Bootloader
Jump to navigation
Jump to search
On the vita there are several bootloaders (stage bootloaders).
One (or probably 2 stages boot) is used to boot to the TEE (Secure world) and one to load the kernel in the normal world.
SLB2 Image
SLB2 is the format used to store the encrypted bootloaders on the device.
ENC Files
| Offset | Size | Description |
|---|---|---|
| 0x0 | 0x4 | 0x64B2C8E5 magic
|
| 0x4 | 0x4 | Offset to data |
| 0x8 | 0x4 | Unknown |
| 0xC | 0x4 | Unknown/Zero |
| 0x10 | 0x4 | Data size |
| 0x14 | 0xC | Unknown |
| 0x20 | 0x20 | Hash ? |
| 0x40 | 0x10 | Version in ASCII |
| 0x50 | 0x90 | Zero |
| 0xE0 | Until Data | Encrypted Header |
The last 0x340 bytes is a footer that likely contains a signed MAC of the plaintext data.