Changes

Jump to navigation Jump to search
184 bytes added ,  17:07, 11 January 2017
no edit summary
Line 94: Line 94:  
* 0x0001c878..0x0001d078 size 0x800-bytes: These are the 3DS RSA-2048 modulus which are eventually copied to arm9_itcm+0x4900: on retail the first 4 are copied there by boot9, on devunit the last 4 are copied to itcm.
 
* 0x0001c878..0x0001d078 size 0x800-bytes: These are the 3DS RSA-2048 modulus which are eventually copied to arm9_itcm+0x4900: on retail the first 4 are copied there by boot9, on devunit the last 4 are copied to itcm.
 
* 0x0001d078 size 0x120-bytes is the initial data for the .data section @ 0x1ffe8000, this is the very end of the protected arm11-bootrom.
 
* 0x0001d078 size 0x120-bytes is the initial data for the .data section @ 0x1ffe8000, this is the very end of the protected arm11-bootrom.
 +
 +
== AES keys ==
 +
See the Tools section for how Boot9 initializes the keyslots.
 +
 +
See also [[AES_Registers|here]].
 +
 +
For an issue with console-unique key-init, see [[OTP_Registers|here]].
    
== Boot Procedure ==
 
== Boot Procedure ==

Navigation menu