QA Flags: Difference between revisions
Jump to navigation
Jump to search
Line 73: | Line 73: | ||
|- | |- | ||
| 0x120 || 0x180 || RSA 3096 SIGNATURE || RSA Signature used to validate the self | | 0x120 || 0x180 || RSA 3096 SIGNATURE || RSA Signature used to validate the self | ||
|- | |||
|} | |||
= BODY THEORYCRAFTING STRUCTURE = | |||
{| class="wikitable" | |||
! Offset !! Size !! Description !! Notes | |||
|- | |||
| 0 || 0x10 || IDPS || IDPS of the system. could be also PSID, unsure | |||
|- | |||
| 0x10 || 0x10 || QA FLAGS || QA FLAGS of the system. | |||
|- | |||
| 0x20 || 0x30 || PADDING || | |||
|- | |||
| 0x50 || 0x10 || OMAC1 / CMAC || Hash of previous in OMAC1/CMAC format (key is external to this and not in meta) | |||
|- | |- | ||
|} | |} |
Revision as of 01:57, 20 January 2025
TOKEN STRUCTURE
Offset | Size | Description | Notes |
---|---|---|---|
0 | 4 | Magic | 54 14 F5 EE |
0x4 | 4 | Unknown | Always 10 01 01 32 |
0x8 | 1 | Category | 06 on QA Token SELF |
0x9 | 1 | Program Type | 00 for Token |
0xA | 2 | Padding | |
0xC | 2 | Header Size | 0xC0 for Token |
0xE | 2 | Metadata Size | 0x1E0 for Token |
0x10 | 8 | File Size | Size of SELF (0x300 for Token) |
0x18 | 2 | Number of Segments | 1 for Token |
0x1A | 2 | Unknown | Always 0x32 |
0x1C | 4 | Padding |
TOKEN SEGMENT STRUCTURE (1 SEGMENT EXAMPLE)
Offset | Size | Description | Notes |
---|---|---|---|
0x20 | 0x8 | FLAGS | 0x6 for TOKEN (ENCRYPTED AND SIGNED) |
0x28 | 0x8 | OFFSET | 0x2A0 for token (also header size + meta size) |
0x30 | 0x8 | ENCRYPTED_COMPRESSED_SIZE | 0x60 for token |
0x38 | 0x8 | DECRYPTED_DECOMPRESSED_SIZE | 0x60 for token |
TOKEN ADDITIONAL INFO STRUCTURE
Offset | Size | Description | Notes |
---|---|---|---|
0x40 | 0x10 | Padding? | |
0x50 | 0x20 | SHA256 of body? | 13 18 98 62 FC FE C7 13 A6 0A 82 5B 70 4C 92 41 C5 39 27 F6 8F 41 B6 56 C8 9F 8B 17 59 58 B4 2F |
0x70 | 0x40 | Template Name | QAF_SYS_DEV_I |
0xB0 | 0x8 | Start Date | 20191010 |
0xB8 | 0x8 | End Date | 20210410 |
METADATA THEORYCRAFTING STRUCTURE (1 SEGMENT EXAMPLE)
Offset | Size | Description | Notes |
---|---|---|---|
0xC0 | 0x10 | AES-CBC-CTS Key | Key used to Decrypt Body |
0xD0 | 0x10 | AES-CBC-CTS IV | IV used to Decrypt Body |
0xE0 | 0x20 | HMAC256 DIGEST | SHAHMAC256 Digest of Segment |
0x100 | 0x20 | HMAC256 DIGEST KEY | SHAHMAC256 Digest Key of Segment |
0x120 | 0x180 | RSA 3096 SIGNATURE | RSA Signature used to validate the self |
BODY THEORYCRAFTING STRUCTURE
Offset | Size | Description | Notes |
---|---|---|---|
0 | 0x10 | IDPS | IDPS of the system. could be also PSID, unsure |
0x10 | 0x10 | QA FLAGS | QA FLAGS of the system. |
0x20 | 0x30 | PADDING | |
0x50 | 0x10 | OMAC1 / CMAC | Hash of previous in OMAC1/CMAC format (key is external to this and not in meta) |
TEMPLATES
QAF_SYS_DEV_I (for the only known sample in existance)
VALIDITY
10 Oct 2019 - 4 October 2021 (for the only known sample in existance)
- 725 Days = 365 Days + 360 Days
- US Time Format
TOKEN SIZE
0x60 bytes -> for the only known sample in existance