CTCert - Revision history

Luigoalma: Saying 01 is incorrect, its not always 1 that's loaded off dev OTP

2022-04-27T20:44:35Z

Saying 01 is incorrect, its not always 1 that's loaded off dev OTP

← Older revision		Revision as of 00:44, 28 April 2022
Line 32:		Line 32:
	\| 0xC4		\| 0xC4
	\| 0x40		\| 0x40
	\| Key ID: "CT<DeviceId>-<ConsoleType>", where DeviceId is the hex [[PSPXI:GetDeviceId\|DeviceId]], and ConsoleType is 00 for retail, 01 for dev		\| Key ID: "CT<DeviceId>-<ConsoleType>", where DeviceId is the hex [[PSPXI:GetDeviceId\|DeviceId]], and ConsoleType is 00 for retail, any other single byte hex value for dev
	\|-		\|-
	\| 0x104		\| 0x104

2021-09-07T00:51:12Z

better layout; delete redundant sentence

← Older revision		Revision as of 04:51, 7 September 2021
Line 47:		Line 47:
	\|}		\|}

	~~The ECDSA public key for this cert is calculated from the ECDSA private key initialized by bootrom.~~ Boot ROM decrypts [[OTP Registers]] and writes the private key and Nintendo's signature of ~~this certificate~~ to [[Memory_layout#ARM9_ITCM\|ARM9 ITCM]]; the public key is computed from the private key.		Boot ROM decrypts [[OTP Registers]] and writes the private key and Nintendo's signature of CTCert to [[Memory_layout#ARM9_ITCM\|ARM9 ITCM]]; the public key is computed from the private key.

	The curve used for ECDSA is sect233r1.		The curve used for ECDSA is sect233r1.

2021-09-07T00:49:46Z

fix links

← Older revision		Revision as of 04:49, 7 September 2021
Line 47:		Line 47:
	\|}		\|}

	The ECDSA public key for this cert is calculated from the ECDSA private key initialized by bootrom. Boot ROM decrypts [[OTP]] and writes the private key and Nintendo's signature of this certificate to [[ITCM]]; the public key is computed from the private key.		The ECDSA public key for this cert is calculated from the ECDSA private key initialized by bootrom. Boot ROM decrypts [[OTP Registers]] and writes the private key and Nintendo's signature of this certificate to [[Memory_layout#ARM9_ITCM\|ARM9 ITCM]]; the public key is computed from the private key.
	The curve used for ECDSA is sect233r1.		The curve used for ECDSA is sect233r1.

2021-09-07T00:48:24Z

More accurate description of ECDSA stuff

← Older revision		Revision as of 04:48, 7 September 2021
Line 16:		Line 16:
	\| 0x04		\| 0x04
	\| 0x3C		\| 0x3C
	\| ECDSA Signature		\| ECDSA Signature using Nintendo's private key, in big-endian. The first 0x1E bytes are "r"; the second 0x1E bytes are "s". The hash is SHA-256 computed over this certificate, starting at byte 0x80 ("Cert Issue ID") to the end.
	\|-		\|-
	\| 0x40		\| 0x40
Line 40:		Line 40:
	\| 0x108		\| 0x108
	\| 0x3C		\| 0x3C
	\| ECDSA Public Key. ~~This is two consecutive u8 arrays (each one~~ of ~~length 0x1E), where the first one corresponds to the ECDSA R coordinate, and~~ the second ~~to ECDSA S coordinate. These~~ are ~~in '''big''' endian~~.		\| ECDSA Public Key of this console as a curve point in big-endian. The first 0x1E bytes are "x" of this point; the second 0x1E bytes are "y".
	\|-		\|-
	\| 0x144		\| 0x144
Line 47:		Line 47:
	\|}		\|}

	The ECDSA public key for this cert is ~~converted~~ from the ECDSA private key initialized by bootrom.		The ECDSA public key for this cert is calculated from the ECDSA private key initialized by bootrom. Boot ROM decrypts [[OTP]] and writes the private key and Nintendo's signature of this certificate to [[ITCM]]; the public key is computed from the private key.
	The curve used for ECDSA is sect233r1.		The curve used for ECDSA is sect233r1.

2020-08-06T16:33:48Z

Found while digging the Process9 binary executable, function generating a CTCert can be found using OTP registers.

← Older revision		Revision as of 20:33, 6 August 2020
Line 36:		Line 36:
	\| 0x104		\| 0x104
	\| 0x04		\| 0x04
	\| ?		\| Expiration time as UNIX Timestamp in big endian.
	\|-		\|-
	\| 0x108		\| 0x108

2018-03-12T16:49:20Z

← Older revision		Revision as of 19:49, 12 March 2018
Line 40:		Line 40:
	\| 0x108		\| 0x108
	\| 0x3C		\| 0x3C
	\| ECDSA Public Key		\| ECDSA Public Key. This is two consecutive u8 arrays (each one of length 0x1E), where the first one corresponds to the ECDSA R coordinate, and the second to ECDSA S coordinate. These are in '''big''' endian.
	\|-		\|-
	\| 0x144		\| 0x144

2018-03-08T15:34:57Z

← Older revision		Revision as of 18:34, 8 March 2018
Line 48:		Line 48:

	The ECDSA public key for this cert is converted from the ECDSA private key initialized by bootrom.		The ECDSA public key for this cert is converted from the ECDSA private key initialized by bootrom.
			The curve used for ECDSA is sect233r1.

2013-04-26T00:20:31Z

← Older revision		Revision as of 04:20, 26 April 2013
Line 1:		Line 1:
	=Summary=		=Summary=
	The console-unique CTCert is used for signing [[Title Data Structure\|CTX]] files, the DeviceCert used by [[eShop]], and ~~presumably~~ for DSiWare exports. This ECDSA signature, the ECDSA private key for this cert, and the IssuerID is loaded from memory initialized by bootrom instead of NAND. This is the 3DS equivalent of the DSi TWCert.		The console-unique CTCert is used for signing [[Title Data Structure\|CTX]] files, the DeviceCert used by [[eShop]], and for [[DSiWare_Exports\|DSiWare]] exports. This ECDSA signature, the ECDSA private key for this cert, and the IssuerID is loaded from memory initialized by bootrom instead of NAND. This is the 3DS equivalent of the DSi TWCert.

	The CTCert is signed with ECDSA by Nintendo.		The CTCert is signed with ECDSA by Nintendo. CTCerts can be verified via a DER stored in NATIVE_FIRM, separate DERs are used for retail and dev/debug.

	=Structure=		=Structure=
Line 12:		Line 12:
	\| 0x00		\| 0x00
	\| 0x04		\| 0x04
	\| Type		\| [[Certificates\|Signature]] Type, 0x010005.
	\|-		\|-
	\| 0x04		\| 0x04
Line 47:		Line 47:
	\|}		\|}

	~~The ECDSA private key for this cert is located 0x3C-bytes before this cert in internal memory, the 0x1E-bytes following this private key is padding.~~ The ECDSA public key for this cert is converted from the ECDSA private key initialized by bootrom.		The ECDSA public key for this cert is converted from the ECDSA private key initialized by bootrom.

2012-08-25T22:02:50Z

← Older revision		Revision as of 02:02, 26 August 2012
Line 1:		Line 1:
	=Summary=		=Summary=
	The console-unique CTCert is used for signing CTX files, the DeviceCert used by [[eShop]], and presumably for DSiWare exports. This ECDSA signature, the ECDSA private key, and the IssuerID is loaded from memory instead of NAND. This is the 3DS equivalent of DSi TWCert.		The console-unique CTCert is used for signing [[Title Data Structure\|CTX]] files, the DeviceCert used by [[eShop]], and presumably for DSiWare exports. This ECDSA signature, the ECDSA private key for this cert, and the IssuerID is loaded from memory initialized by bootrom instead of NAND. This is the 3DS equivalent of the DSi TWCert.

			The CTCert is signed with ECDSA by Nintendo.

	=Structure=		=Structure=
Line 33:		Line 35:
	\|-		\|-
	\| 0x104		\| 0x104
			\| 0x04
			\| ?
			\|-
			\| 0x108
	\| 0x3C		\| 0x3C
	\| ECDSA Public Key		\| ECDSA Public Key
	\|-		\|-
	\| ~~0x140~~		\| 0x144
	\| ~~0x40~~		\| 0x3C
	\| Padding		\| Padding
	\|}		\|}

	The ECDSA private key is located 0x3C bytes before this cert in internal memory, the 0x1E-bytes following this private key is padding.		The ECDSA private key for this cert is located 0x3C-bytes before this cert in internal memory, the 0x1E-bytes following this private key is padding. The ECDSA public key for this cert is converted from the ECDSA private key initialized by bootrom.

2012-08-25T19:54:48Z

← Older revision		Revision as of 23:54, 25 August 2012
Line 41:		Line 41:
	\|}		\|}

	The ECDSA private key is located 0x3C bytes before this cert in internal memory.		The ECDSA private key is located 0x3C bytes before this cert in internal memory, the 0x1E-bytes following this private key is padding.