Editing Sealedkey / pfsSKKey
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
| Latest revision | Your text | ||
| Line 1: | Line 1: | ||
=== File Structure === | |||
== File Structure == | |||
{| class="wikitable" | {| class="wikitable" | ||
|- | |||
! Offset !! Size !! Description | ! Offset !! Size !! Description | ||
|- | |- | ||
| 0x0 || 0x8 || | | 0x0 || 0x8 || magic "pfsSKKey" | ||
|- | |- | ||
| 0x8 || 0x4 || Type (always 2) | | 0x8 || 0x4 || Type (always 2) | ||
|- | |- | ||
| 0xC || 0x4 || | | 0xC || 0x4 || 00 Filler | ||
|- | |- | ||
| 0x10 || 0x10 || IV for encrypted key | | 0x10 || 0x10 || IV for encrypted key | ||
| Line 19: | Line 16: | ||
|- | |- | ||
| 0x30 || 0x20 || HMAC Value | | 0x30 || 0x20 || HMAC Value | ||
|- | |||
|} | |} | ||
The first step is to check the HMAC of the file. The process is to use the HMAC key from the [[Keys#PFS_Secret_Keys]] page to check the HMAC at position 0x30 in the file. If it is correct, it proceeds to use the pfsSKKey_EncKey to decrypt the value at +0x20 using the value at +0x10 as the IV. | The first step is to check the HMAC of the file. The process is to use the HMAC key from the [[Keys#PFS_Secret_Keys]] page to check the HMAC at position 0x30 in the file. If it is correct, it proceeds to use the pfsSKKey_EncKey to decrypt the value at +0x20 using the value at +0x10 as the IV. | ||