Editing Keys
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 102: | Line 102: | ||
</pre> | </pre> | ||
== | == Static Keyslot 0x208 == | ||
<pre> | <pre> | ||
2D B8 D5 93 4A 1D 77 89 EA 87 95 F7 8A 8F C2 B7 | |||
74 D8 52 91 FE 6C 6B AD 37 25 48 18 E6 8C 45 A0 | |||
</pre> | </pre> | ||
== | * credits to gleba, math, Proxima and xyz for the help finding this one | ||
== Static Keyslot 0x209 == | |||
<pre> | <pre> | ||
35 AA 63 F3 A6 36 90 CA 10 6A 57 67 37 B3 C7 FB | |||
7D C9 A1 29 A3 29 60 B6 4B 4E B1 29 9E 55 68 FD | |||
</pre> | </pre> | ||
== | == Static Keyslot 0x605 == | ||
<pre> | <pre> | ||
3B 39 E9 2E 25 B0 40 38 27 EE 32 D7 D6 49 A8 47 | |||
D7 F1 1E 24 D0 11 76 0A 79 43 37 D4 F7 40 C9 DF | |||
</pre> | </pre> | ||
== Perconsole Keyslot | * Universal | ||
== Perconsole Keyslot 0x606 (Test Subject 5) == | |||
<pre> | <pre> | ||
5E 75 05 CD A7 40 E8 5D 7F 82 B7 EA EA 32 CE 1C | |||
66 04 2C E9 E6 B6 F4 F1 DC AA 94 A1 06 B8 32 EF | |||
</pre> | </pre> | ||
== Perconsole Keyslot | == Perconsole Keyslot 0x606 (Test Subject 6) == | ||
<pre> | <pre> | ||
DD DF C7 61 C7 7F AE 89 CF 39 6F BC 30 CF 7F 60 | |||
F8 BF BC 24 E1 3F 5A CE 46 50 BC 66 2F 73 AC D4 | |||
</pre> | </pre> | ||
== Perconsole Keyslot | == Perconsole Keyslot 0x606 (Test Subject 7) == | ||
<pre> | <pre> | ||
72 39 DE 10 B7 F1 92 D5 78 E1 03 81 63 7F CF CF | |||
D4 44 9B 58 A1 7C 97 E5 EC F6 1D 09 40 82 7B B2 | |||
</pre> | </pre> | ||
== Perconsole Keyslot | == Perconsole Keyslot 0x606 (Test Subject 8) == | ||
<pre> | <pre> | ||
98 AF 08 AD B7 8A E2 83 0A 31 47 0A FD 00 B2 64 | |||
D4 E2 C5 83 E2 14 EB 57 F9 58 CD 54 C4 BA 09 4C | |||
</pre> | </pre> | ||
== Perconsole Keyslot | == Perconsole Keyslot 0x607 (Test Subject 5) == | ||
<pre> | <pre> | ||
F5 B1 8E B5 37 DD C4 6F 6B 59 A4 19 AD AB F4 A8 | |||
52 02 9A 0E 50 E4 FC 3F F0 93 88 EA E3 34 C7 E3 | |||
</pre> | </pre> | ||
== Perconsole Keyslot 0x607 (Test Subject 6) == | |||
== | |||
<pre> | <pre> | ||
FA 87 A5 75 15 B2 88 60 57 5E 2C 2D 45 7F BA 86 | |||
55 32 A9 74 96 BF D5 B9 E8 D4 CE D7 98 19 40 97 | |||
</pre> | </pre> | ||
== | == Perconsole Keyslot 0x607 (Test Subject 7) == | ||
<pre> | <pre> | ||
7E EE 37 A4 C0 DA C7 D2 0A AA 5E DA 34 17 B4 5C | |||
45 A8 DA 4E FD 40 7D 9D E5 08 53 B4 9A 06 29 43 | |||
</pre> | </pre> | ||
== | == Perconsole Keyslot 0x607 (Test Subject 8) == | ||
<pre> | <pre> | ||
6E 1E 68 77 A7 1D 05 8B 97 55 F6 9D 2E 2A 24 1C | |||
4A 3D B7 E4 3B E8 F0 65 FA A0 8C 20 58 89 3F F2 | |||
</pre> | </pre> | ||
= | = Keys = | ||
== Bootrom == | |||
== | === Personalization removal Key for SLSK (Proto) (Perconsole) (Slot 8) (Test Subject 0) === | ||
<pre> | <pre> | ||
85C688C1B3BACB16EB57B4CC35B7D590 | |||
</pre> | </pre> | ||
== Perconsole | * decrypts the .enp (not ._enp!) perconsole layer of an enp file, turning it into an enc file | ||
* algo is aes-128-cbc | |||
=== Personalization removal Key for SLSK (Proto) (Perconsole) (Slot 8) (Test Subject 1) === | |||
<pre> | <pre> | ||
8B5415DC7EB5986472BF6B30D8E3E812 | |||
</pre> | </pre> | ||
== Perconsole | === Personalization removal Key for SLSK (Proto) (Perconsole) (Slot 8) (Test Subject 2) === | ||
<pre> | <pre> | ||
95B7B3EDB2EF277FB0F78FA3970EE0D0 | |||
</pre> | </pre> | ||
== Perconsole | === Personalization removal Key for SLSK (Proto) (Perconsole) (Slot 8) (Test Subject 3) === | ||
<pre> | <pre> | ||
CB0B65F7897F30310471F7CDA2CFD804 | |||
</pre> | </pre> | ||
== Perconsole | === Personalization removal Key for SLSK (Proto) (Perconsole) (Slot 8) (Test Subject 4) === | ||
<pre> | <pre> | ||
F3E408E1EDC3B513277DB99E58A15BE3 | |||
</pre> | </pre> | ||
== Perconsole | === Personalization removal IV for SLSK (Proto) (Perconsole) (Slot 8) === | ||
<pre> | <pre> | ||
FD4FA8FA4FE79430A0CA305C88E524DD | |||
</pre> | </pre> | ||
== Perconsole | === Personalization removal KEY for SLSK (Proto) (Perconsole) (Slot 9) (JigKick) (Test Subject 0) === | ||
<pre> | <pre> | ||
9E0A8285C3BE83951C78480A7AEC80FD | |||
</pre> | </pre> | ||
== Perconsole | === Personalization removal KEY for SLSK (Proto) (Perconsole) (Slot 9) (JigKick) (Test Subject 1) === | ||
<pre> | <pre> | ||
686268A876650A6A6DC353F69EB82F19 | |||
</pre> | </pre> | ||
== Perconsole | === Personalization removal KEY for SLSK (Proto) (Perconsole) (Slot 9) (JigKick) (Test Subject 2) === | ||
<pre> | <pre> | ||
E7A8ADF7B7E2BC26E3445084384FBCE1 | |||
</pre> | </pre> | ||
== | === Personalization removal KEY for SLSK (Proto) (Perconsole) (Slot 9) (JigKick) (Test Subject 3) === | ||
<pre> | <pre> | ||
736F7501E9A15AB29800113686C946BA | |||
</pre> | </pre> | ||
=== Personalization removal KEY for SLSK (Proto) (Perconsole) (Slot 9) (JigKick) (Test Subject 4) === | |||
<pre> | <pre> | ||
BEA39D6443FBACAB05DA62BB95470D57 | |||
</pre> | </pre> | ||
=== Personalization removal IV for SLSK (Proto) (Perconsole) (Slot 9) (JigKick) === | |||
== Perconsole | |||
<pre> | <pre> | ||
986D5EE1E7759F4F52DB43F33FA5960A | |||
</pre> | </pre> | ||
== | === SLSK SHA256HMAC KEY (NonPerconsole) (Slot 0x20) === | ||
<pre> | <pre> | ||
2E1FC0BF211AEE3977C96F1089A150F5 | |||
A3CB9E41314BC39F0CBEC16AF3B0B9AC | |||
</pre> | </pre> | ||
* calculates header hmac (0:0x1C0) which is compared against signature at 0x1C0 size 0x100, verified with key 0 from bootrom rsa pairs | |||
* calculates encrypted body hmac + 0x10 bytes (0x2B0:end_of_body_from_header) verified against hmac at 0x190 (encrypted with double AA key and custom iv from bootrom) | |||
=== SLSK Header HMAC/CBC KEY/IV === | |||
* key | |||
<pre> | <pre> | ||
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA | |||
</pre> | </pre> | ||
* iv | |||
<pre> | <pre> | ||
EEB5EC5CCF1CF43113F5213AD5B8D6DA | |||
</pre> | </pre> | ||
== | * decrypts what's at 0x190 size 0x20 of .enc file using aes 256 cbc | ||
* result will be a hmac calculated with key 2E1FC0BF211AEE3977C96F1089A150F5A3CB9E41314BC39F0CBEC16AF3B0B9AC | |||
* said hmac will be from header size (usually 0x2B0) until header size plus body size (0x2B0 + ???) with body encrypted | |||
=== Factory Handshake Key === | |||
<pre> | <pre> | ||
F47716E6C5649FD648538FD9773D12D1 | |||
229E118737B1D782D6A80CDB72E4B9C3 | |||
</pre> | </pre> | ||
== | * Shared with SYSCON | ||
=== SLSK IV (Confirmed) === | |||
<pre> | <pre> | ||
AF5F2CB04AC1751ABF51CEF1C8096210 | |||
</pre> | </pre> | ||
== | * Used with AA 16x Battery key (AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA) to decrypt SLSK after depersonalization | ||
=== Bootrom RSA Key (Fallback for SLSK Validation, all fuses blown) (Proto) === | |||
<pre> | <pre> | ||
3BD3D7E98A17F359F19E3AF9802B95E9 | |||
D6946CA8903136582EFC9C88F4F01E3D | |||
3101E2FA33541A231E4E45F05E8536C6 | |||
4D69B60EF4B3004D23AD72BF801B8695 | |||
EEA843BE585862A63D6B2BE7F90055A8 | |||
C690AECAD63B85EA118A79BBD510156F | |||
53D3B7623811C18F0829364ABAFB1A6C | |||
9D841F20A08831963C0D5B64FB360947 | |||
206C748AEFDB1715896BCA4D2980EE22 | |||
B0C3243FB73C3F2A0A868C587E57B77A | |||
FEBE2B983046D6428C722319A598A5C6 | |||
0EFB9C4E9FDCF793DFA3CDEEC6C8A249 | |||
42652531706D6D701B0B0C660E79D241 | |||
9D38E1B8E976BD9FB4D4CD1E6F461E86 | |||
B295C6FA10D1C7927CB266C08B3025CC | |||
76A4837EF0D8208BBA305059E23DDABC | |||
</pre> | </pre> | ||
== SLSK Verification RSA Keys | === SLSK Verification RSA Keys === | ||
<pre> | <pre> | ||
Line 1,386: | Line 872: | ||
* Only first key is used | * Only first key is used | ||
=== Keyseed 0 (Proto) === | === Keyseed 0 (Proto) === |