NCCH: Difference between revisions

Smea (talk | contribs)
Line 38: Line 38:


By default encrypted regions are compressed with an LZ77 variant, then encrypted. The spec allows for both unencrypted and uncompressed regions to exist. Development units use a fixed system key for system titles. On retail part of the input [[AES]] engine key is unique per NCCH, the AES engine internally generates the final-normal key.
By default encrypted regions are compressed with an LZ77 variant, then encrypted. The spec allows for both unencrypted and uncompressed regions to exist. Development units use a fixed system key for system titles. On retail part of the input [[AES]] engine key is unique per NCCH, the AES engine internally generates the final-normal key.
As of [[7.0.0-13]] the system now supports a new encryption method for the secure-cryptotype, the CTR for this is the same as before. This is enabled when NCCH flag[3] is non-zero. When enabled, the [[RomFS]] and [[ExeFS]] files which don't have filenames "icon" or "banner"(that is, ".code") are crypted with a different keyslot. This keyslot is [[Savegames|initialized]] by the 6.0 gamecard savegame keyY init function during boot.


On retail for SD applications, exheader_systeminfoflags.flag bit1 must be set.
On retail for SD applications, exheader_systeminfoflags.flag bit1 must be set.
Line 178: Line 180:
!  INDEX
!  INDEX
!  DESCRIPTION
!  DESCRIPTION
|-
| 3
| Starting with [[7.0.0-13]], this enables a new encryption method for certain NCCH sections when this is non-zero(see above).
|-
|-
|  4
|  4