | |||
Each page is 4-bytes, the following is the structure of the NFC page: | |||
{| class="wikitable" border="1" | |||
|- | |||
! NFC page | |||
! Total pages | |||
! Raw byte offset in EEPROM | |||
! Total byte size | |||
! Description | |||
|- | |||
| 0 | |||
| 4 | |||
| 0x10 | |||
| 0x10 | |||
| Same as standard NTAG215: 9-byte serial-number, "internal" u8 value, two lock bytes then the "Capability Container (CC)" page. | |||
|- | |||
| 4 | |||
| 8 | |||
| 0x10 | |||
| 0x20 | |||
| SHA256-HMAC over 0x1DF-bytes: first 3-bytes are from the last 3-bytes of page[12], the rest is over the first 0x1DC-bytes of the plaintext data following this hash(see page[13]). | |||
|- | |||
| 12 | |||
| 1 | |||
| 0x30 | |||
| 0x4 | |||
| Unknown. Last 3-bytes here are used with the above HMAC. | |||
|- | |||
| 13 | |||
| | |||
| 0x34 | |||
| | |||
| The system crypts 0x1A0-bytes starting here. | |||
|} |