Changes

===Encryption===

===Encryption===

The NAND file system is encrypted using AES-CTR. The TWL regions of NAND use the TWL NAND [[AES|keyslot]], while the CTR regions use the CTR NAND keyslot. The TWL/CTR NAND regions are specified by the NCSD header. The first 0x0B100000 bytes of NAND is encrypted with the TWL keyslot, however before 0x00012E00 only the MBR partition table is encrypted with the TWL keyslot. That region contains the TWL partitions listed below.

The NAND file system is encrypted using AES-CTR. The TWL regions of NAND use the TWL NAND [[AES|keyslot]], while the CTR regions use the CTR NAND keyslots. The keyslot used for CTR-NAND partitions is determined by the NCSD partition FS type. The TWL/CTR NAND regions are specified by the NCSD header. The first 0x0B100000 bytes of NAND is encrypted with the TWL keyslot, however before 0x00012E00 only the MBR partition table is encrypted with the TWL keyslot. That region contains the TWL partitions listed below.

===Partitions===

===Partitions===

|  0x0B930000

|  0x0B930000

|  0x2F5D0000

|  0x2F5D0000

|  CTR-NAND FAT File System. (3DS)

|  CTR-NAND FAT16 File System. (3DS)

|}

|}

=CTR partition=

=CTR partition=

The structure of [[nand/title]] appears to be exactly the same as [[SD Filesystem|SD]], except savegames are stored under the [[System SaveData|nand/data/<ID0>/sysdata]] directory instead.

The structure of [[nand/title]] appears to be exactly the same as [[SD Filesystem|SD]], except savegames are stored under the [[System SaveData|nand/data/<ID0>/sysdata]] directory instead.

The sub-directory name under [[nand/data]] is the same SHA256 hash over the [[nand/private/movable.sed|movable.sed]] keyY used for the "sdmc/Nintendo 3DS" sub-directory. This nand/data/<ID0> directory is the NAND equivalent of the "sdmc/Nintendo 3DS/<ID0>/<ID1>" directory, however the data contained here is stored in cleartext. The nand/data/<ID0>/extdata directory contains the shared [[extdata]], and is structured exactly the same way as SD extdata. (ID0 is the first 0x10-bytes from a SHA256 [[nand/private/movable.sed|hash]])

The sub-directory name under [[nand/data]] is the SHA256 hash over the [[nand/private/movable.sed|movable.sed]] keyY, except for this dirname each hex u32 is byte-swapped. This nand/data/<ID0> directory is the NAND equivalent of the "sdmc/Nintendo 3DS/<ID0>/<ID1>" directory, however the data contained here is stored in cleartext. The nand/data/<ID0>/extdata directory contains the shared [[extdata]], and is structured exactly the same way as SD extdata. (ID0 is the first 0x10-bytes from a SHA256 [[nand/private/movable.sed|hash]])

The "nandrw" [[FS:OpenArchive|archive]] is mounted at "nand:/rw/", while the "nandro" archive is mounted at "nand:/ro/".

The "nandrw" [[FS:OpenArchive|archive]] is mounted at "nand:/rw/", while the "nandro" archive is mounted at "nand:/ro/".