839
edits
Changes
no edit summary
| 0x0||0x40||Issuer
| 0x0||0x40||Issuer
|-
|-
| 0x40||0x3C||ECDH data for console-unique eShop tickets.
| 0x40||0x3C||ECC PublicKey
|-
|-
| 0x7C||0x3||Unknown, first u8 is 0x01.
| 0x7C||0x1||Format Version
|-
| 0x7D||0x1||CaCrlVersion
|-
| 0x7E||0x1||SignerCrlVersion
|-
|-
| 0x7F||0x10||Encrypted TitleKey
| 0x7F||0x10||Encrypted TitleKey
|-
|-
| 0x8F||0x1||Unknown
| 0x8F||0x1||Reserved
|-
|-
| 0x90||0x8||TicketID
| 0x90||0x8||TicketID
| 0x9C||0x8||TitleID
| 0x9C||0x8||TitleID
|-
|-
| 0xA4||0x2||Unknown
| 0xA4||0x2||Systitle Access Mask (TWL Only. Clear for CTR)
|-
| 0xA6||0x2||Ticket title version
|-
|-
| 0xA6||0x2||Ticket title version, this generally the same as the title version stored in the [[TMD|Title Metadata]].
| 0xA8||0x4||AccessTitleId - Indicates which titles can access this title (TWL Only. Clear for CTR)
|-
|-
| 0xA8||0x8||Unused
| 0xAC||0x4||AccessTitleMask (Mask for AccessTitleId) (TWL Only. Clear for CTR)
|-
|-
| 0xB0||0x1||Unused
| 0xB0||0x1||License Type
|-
|-
| 0xB1||0x1||Ticket common [[AES|keyY]] index, usually 0x1 for retail system titles.
| 0xB1||0x1||Ticket common [[AES|keyY]] index, usually 0x1 for retail system titles.
|-
|-
| 0xB2||0x2F||Unused
| 0xB2||0x2A||Reserved
|-
| 0xDC||0x4||eShop Account ID?
|-
| 0xE0||0x1||Reserved
|-
| 0xE1||0x1||Audit
|-
| 0xE2||0x40||Content Index (TWL Only. Clear for CTR)
|-
|-
| 0xE1||0x1||Unknown
| 0x122||0x2||Reserved
|-
|-
| 0xE2||0x82||Unused
| 0x124||0x40||Limits
|-
|-
| 0x164||0xAC||Content Index Setup (Complex)
| 0x164||0xAC||Content Index (CTR Only)
|}
|}
The titlekey is decrypted by using the [[AES]] engine with the ticket common-key keyslot where the keyY is one of 6 keyYs loaded via the keyY index stored in the ticket. AES-CBC mode is used where the IV is the big-endian titleID. Note that on a retail unit index0 is a retail keyY, while on a dev-unit index0 is the dev common-key which is a normal-key.(On retail for these keyYs, the hardware key-scrambler is used)
* The Ticket Title Version is generally the same as the title version stored in the [[TMD|Title Metadata]]. Although it doesn't have to match the TMD version to be valid.
* The titlekey is decrypted by using the [[AES]] engine with the ticket common-key keyslot where the keyY is one of 6 keyYs loaded via the keyY index stored in the ticket. AES-CBC mode is used where the IV is the big-endian titleID. Note that on a retail unit index0 is a retail keyY, while on a dev-unit index0 is the dev common-key which is a normal-key.(On retail for these keyYs, the hardware key-scrambler is used)
== Certificate Chain ==
== Certificate Chain ==