CommonETicket: Difference between revisions
No edit summary |
m →Content |
||
| Line 45: | Line 45: | ||
|- | |- | ||
| 0x1F2||0xB2||Unused | | 0x1F2||0xB2||Unused | ||
|- | |||
| 0x2A4||0x30||Unknown | |||
|- | |||
| 0x2D4||0x7C||Unused | |||
|} | |} | ||
The Signature Type is the same const as that in [[TMD]]. The certificate chain is located at offset | The Signature Type is the same const as that in [[TMD]]. The certificate chain is located at offset 0x350 for tickets from CDN/SOAP, however this cert-chain is removed once the ticket is installed to NAND. | ||
The titlekey is decrypted by using the [[AES]] engine with the ticket common-key keyslot where the keyY is one of 6 keyYs loaded via the keyY index stored in the ticket. AES-CBC mode is used where the IV is the big-endian titleID. Note that on a retail unit index0 is a retail keyY, while on a dev-unit index0 is the dev common-key which is a normal-key.(On retail for these keyYs, the hardware key-scrambler is used) | The titlekey is decrypted by using the [[AES]] engine with the ticket common-key keyslot where the keyY is one of 6 keyYs loaded via the keyY index stored in the ticket. AES-CBC mode is used where the IV is the big-endian titleID. Note that on a retail unit index0 is a retail keyY, while on a dev-unit index0 is the dev common-key which is a normal-key.(On retail for these keyYs, the hardware key-scrambler is used) | ||