partition_data_manager.cpp 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593
  1. // Copyright 2018 yuzu emulator team
  2. // Licensed under GPLv2 or any later version
  3. // Refer to the license.txt file included.
  4. // NOTE TO FUTURE MAINTAINERS:
  5. // When a new version of switch cryptography is released,
  6. // hash the new keyblob source and master key and add the hashes to
  7. // the arrays below.
  8. #include <algorithm>
  9. #include <array>
  10. #include <cctype>
  11. #include <cstring>
  12. #include <mbedtls/sha256.h>
  13. #include "common/assert.h"
  14. #include "common/common_funcs.h"
  15. #include "common/common_types.h"
  16. #include "common/hex_util.h"
  17. #include "common/logging/log.h"
  18. #include "common/string_util.h"
  19. #include "common/swap.h"
  20. #include "core/crypto/key_manager.h"
  21. #include "core/crypto/partition_data_manager.h"
  22. #include "core/crypto/xts_encryption_layer.h"
  23. #include "core/file_sys/vfs.h"
  24. #include "core/file_sys/vfs_offset.h"
  25. using namespace Common;
  26. namespace Core::Crypto {
  27. struct Package2Header {
  28. std::array<u8, 0x100> signature;
  29. Key128 header_ctr;
  30. std::array<Key128, 4> section_ctr;
  31. u32_le magic;
  32. u32_le base_offset;
  33. INSERT_PADDING_BYTES(4);
  34. u8 version_max;
  35. u8 version_min;
  36. INSERT_PADDING_BYTES(2);
  37. std::array<u32_le, 4> section_size;
  38. std::array<u32_le, 4> section_offset;
  39. std::array<SHA256Hash, 4> section_hash;
  40. };
  41. static_assert(sizeof(Package2Header) == 0x200, "Package2Header has incorrect size.");
  42. struct INIHeader {
  43. u32_le magic;
  44. u32_le size;
  45. u32_le process_count;
  46. INSERT_PADDING_BYTES(4);
  47. };
  48. static_assert(sizeof(INIHeader) == 0x10, "INIHeader has incorrect size.");
  49. struct SectionHeader {
  50. u32_le offset;
  51. u32_le size_decompressed;
  52. u32_le size_compressed;
  53. u32_le attribute;
  54. };
  55. static_assert(sizeof(SectionHeader) == 0x10, "SectionHeader has incorrect size.");
  56. struct KIPHeader {
  57. u32_le magic;
  58. std::array<char, 12> name;
  59. u64_le title_id;
  60. u32_le category;
  61. u8 priority;
  62. u8 core;
  63. INSERT_PADDING_BYTES(1);
  64. u8 flags;
  65. std::array<SectionHeader, 6> sections;
  66. std::array<u32, 0x20> capabilities;
  67. };
  68. static_assert(sizeof(KIPHeader) == 0x100, "KIPHeader has incorrect size.");
  69. const std::array<SHA256Hash, 0x10> source_hashes{
  70. "B24BD293259DBC7AC5D63F88E60C59792498E6FC5443402C7FFE87EE8B61A3F0"_array32, // keyblob_mac_key_source
  71. "7944862A3A5C31C6720595EFD302245ABD1B54CCDCF33000557681E65C5664A4"_array32, // master_key_source
  72. "21E2DF100FC9E094DB51B47B9B1D6E94ED379DB8B547955BEF8FE08D8DD35603"_array32, // package2_key_source
  73. "FC02B9D37B42D7A1452E71444F1F700311D1132E301A83B16062E72A78175085"_array32, // aes_kek_generation_source
  74. "FBD10056999EDC7ACDB96098E47E2C3606230270D23281E671F0F389FC5BC585"_array32, // aes_key_generation_source
  75. "C48B619827986C7F4E3081D59DB2B460C84312650E9A8E6B458E53E8CBCA4E87"_array32, // titlekek_source
  76. "04AD66143C726B2A139FB6B21128B46F56C553B2B3887110304298D8D0092D9E"_array32, // key_area_key_application_source
  77. "FD434000C8FF2B26F8E9A9D2D2C12F6BE5773CBB9DC86300E1BD99F8EA33A417"_array32, // key_area_key_ocean_source
  78. "1F17B1FD51AD1C2379B58F152CA4912EC2106441E51722F38700D5937A1162F7"_array32, // key_area_key_system_source
  79. "6B2ED877C2C52334AC51E59ABFA7EC457F4A7D01E46291E9F2EAA45F011D24B7"_array32, // sd_card_kek_source
  80. "D482743563D3EA5DCDC3B74E97C9AC8A342164FA041A1DC80F17F6D31E4BC01C"_array32, // sd_card_save_key_source
  81. "2E751CECF7D93A2B957BD5FFCB082FD038CC2853219DD3092C6DAB9838F5A7CC"_array32, // sd_card_nca_key_source
  82. "1888CAED5551B3EDE01499E87CE0D86827F80820EFB275921055AA4E2ABDFFC2"_array32, // header_kek_source
  83. "8F783E46852DF6BE0BA4E19273C4ADBAEE16380043E1B8C418C4089A8BD64AA6"_array32, // header_key_source
  84. "D1757E52F1AE55FA882EC690BC6F954AC46A83DC22F277F8806BD55577C6EED7"_array32, // rsa_kek_seed3
  85. "FC02B9D37B42D7A1452E71444F1F700311D1132E301A83B16062E72A78175085"_array32, // rsa_kek_mask0
  86. };
  87. const std::array<SHA256Hash, 0x20> keyblob_source_hashes{
  88. "8A06FE274AC491436791FDB388BCDD3AB9943BD4DEF8094418CDAC150FD73786"_array32, // keyblob_key_source_00
  89. "2D5CAEB2521FEF70B47E17D6D0F11F8CE2C1E442A979AD8035832C4E9FBCCC4B"_array32, // keyblob_key_source_01
  90. "61C5005E713BAE780641683AF43E5F5C0E03671117F702F401282847D2FC6064"_array32, // keyblob_key_source_02
  91. "8E9795928E1C4428E1B78F0BE724D7294D6934689C11B190943923B9D5B85903"_array32, // keyblob_key_source_03
  92. "95FA33AF95AFF9D9B61D164655B32710ED8D615D46C7D6CC3CC70481B686B402"_array32, // keyblob_key_source_04
  93. "3F5BE7B3C8B1ABD8C10B4B703D44766BA08730562C172A4FE0D6B866B3E2DB3E"_array32, // keyblob_key_source_05
  94. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_06
  95. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_07
  96. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_08
  97. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_09
  98. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_0A
  99. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_0B
  100. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_0C
  101. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_0D
  102. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_0E
  103. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_0F
  104. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_10
  105. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_11
  106. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_12
  107. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_13
  108. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_14
  109. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_15
  110. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_16
  111. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_17
  112. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_18
  113. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_19
  114. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_1A
  115. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_1B
  116. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_1C
  117. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_1D
  118. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_1E
  119. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // keyblob_key_source_1F
  120. };
  121. const std::array<SHA256Hash, 0x20> master_key_hashes{
  122. "0EE359BE3C864BB0782E1D70A718A0342C551EED28C369754F9C4F691BECF7CA"_array32, // master_key_00
  123. "4FE707B7E4ABDAF727C894AAF13B1351BFE2AC90D875F73B2E20FA94B9CC661E"_array32, // master_key_01
  124. "79277C0237A2252EC3DFAC1F7C359C2B3D121E9DB15BB9AB4C2B4408D2F3AE09"_array32, // master_key_02
  125. "4F36C565D13325F65EE134073C6A578FFCB0008E02D69400836844EAB7432754"_array32, // master_key_03
  126. "75FF1D95D26113550EE6FCC20ACB58E97EDEB3A2FF52543ED5AEC63BDCC3DA50"_array32, // master_key_04
  127. "EBE2BCD6704673EC0F88A187BB2AD9F1CC82B718C389425941BDC194DC46B0DD"_array32, // master_key_05
  128. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_06
  129. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_07
  130. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_08
  131. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_09
  132. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_0A
  133. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_0B
  134. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_0C
  135. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_0D
  136. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_0E
  137. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_0F
  138. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_10
  139. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_11
  140. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_12
  141. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_13
  142. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_14
  143. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_15
  144. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_16
  145. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_17
  146. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_18
  147. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_19
  148. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_1A
  149. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_1B
  150. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_1C
  151. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_1D
  152. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_1E
  153. "0000000000000000000000000000000000000000000000000000000000000000"_array32, // master_key_1F
  154. };
  155. static std::vector<u8> DecompressBLZ(const std::vector<u8>& in) {
  156. const auto data_size = in.size() - 0xC;
  157. u32 compressed_size{};
  158. u32 init_index{};
  159. u32 additional_size{};
  160. std::memcpy(&compressed_size, in.data() + data_size, sizeof(u32));
  161. std::memcpy(&init_index, in.data() + data_size + 0x4, sizeof(u32));
  162. std::memcpy(&additional_size, in.data() + data_size + 0x8, sizeof(u32));
  163. std::vector<u8> out(in.size() + additional_size);
  164. if (compressed_size == in.size())
  165. std::memcpy(out.data(), in.data() + in.size() - compressed_size, compressed_size);
  166. else
  167. std::memcpy(out.data(), in.data(), compressed_size);
  168. auto index = in.size() - init_index;
  169. auto out_index = out.size();
  170. while (out_index > 0) {
  171. --index;
  172. auto control = in[index];
  173. for (size_t i = 0; i < 8; ++i) {
  174. if ((control & 0x80) > 0) {
  175. ASSERT(index >= 2);
  176. index -= 2;
  177. u64 segment_offset = in[index] | in[index + 1] << 8;
  178. u64 segment_size = ((segment_offset >> 12) & 0xF) + 3;
  179. segment_offset &= 0xFFF;
  180. segment_offset += 3;
  181. if (out_index < segment_size)
  182. segment_size = out_index;
  183. ASSERT(out_index >= segment_size);
  184. out_index -= segment_size;
  185. for (size_t j = 0; j < segment_size; ++j) {
  186. ASSERT(out_index + j + segment_offset < out.size());
  187. out[out_index + j] = out[out_index + j + segment_offset];
  188. }
  189. } else {
  190. ASSERT(out_index >= 1);
  191. --out_index;
  192. --index;
  193. out[out_index] = in[index];
  194. }
  195. control <<= 1;
  196. if (out_index == 0)
  197. return out;
  198. }
  199. }
  200. return out;
  201. }
  202. static u8 CalculateMaxKeyblobSourceHash() {
  203. for (s8 i = 0x1F; i >= 0; --i) {
  204. if (keyblob_source_hashes[i] != SHA256Hash{})
  205. return static_cast<u8>(i + 1);
  206. }
  207. return 0;
  208. }
  209. const u8 PartitionDataManager::MAX_KEYBLOB_SOURCE_HASH = CalculateMaxKeyblobSourceHash();
  210. template <size_t key_size = 0x10>
  211. std::array<u8, key_size> FindKeyFromHex(const std::vector<u8>& binary,
  212. const std::array<u8, 0x20>& hash) {
  213. if (binary.size() < key_size)
  214. return {};
  215. std::array<u8, 0x20> temp{};
  216. for (size_t i = 0; i < binary.size() - key_size; ++i) {
  217. mbedtls_sha256(binary.data() + i, key_size, temp.data(), 0);
  218. if (temp != hash)
  219. continue;
  220. std::array<u8, key_size> out{};
  221. std::memcpy(out.data(), binary.data() + i, key_size);
  222. return out;
  223. }
  224. return {};
  225. }
  226. std::array<u8, 16> FindKeyFromHex16(const std::vector<u8>& binary, std::array<u8, 32> hash) {
  227. return FindKeyFromHex<0x10>(binary, hash);
  228. }
  229. static std::array<Key128, 0x20> FindEncryptedMasterKeyFromHex(const std::vector<u8>& binary,
  230. const Key128& key) {
  231. if (binary.size() < 0x10)
  232. return {};
  233. SHA256Hash temp{};
  234. Key128 dec_temp{};
  235. std::array<Key128, 0x20> out{};
  236. AESCipher<Key128> cipher(key, Mode::ECB);
  237. for (size_t i = 0; i < binary.size() - 0x10; ++i) {
  238. cipher.Transcode(binary.data() + i, dec_temp.size(), dec_temp.data(), Op::Decrypt);
  239. mbedtls_sha256(dec_temp.data(), dec_temp.size(), temp.data(), 0);
  240. for (size_t k = 0; k < out.size(); ++k) {
  241. if (temp == master_key_hashes[k]) {
  242. out[k] = dec_temp;
  243. break;
  244. }
  245. }
  246. }
  247. return out;
  248. }
  249. FileSys::VirtualFile FindFileInDirWithNames(const FileSys::VirtualDir& dir,
  250. const std::string& name) {
  251. auto upper = name;
  252. std::transform(upper.begin(), upper.end(), upper.begin(), [](u8 c) { return std::toupper(c); });
  253. for (const auto& fname : {name, name + ".bin", upper, upper + ".BIN"}) {
  254. if (dir->GetFile(fname) != nullptr)
  255. return dir->GetFile(fname);
  256. }
  257. return nullptr;
  258. }
  259. PartitionDataManager::PartitionDataManager(const FileSys::VirtualDir& sysdata_dir)
  260. : boot0(FindFileInDirWithNames(sysdata_dir, "BOOT0")),
  261. fuses(FindFileInDirWithNames(sysdata_dir, "fuses")),
  262. kfuses(FindFileInDirWithNames(sysdata_dir, "kfuses")),
  263. package2({
  264. FindFileInDirWithNames(sysdata_dir, "BCPKG2-1-Normal-Main"),
  265. FindFileInDirWithNames(sysdata_dir, "BCPKG2-2-Normal-Sub"),
  266. FindFileInDirWithNames(sysdata_dir, "BCPKG2-3-SafeMode-Main"),
  267. FindFileInDirWithNames(sysdata_dir, "BCPKG2-4-SafeMode-Sub"),
  268. FindFileInDirWithNames(sysdata_dir, "BCPKG2-5-Repair-Main"),
  269. FindFileInDirWithNames(sysdata_dir, "BCPKG2-6-Repair-Sub"),
  270. }),
  271. prodinfo(FindFileInDirWithNames(sysdata_dir, "PRODINFO")),
  272. secure_monitor(FindFileInDirWithNames(sysdata_dir, "secmon")),
  273. package1_decrypted(FindFileInDirWithNames(sysdata_dir, "pkg1_decr")),
  274. secure_monitor_bytes(secure_monitor == nullptr ? std::vector<u8>{}
  275. : secure_monitor->ReadAllBytes()),
  276. package1_decrypted_bytes(package1_decrypted == nullptr ? std::vector<u8>{}
  277. : package1_decrypted->ReadAllBytes()) {
  278. }
  279. PartitionDataManager::~PartitionDataManager() = default;
  280. bool PartitionDataManager::HasBoot0() const {
  281. return boot0 != nullptr;
  282. }
  283. FileSys::VirtualFile PartitionDataManager::GetBoot0Raw() const {
  284. return boot0;
  285. }
  286. PartitionDataManager::EncryptedKeyBlob PartitionDataManager::GetEncryptedKeyblob(
  287. std::size_t index) const {
  288. if (HasBoot0() && index < NUM_ENCRYPTED_KEYBLOBS)
  289. return GetEncryptedKeyblobs()[index];
  290. return {};
  291. }
  292. PartitionDataManager::EncryptedKeyBlobs PartitionDataManager::GetEncryptedKeyblobs() const {
  293. if (!HasBoot0())
  294. return {};
  295. EncryptedKeyBlobs out{};
  296. for (size_t i = 0; i < out.size(); ++i)
  297. boot0->Read(out[i].data(), out[i].size(), 0x180000 + i * 0x200);
  298. return out;
  299. }
  300. std::vector<u8> PartitionDataManager::GetSecureMonitor() const {
  301. return secure_monitor_bytes;
  302. }
  303. std::array<u8, 16> PartitionDataManager::GetPackage2KeySource() const {
  304. return FindKeyFromHex(secure_monitor_bytes, source_hashes[2]);
  305. }
  306. std::array<u8, 16> PartitionDataManager::GetAESKekGenerationSource() const {
  307. return FindKeyFromHex(secure_monitor_bytes, source_hashes[3]);
  308. }
  309. std::array<u8, 16> PartitionDataManager::GetTitlekekSource() const {
  310. return FindKeyFromHex(secure_monitor_bytes, source_hashes[5]);
  311. }
  312. std::array<std::array<u8, 16>, 32> PartitionDataManager::GetTZMasterKeys(
  313. std::array<u8, 0x10> master_key) const {
  314. return FindEncryptedMasterKeyFromHex(secure_monitor_bytes, master_key);
  315. }
  316. std::array<u8, 16> PartitionDataManager::GetRSAKekSeed3() const {
  317. return FindKeyFromHex(secure_monitor_bytes, source_hashes[14]);
  318. }
  319. std::array<u8, 16> PartitionDataManager::GetRSAKekMask0() const {
  320. return FindKeyFromHex(secure_monitor_bytes, source_hashes[15]);
  321. }
  322. std::vector<u8> PartitionDataManager::GetPackage1Decrypted() const {
  323. return package1_decrypted_bytes;
  324. }
  325. std::array<u8, 16> PartitionDataManager::GetMasterKeySource() const {
  326. return FindKeyFromHex(package1_decrypted_bytes, source_hashes[1]);
  327. }
  328. std::array<u8, 16> PartitionDataManager::GetKeyblobMACKeySource() const {
  329. return FindKeyFromHex(package1_decrypted_bytes, source_hashes[0]);
  330. }
  331. std::array<u8, 16> PartitionDataManager::GetKeyblobKeySource(std::size_t revision) const {
  332. if (keyblob_source_hashes[revision] == SHA256Hash{}) {
  333. LOG_WARNING(Crypto,
  334. "No keyblob source hash for crypto revision {:02X}! Cannot derive keys...",
  335. revision);
  336. }
  337. return FindKeyFromHex(package1_decrypted_bytes, keyblob_source_hashes[revision]);
  338. }
  339. bool PartitionDataManager::HasFuses() const {
  340. return fuses != nullptr;
  341. }
  342. FileSys::VirtualFile PartitionDataManager::GetFusesRaw() const {
  343. return fuses;
  344. }
  345. std::array<u8, 16> PartitionDataManager::GetSecureBootKey() const {
  346. if (!HasFuses())
  347. return {};
  348. Key128 out{};
  349. fuses->Read(out.data(), out.size(), 0xA4);
  350. return out;
  351. }
  352. bool PartitionDataManager::HasKFuses() const {
  353. return kfuses != nullptr;
  354. }
  355. FileSys::VirtualFile PartitionDataManager::GetKFusesRaw() const {
  356. return kfuses;
  357. }
  358. bool PartitionDataManager::HasPackage2(Package2Type type) const {
  359. return package2.at(static_cast<size_t>(type)) != nullptr;
  360. }
  361. FileSys::VirtualFile PartitionDataManager::GetPackage2Raw(Package2Type type) const {
  362. return package2.at(static_cast<size_t>(type));
  363. }
  364. bool AttemptDecrypt(const std::array<u8, 16>& key, Package2Header& header) {
  365. const std::vector<u8> iv(header.header_ctr.begin(), header.header_ctr.end());
  366. Package2Header temp = header;
  367. AESCipher<Key128> cipher(key, Mode::CTR);
  368. cipher.SetIV(iv);
  369. cipher.Transcode(&temp.header_ctr, sizeof(Package2Header) - 0x100, &temp.header_ctr,
  370. Op::Decrypt);
  371. if (temp.magic == Common::MakeMagic('P', 'K', '2', '1')) {
  372. header = temp;
  373. return true;
  374. }
  375. return false;
  376. }
  377. void PartitionDataManager::DecryptPackage2(const std::array<Key128, 0x20>& package2_keys,
  378. Package2Type type) {
  379. FileSys::VirtualFile file = std::make_shared<FileSys::OffsetVfsFile>(
  380. package2[static_cast<size_t>(type)],
  381. package2[static_cast<size_t>(type)]->GetSize() - 0x4000, 0x4000);
  382. Package2Header header{};
  383. if (file->ReadObject(&header) != sizeof(Package2Header))
  384. return;
  385. std::size_t revision = 0xFF;
  386. if (header.magic != Common::MakeMagic('P', 'K', '2', '1')) {
  387. for (std::size_t i = 0; i < package2_keys.size(); ++i) {
  388. if (AttemptDecrypt(package2_keys[i], header)) {
  389. revision = i;
  390. }
  391. }
  392. }
  393. if (header.magic != Common::MakeMagic('P', 'K', '2', '1'))
  394. return;
  395. const auto a = std::make_shared<FileSys::OffsetVfsFile>(
  396. file, header.section_size[1], header.section_size[0] + sizeof(Package2Header));
  397. auto c = a->ReadAllBytes();
  398. AESCipher<Key128> cipher(package2_keys[revision], Mode::CTR);
  399. cipher.SetIV({header.section_ctr[1].begin(), header.section_ctr[1].end()});
  400. cipher.Transcode(c.data(), c.size(), c.data(), Op::Decrypt);
  401. INIHeader ini;
  402. std::memcpy(&ini, c.data(), sizeof(INIHeader));
  403. if (ini.magic != Common::MakeMagic('I', 'N', 'I', '1'))
  404. return;
  405. u64 offset = sizeof(INIHeader);
  406. for (size_t i = 0; i < ini.process_count; ++i) {
  407. KIPHeader kip;
  408. std::memcpy(&kip, c.data() + offset, sizeof(KIPHeader));
  409. if (kip.magic != Common::MakeMagic('K', 'I', 'P', '1'))
  410. return;
  411. const auto name =
  412. Common::StringFromFixedZeroTerminatedBuffer(kip.name.data(), kip.name.size());
  413. if (name != "FS" && name != "spl") {
  414. offset += sizeof(KIPHeader) + kip.sections[0].size_compressed +
  415. kip.sections[1].size_compressed + kip.sections[2].size_compressed;
  416. continue;
  417. }
  418. const u64 initial_offset = sizeof(KIPHeader) + offset;
  419. const auto text_begin = c.cbegin() + initial_offset;
  420. const auto text_end = text_begin + kip.sections[0].size_compressed;
  421. const std::vector<u8> text = DecompressBLZ({text_begin, text_end});
  422. const auto rodata_end = text_end + kip.sections[1].size_compressed;
  423. const std::vector<u8> rodata = DecompressBLZ({text_end, rodata_end});
  424. const auto data_end = rodata_end + kip.sections[2].size_compressed;
  425. const std::vector<u8> data = DecompressBLZ({rodata_end, data_end});
  426. std::vector<u8> out;
  427. out.reserve(text.size() + rodata.size() + data.size());
  428. out.insert(out.end(), text.begin(), text.end());
  429. out.insert(out.end(), rodata.begin(), rodata.end());
  430. out.insert(out.end(), data.begin(), data.end());
  431. offset += sizeof(KIPHeader) + out.size();
  432. if (name == "FS")
  433. package2_fs[static_cast<size_t>(type)] = std::move(out);
  434. else if (name == "spl")
  435. package2_spl[static_cast<size_t>(type)] = std::move(out);
  436. }
  437. }
  438. const std::vector<u8>& PartitionDataManager::GetPackage2FSDecompressed(Package2Type type) const {
  439. return package2_fs.at(static_cast<size_t>(type));
  440. }
  441. std::array<u8, 16> PartitionDataManager::GetKeyAreaKeyApplicationSource(Package2Type type) const {
  442. return FindKeyFromHex(package2_fs.at(static_cast<size_t>(type)), source_hashes[6]);
  443. }
  444. std::array<u8, 16> PartitionDataManager::GetKeyAreaKeyOceanSource(Package2Type type) const {
  445. return FindKeyFromHex(package2_fs.at(static_cast<size_t>(type)), source_hashes[7]);
  446. }
  447. std::array<u8, 16> PartitionDataManager::GetKeyAreaKeySystemSource(Package2Type type) const {
  448. return FindKeyFromHex(package2_fs.at(static_cast<size_t>(type)), source_hashes[8]);
  449. }
  450. std::array<u8, 16> PartitionDataManager::GetSDKekSource(Package2Type type) const {
  451. return FindKeyFromHex(package2_fs.at(static_cast<size_t>(type)), source_hashes[9]);
  452. }
  453. std::array<u8, 32> PartitionDataManager::GetSDSaveKeySource(Package2Type type) const {
  454. return FindKeyFromHex<0x20>(package2_fs.at(static_cast<size_t>(type)), source_hashes[10]);
  455. }
  456. std::array<u8, 32> PartitionDataManager::GetSDNCAKeySource(Package2Type type) const {
  457. return FindKeyFromHex<0x20>(package2_fs.at(static_cast<size_t>(type)), source_hashes[11]);
  458. }
  459. std::array<u8, 16> PartitionDataManager::GetHeaderKekSource(Package2Type type) const {
  460. return FindKeyFromHex(package2_fs.at(static_cast<size_t>(type)), source_hashes[12]);
  461. }
  462. std::array<u8, 32> PartitionDataManager::GetHeaderKeySource(Package2Type type) const {
  463. return FindKeyFromHex<0x20>(package2_fs.at(static_cast<size_t>(type)), source_hashes[13]);
  464. }
  465. const std::vector<u8>& PartitionDataManager::GetPackage2SPLDecompressed(Package2Type type) const {
  466. return package2_spl.at(static_cast<size_t>(type));
  467. }
  468. std::array<u8, 16> PartitionDataManager::GetAESKeyGenerationSource(Package2Type type) const {
  469. return FindKeyFromHex(package2_spl.at(static_cast<size_t>(type)), source_hashes[4]);
  470. }
  471. bool PartitionDataManager::HasProdInfo() const {
  472. return prodinfo != nullptr;
  473. }
  474. FileSys::VirtualFile PartitionDataManager::GetProdInfoRaw() const {
  475. return prodinfo;
  476. }
  477. void PartitionDataManager::DecryptProdInfo(std::array<u8, 0x20> bis_key) {
  478. if (prodinfo == nullptr)
  479. return;
  480. prodinfo_decrypted = std::make_shared<XTSEncryptionLayer>(prodinfo, bis_key);
  481. }
  482. std::array<u8, 576> PartitionDataManager::GetETicketExtendedKek() const {
  483. std::array<u8, 0x240> out{};
  484. if (prodinfo_decrypted != nullptr)
  485. prodinfo_decrypted->Read(out.data(), out.size(), 0x3890);
  486. return out;
  487. }
  488. } // namespace Core::Crypto