Editing Secure Loader

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
The PS4 Secure Loader is the Initial Program Loader running on the [[AMD SAMU]] processor. It is [[Codenames|codenamed]] as 80000001. The PS4 Secure Loader is likely the main loader of the [[Secure Kernel]] (80010001) and of the Kernel (80010002).
The PS4 Secure Loader is the SAMU Initial Program Loader. It is [[Codenames|codenamed]] as 80000001. The PS4 Secure Loader is likely the main loader of the [[Secure Kernel]] (80010001).
 
See also the [https://www.psdevwiki.com/ps5/Secure_Loader PS5 Secure Loader].


= Structure =
= Structure =
Line 16: Line 14:
| 0x8 || 4 || Entry Point || Little Endian (0x100)
| 0x8 || 4 || Entry Point || Little Endian (0x100)
|-
|-
| 0xC || 4 || Body Size || Little Endian (e.g 0x232D0)
| 0xC || 4 || Payload Size || Little Endian (e.g 0x232D0)
|-
|-
| 0x10 || 0x10 || Padding || Zeroes
| 0x10 || 0x10 || Padding || Zeroes
|-
|-
| 0x20 || 0x20 || SHA256 of the decrypted body || Verified from 0x280 to 0x23550  
| 0x20 || 0x20 || SHA256 of the decrypted payload || Verified from 0x280 to 0x23550  
|-
|-
| 0x40 || 0xE0 || Padding || ASCII zeroes
| 0x40 || 0xE0 || Padding || ASCII zeroes
|-
|-
| 0x120 || 0x20 || Revision Nonce || (Likely) SHA256 of the IPL's revision, from this point onward, IPL is encrypted with two layers of AES-CBC crypto
| 0x120 || 0x20 || Revision Nonce || (Likely) SHA256 of the SAM IPL's revision, from this point onward, SAM IPL is encrypted with two layers of AES-CBC crypto
|-
|-
| 0x140 || 0x40 || MetaData ||
| 0x140 || 0x40 || Metadata ||
|-
|-
| 0x180 || 0x100 || RSA2048 Header Signature || Verified with RSA modulus from SAMU BootROM from 0 to 0x180
| 0x180 || 0x100 || RSA Header Signature || Verified with RSA modulus from SAMU BootROM from 0 to 0x180
|-
|-
| 0x280 || 0x232D0 || Body ||
| 0x280 || 0x232D0 || Payload ||
|-
|-
| 0x23550 || 0x100 || RSA Footer Signature || Verified from header + body (somewhere else, likely PUP SM Manager)
| 0x23550 || 0x100 || RSA Footer Signature || Verified from header + body (somewhere else, likely PUP SM Manager)
Line 42: Line 40:
| 0x0 || 0x20 || MetaData Body || Contains KeyRings
| 0x0 || 0x20 || MetaData Body || Contains KeyRings
|-
|-
| 0x20 || 0x20 || MetaData Digest || HMAC-SHA256 digest of (header plus metadata)
| 0x20 || 0x20 || MetaData digest || HMAC-SHA256 digest of (header plus metadata)
|}
|}


Line 56: Line 54:


{| class="wikitable"
{| class="wikitable"
! Revision !! Hash !! Versions Supported !! Notes
! Hash !! Versions Supported !! Notes
|-
|-
| 0x4 || N.A || All ||  
| N.A || All || Revision 0x4
|-
|-
| 0x23 || {{hex| 60 CF 88 21 68 52 47 93 8B 6C 81 23 AE D2 A8 B0 B8 EF 9D 39 D9 AE B2 72 7A 0C 64 FD 81 01 18 E7}} || All ||  
| {{hex| 60 CF 88 21 68 52 47 93 8B 6C 81 23 AE D2 A8 B0 B8 EF 9D 39 D9 AE B2 72 7A 0C 64 FD 81 01 18 E7}} || All || Revision 0x23
|-  
|-  
| 0x26 || {{hex| A5 26 93 8F 00 64 97 41 4F 3F 4E FE 25 EE F0 A3 0F 74 85 43 C9 5A 0A 3E 51 9B 08 BD 62 96 EA 77}} || All ||
| {{hex| A5 26 93 8F 00 64 97 41 4F 3F 4E FE 25 EE F0 A3 0F 74 85 43 C9 5A 0A 3E 51 9B 08 BD 62 96 EA 77}} || All || Revision 0x26
|-
|-
| 0x27 || {{hex| 86 52 B2 B9 C7 5B DB C7 78 A2 9F 1C DE 20 38 7C CE 8D F7 44 5A 5F CC A1 A3 56 25 93 3E 0D 9B A1}} || All || Present in Internal Pro 3.70
| {{hex| 86 52 B2 B9 C7 5B DB C7 78 A2 9F 1C DE 20 38 7C CE 8D F7 44 5A 5F CC A1 A3 56 25 93 3E 0D 9B A1}} || All || Revision 0x27, Present in Internal Pro 3.70
|-
|-
| 0x2D || {{hex| 7A E1 C8 43 B3 7E 82 B2 56 56 FD 6A 2F 3B 01 5C 19 4A 40 0D FB 38 71 42 8B CB 6B D8 83 F6 FB FE}} || All ||
| {{hex| 7A E1 C8 43 B3 7E 82 B2 56 56 FD 6A 2F 3B 01 5C 19 4A 40 0D FB 38 71 42 8B CB 6B D8 83 F6 FB FE}} || All || Revision 0x2D
|-
|-
| 0x31 || {{hex| 56 14 59 FD 36 A1 DF A7 DE A6 13 46 D7 BF B6 69 E5 94 18 8D 4F F7 B5 2B BE C0 F8 16 E9 29 23 81}} || All ||
| {{hex| 56 14 59 FD 36 A1 DF A7 DE A6 13 46 D7 BF B6 69 E5 94 18 8D 4F F7 B5 2B BE C0 F8 16 E9 29 23 81}} || All || Revision 0x31
|-
|-
| 0x32 || {{hex| 3B 52 5F 89 9F CA 97 C6 54 65 1F 8A A0 0E 3C 3D 60 14 EE F7 68 9F 54 E3 B9 78 51 A7 CA 32 A7 D4}} || All ||  
| {{hex| 3B 52 5F 89 9F CA 97 C6 54 65 1F 8A A0 0E 3C 3D 60 14 EE F7 68 9F 54 E3 B9 78 51 A7 CA 32 A7 D4}} || All || Revision 0x32
|}
|}
Please note that all contributions to PS4 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS4 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)

Template used on this page:

Retrieved from "http://www.psdevwiki.com/ps4/Secure_Loader"