RSA Registers - Revision history

TuxSH: /* RSA_SLOTCNT */

2021-02-05T22:34:10Z

RSA_SLOTCNT

← Older revision		Revision as of 01:34, 6 February 2021
Line 124:		Line 124:
	\| Key write-protect, this bit is RW. (0 = no protection, 1 = protected)		\| Key write-protect, this bit is RW. (0 = no protection, 1 = protected)
	\|-		\|-
	\| 30-2		\| 2
			\| Key read-protect, this bit is RW. (0 = no protection, 1 = protected)
			\|-
			\| 30-3
	\| ?		\| ?
	\|-		\|-
	\| 31		\| 31
	\| ?		\| Key slot protect. Makes all other bits in this reg read-only until reset
	\|}		\|}

Profi200: /* RSA_CNT */

2019-05-15T11:17:04Z

RSA_CNT

← Older revision		Revision as of 15:17, 15 May 2019
Line 78:		Line 78:
	\|-		\|-
	\| 1		\| 1
	\| ?		\| Interrupt enable (1=enable, 0=disable)
	\|-		\|-
	\| 4-7		\| 4-7

Guiand at 03:08, 8 April 2019

2019-04-08T01:08:19Z

← Older revision		Revision as of 05:08, 8 April 2019
Line 53:		Line 53:
	\| [[#RSA_EXPFIFO\|RSA_EXPFIFO]]		\| [[#RSA_EXPFIFO\|RSA_EXPFIFO]]
	\| 0x1000B200		\| 0x1000B200
	\| ~~0x04~~		\| 0x100 (can handle u32 writes to any aligned position in the FIFO)
	\|		\|
	\|-		\|-

Guiand: Clarifications and edge cases

2019-02-03T06:56:52Z

Clarifications and edge cases

← Older revision		Revision as of 09:56, 3 February 2019
Line 1:		Line 1:
			= Overview =

			The RSA module is essentially a hardware-accelerated modular exponentiation engine. It is specially optimized for RSA applications, so its behavior can be incoherent when RSA's invariants are broken.

			=== Observed edge cases ===
			* if 2 divides mod, output == 0

	= Registers =		= Registers =
	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
Line 77:		Line 84:
	\|-		\|-
	\| 8		\| 8
	\| Endianness (1=Little endian, 0=Big endian)		\| Endianness (1=Little endian, 0=Big endian). Affects RSA_EXPFIFO, RSA_MOD, and RSA_TXT.
	\|-		\|-
	\| 9		\| 9
	\| Word order (1=Normal order, 0=Reversed order)		\| Word order (1=Normal order, 0=Reversed order). Affects RSA_MOD and RSA_TXT.
	\|}		\|}

Myria: /* RSA_MOD */ Note about attack to read RSA_EXPFIFO indirectly

2017-06-04T07:13:28Z

RSA_MOD: Note about attack to read RSA_EXPFIFO indirectly

← Older revision		Revision as of 11:13, 4 June 2017
Line 134:		Line 134:
	== RSA_MOD ==		== RSA_MOD ==
	The RSA key modulus for the selected keyslot can be written here. When writing the RSA modulus, the modulus must align with the end of the register area.		The RSA key modulus for the selected keyslot can be written here. When writing the RSA modulus, the modulus must align with the end of the register area.

			Writing to RSA_MOD does not change the exponent written with RSA_EXPFIFO. An attack based on the [[wikipedia:Pohlig-Hellman algorithm\|Pohlig-Hellman algorithm]] exists to "read" the contents of RSA_EXPFIFO as a result (see [[3DS System Flaws#Hardware\|3DS System Flaws]]).

	== RSA_TXT ==		== RSA_TXT ==

Dazzozo: fix up internal links

2016-03-09T16:16:56Z

fix up internal links

← Older revision		Revision as of 19:16, 9 March 2016
Line 85:		Line 85:
	== RSA_SLOT ==		== RSA_SLOT ==
	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
	! ~~Start~~		! Name
			! Offset
	! Width		! Width
	~~! Description~~
	\|-		\|-
			\| [[#RSA_SLOTCNT\|RSA_SLOTCNT]]
	\| 0x0		\| 0x0
	\| 0x4		\| 0x4
	~~\| REG_RSASLOTCNT~~
	\|-		\|-
			\| [[#RSA_SLOTSIZE\|RSA_SLOTSIZE]]
	\| 0x4		\| 0x4
	\| 0x4		\| 0x4
	~~\| REG_RSASLOTSIZE~~
	\|-		\|-
			\| ?
	\| 0x8		\| 0x8
	\| 0x4		\| 0x4
			\|-
	\| ?		\| ?
	\|-
	\| 0xC		\| 0xC
	\| 0x4		\| 0x4
	~~\| ?~~
	\|}		\|}

Line 132:		Line 132:
	The 0x100-byte private or public exponent is written to this write-only FIFO.		The 0x100-byte private or public exponent is written to this write-only FIFO.

	== ~~REG_RSAMOD~~ ==		== RSA_MOD ==
	The RSA key modulus for the selected keyslot can be written here. When writing the RSA modulus, the modulus must align with the end of the register area.		The RSA key modulus for the selected keyslot can be written here. When writing the RSA modulus, the modulus must align with the end of the register area.

	== ~~REG_RSATXT~~ ==		== RSA_TXT ==
	The RSA signature can be written here, and the data read from here is the message. When writing the RSA signature, the signature must be prepended with zeroes until it is a multiple of 8 bytes, and the end of the signature must align with the end of the register area.		The RSA signature can be written here, and the data read from here is the message. When writing the RSA signature, the signature must be prepended with zeroes until it is a multiple of 8 bytes, and the end of the signature must align with the end of the register area.

Dazzozo at 16:20, 9 March 2016

2016-03-09T15:20:26Z

← Older revision		Revision as of 18:20, 9 March 2016
Line 10:		Line 10:
	\| [[#RSA_CNT\|RSA_CNT]]		\| [[#RSA_CNT\|RSA_CNT]]
	\| 0x1000B000		\| 0x1000B000
			\| 0x04
			\|
			\|-
			\| style="background: green" \| Yes
			\| RSA_?
			\| 0x1000B0F0
	\| 0x04		\| 0x04
	\|		\|

Myria: "modulus" is the correct Latin case here.

2016-03-07T23:38:47Z

"modulus" is the correct Latin case here.

← Older revision		Revision as of 02:38, 8 March 2016
Line 127:		Line 127:

	== REG_RSAMOD ==		== REG_RSAMOD ==
	The RSA key ~~modulo~~ for the selected keyslot can be written here. When writing the RSA ~~modulo~~, the ~~modulo~~ must align with the end of the register area.		The RSA key modulus for the selected keyslot can be written here. When writing the RSA modulus, the modulus must align with the end of the register area.

	== REG_RSATXT ==		== REG_RSATXT ==

Plutooo at 00:55, 20 March 2015

2015-03-19T23:55:38Z

← Older revision		Revision as of 02:55, 20 March 2015
Line 1:		Line 1:
	== Registers ==		= Registers =
	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
	! ~~NAME~~		! Old3DS
	! ~~PHYSICAL ADDRESS~~		! Name
	! ~~WIDTH~~		! Address
			! Width
			! Used by
	\|-		\|-
	\| ~~REG_RSACNT~~		\| style="background: green" \| Yes
			\| [[#RSA_CNT\|RSA_CNT]]
	\| 0x1000B000		\| 0x1000B000
	\| 0x04		\| 0x04
			\|
	\|-		\|-
	\| ~~REG_RSASLOT0~~		\| style="background: green" \| Yes
			\| [[#RSA_SLOT\|RSA_SLOT]]0
	\| 0x1000B100		\| 0x1000B100
	\| 0x10		\| 0x10
			\|
	\|-		\|-
	\| ~~REG_RSASLOT1~~		\| style="background: green" \| Yes
			\| [[#RSA_SLOT\|RSA_SLOT]]1
	\| 0x1000B110		\| 0x1000B110
	\| 0x10		\| 0x10
			\|
	\|-		\|-
	\| ~~REG_RSASLOT2~~		\| style="background: green" \| Yes
			\| [[#RSA_SLOT\|RSA_SLOT]]2
	\| 0x1000B120		\| 0x1000B120
	\| 0x10		\| 0x10
			\|
	\|-		\|-
	\| ~~REG_RSASLOT3~~		\| style="background: green" \| Yes
			\| [[#RSA_SLOT\|RSA_SLOT]]3
	\| 0x1000B130		\| 0x1000B130
	\| 0x10		\| 0x10
			\|
	\|-		\|-
	\| ~~REG_RSAEXPFIFO~~		\| style="background: green" \| Yes
			\| [[#RSA_EXPFIFO\|RSA_EXPFIFO]]
	\| 0x1000B200		\| 0x1000B200
	\| 0x04		\| 0x04
			\|
	\|-		\|-
	\| ~~REG_RSAMOD~~		\| style="background: green" \| Yes
			\| [[#RSA_MOD\|RSA_MOD]]
	\| 0x1000B400		\| 0x1000B400
	\| 0x100		\| 0x100
			\|
	\|-		\|-
	\| ~~REG_RSATXT~~		\| style="background: green" \| Yes
			\| [[#RSA_TXT\|RSA_TXT]]
	\| 0x1000B800		\| 0x1000B800
	\| 0x100		\| 0x100
	\|-		\|
	\|}		\|}

	== ~~REG_RSACNT~~ ==		== RSA_CNT ==
	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
	! Bit		! Bit
Line 60:		Line 77:
	\|}		\|}

	== ~~REG_RSASLOT~~ ==		== RSA_SLOT ==
	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
	! Start		! Start
Line 83:		Line 100:
	\|}		\|}

	== ~~REG_RSASLOTCNT~~ ==		== RSA_SLOTCNT ==
	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
	! Bits		! Bits
Line 101:		Line 118:
	\|}		\|}

	Before writing ~~REG_RSAEXPFIFO~~/~~REG_RSAMOD~~, bit0 here should be cleared when bit31 is already clear. Otherwise, the ARM9 will hang when attempting to write to ~~REG_RSAEXPFIFO~~.		Before writing RSA_EXPFIFO/RSA_MOD, bit0 here should be cleared when bit31 is already clear. Otherwise, the ARM9 will hang when attempting to write to RSA_EXPFIFO.

	== ~~REG_RSASLOTSIZE~~ ==		== RSA_SLOTSIZE ==
	This contains the RSA size for this slot, in words. Normally this is 0x40 for RSA-2048.		This contains the RSA size for this slot, in words. Normally this is 0x40 for RSA-2048.

	== ~~REG_RSAEXPFIFO~~ ==		== RSA_EXPFIFO ==
	The 0x100-byte private or public exponent is written to this write-only FIFO.		The 0x100-byte private or public exponent is written to this write-only FIFO.

Yellows8: /* REG_RSASLOTCNT */

2015-02-13T22:15:49Z

REG_RSASLOTCNT

← Older revision		Revision as of 01:15, 14 February 2015
Line 92:		Line 92:
	\|-		\|-
	\| 1		\| 1
	\| Key write-protect		\| Key write-protect, this bit is RW. (0 = no protection, 1 = protected)
	\|-		\|-
	\| 30-2		\| 30-2