Sealedkey: Difference between revisions
Jump to navigation
Jump to search
(Created page with "=== File Structure === {| class="wikitable" |- ! Offset !! Size !! Description |- | 0x0 || 0x8 || magic "pfsSKKey" |- | 0x8 || 0x4 || Type (always 2) |- | 0xC || 0x4 || 00 Fi...") |
No edit summary |
||
| Line 19: | Line 19: | ||
|} | |} | ||
The first step is to check the HMAC of the file. The process is to use the HMAC key from the [[Keys#PFS_Secret_Keys]] page to check the HMAC at position 0x30 in the file. If it is correct, it proceeds to use the pfsSKKey_EncKey to decrypt the value at | The first step is to check the HMAC of the file. The process is to use the HMAC key from the [[Keys#PFS_Secret_Keys]] page to check the HMAC at position 0x30 in the file. If it is correct, it proceeds to use the pfsSKKey_EncKey to decrypt the value at +0x20 using the value at +0x10 as the IV. | ||
Revision as of 19:23, 29 January 2017
File Structure
| Offset | Size | Description |
|---|---|---|
| 0x0 | 0x8 | magic "pfsSKKey" |
| 0x8 | 0x4 | Type (always 2) |
| 0xC | 0x4 | 00 Filler |
| 0x10 | 0x10 | IV for encrypted key |
| 0x20 | 0x10 | Encrypted key |
| 0x30 | 0x20 | HMAC Value |
The first step is to check the HMAC of the file. The process is to use the HMAC key from the Keys#PFS_Secret_Keys page to check the HMAC at position 0x30 in the file. If it is correct, it proceeds to use the pfsSKKey_EncKey to decrypt the value at +0x20 using the value at +0x10 as the IV.