29
edits
Changes
Jump to navigation
Jump to search
Line 38:
Line 38: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Copy over plaintext OTP info from the ITCM page.
| 0x90
| 0x90
| Copied into ITCM. The encrypted version of this is what New3DS-arm9loader hashes for key-generation.
| Copied into ITCM. The encrypted version of this is what New3DS-arm9loader hashes for key-generation.
|-
| 0x0
| 0x4
| This is always 0xDEADB00F.
|-
| 0x4
| 0x4
| This is the u32 DeviceId.
|-
| 0x8
| 0x10
| This is the fall-back keyY used for movable.sed keyY when movable.sed doesn't exist in NAND(the last two words here are used on retail for generating console-unique TWL keydata/etc). This is also used for "LocalFriendCodeSeed", etc.
|-
| 0x18
| 0x1
| ?
|-
| 0x19
| 0x1
| This is the [[CTCert]] issuer type: 0 = retail "Nintendo CA - G3_NintendoCTR2prod", non-zero = dev "Nintendo CA - G3_NintendoCTR2dev".
|-
| 0x1A
| 0x6
| ?
|-
| 0x20
| 0x4
| This is the CTCert ECDSA exponent, this is byte-swapped when *((u8*)(0x01FFB800+0x18)) is >=5.
|-
| 0x24
| 0x2
| ?
|-
| 0x26
| 0x1E
| This is the CTCert ECDSA privk.
|-
| 0x44
| 0x3C
| This is the CTCert ECDSA signature.
|-
| 0x80
| 0x10
| This is all-zero.
|-
|-
| 0x90
| 0x90