Editing HDD Encryption
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 10: | Line 10: | ||
* XTS-AES-128 is used to encrypt all data on PS3 HDD. | * XTS-AES-128 is used to encrypt all data on PS3 HDD. | ||
* XTS is NOT CBC!!! It's AES-ECB with tweak XORing. AES-CBC is impractical for HDD encryption. Each sector can be encrypted/decrypted | * XTS is NOT CBC!!! It's AES-ECB with tweak XORing. AES-CBC is impractical for HDD encryption. Each sector can be encrypted/decrypted independantly from other HDD sectors. | ||
* Good paper about XTS-AES: http://ntnu.diva-portal.org/smash/get/diva2:347753/FULLTEXT01 | * Good paper about XTS-AES: http://ntnu.diva-portal.org/smash/get/diva2:347753/FULLTEXT01 | ||
* VFLASH is encrypted twice. First with ENCDEC keys and then with ATA keys. | * VFLASH is encrypted twice. First with ENCDEC keys and then with ATA keys. | ||
* Tweak and data XTS keys are of size 32 bytes but only the first 16 bytes are used. | * Tweak and data XTS keys are of size 32 bytes but only the first 16 bytes are used. | ||
* '''You can set and clear ATA keys with my Linux ps3encdec device driver which | * '''You can set and clear ATA keys with my Linux ps3encdec device driver which i use to test HDD/VFLASH encryption. But be careful, never set/clear ATA keys while some HDD regions/partitions are mounted !!! You will corrupt your data on your HDD !!!''' | ||
==Phat Consoles== | ==Phat Consoles== | ||
Line 21: | Line 21: | ||
* So no tweak and tweak key here. Each sector is encrypted with the same '''zeroed''' IV. | * So no tweak and tweak key here. Each sector is encrypted with the same '''zeroed''' IV. | ||
* VFLASH is encrypted '''once''' with ENCDEC key and zeroed IV! | * VFLASH is encrypted '''once''' with ENCDEC key and zeroed IV! | ||
* PHAT consoles are susceptible to the TLS CBC IV attack | * PHAT consoles are susceptible to the TLS CBC IV attack (which combined with [[http://www.psdevwiki.com/ps3/Talk:Playstation_Update_Package_(PUP)#Remark_.40_Installation | this]] would produce some decent results) | ||
* On the PHAT consoles with NOR flash AES-CBC-192 is used for HDD encryption(as on FAT consoles with NAND) and XTS-AES-128 for VFLASH encryption(as on slim consoles). | * On the PHAT consoles with NOR flash AES-CBC-192 is used for HDD encryption(as on FAT consoles with NAND) and XTS-AES-128 for VFLASH encryption(as on slim consoles). | ||
* Data key is of size 32 bytes but only the first 24 bytes are used for HDD and 16 bytes for VFLASH. | * Data key is of size 32 bytes but only the first 24 bytes are used for HDD and 16 bytes for VFLASH. |