Title metadata

From 3dbrew
Revision as of 03:40, 23 April 2013 by 3dsguy (talk | contribs)
Jump to navigation Jump to search

Title metadata is a format used to store information about a title (a single standalone game, channel, etc.) and all its installed contents, including which contents they consist of and their SHA1 hashes.

Code is available by trap15 to parse the available information from the 3DS format of TMDs.


All the data in the file represented in Big Endian.


Offset Size Description
RSA 2048 RSA 4096
0x000 0x000 4 Signature type
0x004 0x004 256 / 512 Signature
0x104 0x204 60 Padding modulo 64
0x140 0x240 64 Issuer
0x180 0x280 1 Version
0x181 0x281 1 ca_crl_version
0x182 0x282 1 signer_crl_version
0x183 0x283 1 Padding modulo 64
0x184 0x284 8 System Version
0x18C 0x28C 8 Title ID
0x194 0x294 4 Title type
0x198 0x298 2 Group ID
0x19A 0x29A 62 reserved
0x1D8 0x2D8 4 Access rights
0x1DC 0x2DC 2 Title version
0x1DE 0x2DE 2 Number of contents (contcount)
0x1E0 0x2E0 2 Boot content
0x1E2 0x2E2 2 Padding
0x1E4 0x2E4 32 SHA-256 hash of the 36*64 byte long content info record blob (next field)
0x204 0x304 36*64 Content info records
0xB04 0xC04 48*contcount Content chunk records

Content info records

Offset Size Description
0x00 2 Content index offset
0x02 2 Content command count [k]
0x04 32 SHA-256 hash of the next k content records that have not been hashed yet

Content chunk records

Offset Size Description
0x00 4 Content id
0x04 2 Content index
0x06 2 Content type
0x08 8 Content size
0x10 32 SHA-256 hash

Content Index

This indicates the content type:

Index Content Type
0000 Main Content (.CXI for 3DS executable content/.CFA for 3DS Data Archives/.SRL for TWL content)
0001 Home Menu Manual (.CFA)
0002 DLP Child Container (.CFA)

Content Type flags

Flags Description
1 Encrypted
2 Disc
4 CFM (abbreviation for?)
0x4000 Optional
0x8000 Shared

Certificate Chain

If the TMD file is obtained from Nintendo's CDN, then it will have two certificates appended at the end of the file: .

TMD RSA-2048 CP0000000b CP0000000a Used to verify the TMD signature
CA RSA-4096 CA00000003 CA00000004 Used to verify the TMD Certificate

The CA certificate is issued by 'Root', the public key for which is stored in NATIVE_FIRM.

Example code application

 enum sig_type {
         RSA_2048_SHA256 = 0x00010004,
         RSA_4096_SHA256 = 0x00010003,
         RSA_2048_SHA1   = 0x00010001,
         RSA_4096_SHA1   = 0x00010000

// Sorry I removed the example struct because it is wrong.