116
edits
Changes
Jump to navigation
Jump to search
Line 32:
Line 32: − Unfortunately, this is dependent on the PSVita for executing using the EncDecKeygen function. The AES256 key is altered inside the [[F00D Processor]] in some way currently unknown. Upon decryption, the session key is sent to F00D and an assigned slot. When the HW crypto engine is invoked to perform the decryption, it is given the slot number. Presumably, the crypto engine talks directly with F00D to use the derived key.+ + + + + + + + + + + + + + + + + + + + + +
→Secrets: Added PSVIMG crypto.
</source>
</source>
To generate the PSVIMG AES key, the buffer is encrypted using AES256ECB with the following key A9FA5A62799FCC4C726B4E2CE3506D38
This key is set though kprx_auth_sm using service 0x50001 (see here: https://wiki.henkaku.xyz/vita/F00D_Commands#0x50001 )
<source>
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000000 00 00 00 00 00 00 00 00 53 72 69 20 4A 61 79 65 ........Sri Jaye
00000010 77 61 72 64 65 6E 65 70 75 72 61 20 4B 6F 74 74 wardenepura Kott
00000020 65 e
</source>
SHA-256: 186F29050C0D0D99038D86EFA9B6AD332E59564B7FFCA97985C09D64BD4BC442
The encrypted above hash produces the following result
<source>
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000000 65 DE EF DE 3A 14 10 B5 6F 60 D0 AB B9 D9 9D FA eÞïÞ:..µo`Ы¹Ù.ú
00000010 97 45 BF 55 C9 22 E3 44 A1 13 2E EB 67 60 9C 0D —E¿UÉ"ãD¡..ëg`œ.
</source>
[[Category:Formats]]
[[Category:Formats]]