96
edits
Changes
Jump to navigation
Jump to search
Line 506:
Line 506: + + + + + + + + + + + +
→ARM9 ITCM
| 0x2470
| 0x2470
| The unprotected ARM9-bootrom copies 0x1FFFA000(AXIWRAM mem initialized by ARM11-bootrom) size 0x2470 to 0x07FFD000(mirror of 0x01FFD000). This block contains DSi keys.
| The unprotected ARM9-bootrom copies 0x1FFFA000(AXIWRAM mem initialized by ARM11-bootrom) size 0x2470 to 0x07FFD000(mirror of 0x01FFD000). This block contains DSi keys.
* 0x1FFD000 is the RSA-1024 modulus for the retail System Menu
* 0x1FFD080 is the RSA-1024 modulus for DSi Wifi firmware and DSi Sound
* 0x1FFD100 is the RSA-1024 modulus for base DSi apps (Settings, Shop, etc.)
* 0x1FFD180 is the RSA-1024 modulus for DSiWare and RSA-signed cartridge headers
* 0x1FFD210 is the keyY for per-console-encrypted ES blocks
* 0x1FFD220 is the keyY for fixed-keyX ES blocks
* 0x1FFD300 is the DSi common (normal)key
* 0x1FFD380 is the first half of the retail keyY for modcrypt crypto "Nintendo"
* 0x1FFD398 is the keyX used for 'Tad' crypto, usually in keyslot 0x02 "Nintendo DS", ..
* 0x1FFD3C8 is the fixed keyY used for eMMC partition crypto (keyslot 0x03)
* 0x1FFD3E0 is the 0x1048-byte Blowfish data for DSi cart crypto
* 0x1FFE420 is the 0x1048-byte Blowfish data for DS cart crypto
|-
|-
| 0x01FFF470
| 0x01FFF470