Changes

m
no edit summary
Line 37: Line 37:  
|  0x0
 
|  0x0
 
|  0x10
 
|  0x10
|  AES-CCM MAC over a SHA256 hash, which hashes the first 0x110-bytes of the cleartext SEED.
+
|  AES-CBC MAC over a SHA256 hash, which hashes the first 0x110-bytes of the cleartext SEED.
 
|-
 
|-
 
|  0x10
 
|  0x10
Line 45: Line 45:     
=Description=
 
=Description=
This decrypts the input SEED and verifies it with the input AES-CCM MAC, verifies the RSA-signature, then writes the data to [[nand/private/movable.sed]]. The nonce used for the AES-CCM MAC is all-zero.
+
This decrypts the input SEED and verifies it with the input AES-CBC MAC, verifies the RSA-signature, then writes the data to [[nand/private/movable.sed]].