mirror of
https://github.com/rvtr/TwlIPL.git
synced 2025-10-31 06:01:12 -04:00
21ab2e4897
git-svn-id: file:///Users/lillianskinner/Downloads/platinum/twl/TwlIPL/trunk@576 b08762b0-b915-fc4b-9d8c-17b2551a87ff
423 lines
13 KiB
C
423 lines
13 KiB
C
/*---------------------------------------------------------------------------*
|
|
Project: TwlIPL - libraries - fs
|
|
File: fs_loader.c
|
|
|
|
Copyright 2007 Nintendo. All rights reserved.
|
|
|
|
These coded instructions, statements, and computer programs contain
|
|
proprietary information of Nintendo of America Inc. and/or Nintendo
|
|
Company Ltd., and are protected by Federal copyright law. They may
|
|
not be disclosed to third parties or copied or duplicated in any form,
|
|
in whole or in part, without the prior written consent of Nintendo.
|
|
|
|
$Date:: $
|
|
$Rev$
|
|
$Author$
|
|
*---------------------------------------------------------------------------*/
|
|
|
|
#include <firm.h>
|
|
#include <estypes.h>
|
|
#include <es.h>
|
|
#include <twl/aes.h>
|
|
#include <twl/aes_private.h>
|
|
|
|
#define FS_HEADER_AUTH_SIZE 0xe00
|
|
|
|
#define MODULE_ALIGNMENT 0x10 // 16バイト単位で読み込む
|
|
//#define MODULE_ALIGNMENT 0x200 // 512バイト単位で読み込む
|
|
#define RoundUpModuleSize(value) (((value) + MODULE_ALIGNMENT - 1) & -MODULE_ALIGNMENT)
|
|
|
|
#define HASH_UNIT 0x1000
|
|
|
|
static ROM_Header* const rh = (ROM_Header*)HW_TWL_ROM_HEADER_BUF;
|
|
|
|
static u8 currentKey[ SVC_SHA1_BLOCK_SIZE ];
|
|
|
|
static const u8 defaultKey[ SVC_SHA1_BLOCK_SIZE ] =
|
|
{
|
|
0x21, 0x06, 0xc0, 0xde,
|
|
0xba, 0x98, 0xce, 0x3f,
|
|
0xa6, 0x92, 0xe3, 0x9d,
|
|
0x46, 0xf2, 0xed, 0x01,
|
|
|
|
0x76, 0xe3, 0xcc, 0x08,
|
|
0x56, 0x23, 0x63, 0xfa,
|
|
0xca, 0xd4, 0xec, 0xdf,
|
|
0x9a, 0x62, 0x78, 0x34,
|
|
|
|
0x8f, 0x6d, 0x63, 0x3c,
|
|
0xfe, 0x22, 0xca, 0x92,
|
|
0x20, 0x88, 0x97, 0x23,
|
|
0xd2, 0xcf, 0xae, 0xc2,
|
|
|
|
0x32, 0x67, 0x8d, 0xfe,
|
|
0xca, 0x83, 0x64, 0x98,
|
|
0xac, 0xfd, 0x3e, 0x37,
|
|
0x87, 0x46, 0x58, 0x24,
|
|
};
|
|
|
|
static AESKey FSiAesKeySeed;
|
|
|
|
static BOOL aesFlag;
|
|
static AESCounter aesCounter;
|
|
static u8* const aesBuffer = (u8*)HW_FIRM_FS_AES_BUFFER; // 0x2ff3800
|
|
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: FS2_GetAesKeySeed
|
|
|
|
Description: retreive aes key seed in the signature
|
|
|
|
Arguments: None
|
|
|
|
Returns: pointer to seed
|
|
*---------------------------------------------------------------------------*/
|
|
AESKey* const FS2_GetAesKeySeed( void )
|
|
{
|
|
return &FSiAesKeySeed;
|
|
}
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: FS2_DeleteAesKeySeed
|
|
|
|
Description: delete aes key seed in the signature
|
|
|
|
Arguments: None
|
|
|
|
Returns: None
|
|
*---------------------------------------------------------------------------*/
|
|
void FS2_DeleteAesKeySeed( void )
|
|
{
|
|
MI_CpuClear8( &FSiAesKeySeed, sizeof(FSiAesKeySeed) );
|
|
}
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: FS2_SetDigestKey
|
|
|
|
Description: set specified key or default key for HMAC-SHA-1
|
|
|
|
Arguments: digestKey pointer to key
|
|
if NULL, use default key
|
|
|
|
Returns: TRUE if success
|
|
*---------------------------------------------------------------------------*/
|
|
void FS2_SetDigestKey( const u8* digestKey )
|
|
{
|
|
if ( digestKey )
|
|
{
|
|
MI_CpuCopy8(digestKey, currentKey, SVC_SHA1_BLOCK_SIZE);
|
|
}
|
|
else
|
|
{
|
|
MI_CpuCopy8(defaultKey, currentKey, SVC_SHA1_BLOCK_SIZE);
|
|
}
|
|
}
|
|
|
|
static inline BOOL CheckDigest( u8* a, u8* b, BOOL aClr, BOOL bClr )
|
|
{
|
|
BOOL result = TRUE;
|
|
int i;
|
|
for ( i = 0; i < SVC_SHA1_DIGEST_SIZE; i++ )
|
|
{
|
|
if ( a[i] != b[i] )
|
|
{
|
|
result = FALSE;
|
|
}
|
|
}
|
|
if ( aClr ) MI_CpuClear8(a, SVC_SHA1_DIGEST_SIZE);
|
|
if ( bClr ) MI_CpuClear8(b, SVC_SHA1_DIGEST_SIZE);
|
|
return result;
|
|
}
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: CheckRomCertificate
|
|
|
|
Description: check the certification in the ROM
|
|
|
|
ROMヘッダに付加された証明書のチェックを行います。
|
|
makerom.TWL内のコードに依存します。
|
|
|
|
Arguments: pool pointer to the SVCSignHeapContext
|
|
pCert pointer to the certification
|
|
pCAPubKey pointer to the public key for the certification
|
|
gameCode initial code
|
|
|
|
Returns: TRUE if success
|
|
*---------------------------------------------------------------------------*/
|
|
static BOOL CheckRomCertificate( SVCSignHeapContext* pool, const RomCertificate *pCert, const void* pCAPubKey, u32 gameCode )
|
|
{
|
|
u8 digest[SVC_SHA1_DIGEST_SIZE];
|
|
u8 md[SVC_SHA1_DIGEST_SIZE];
|
|
|
|
// 証明書ヘッダのマジックナンバーチェック
|
|
if( pCert->header.magicNumber != TWL_ROM_CERT_MAGIC_NUMBER ||
|
|
// 証明書ヘッダとROMヘッダのゲームコード一致チェック
|
|
pCert->header.gameCode != gameCode )
|
|
{
|
|
return FALSE;
|
|
}
|
|
// 証明書署名チェック
|
|
SVC_DecryptSign( pool, &digest, pCert->sign, pCAPubKey );
|
|
|
|
// ダイジェストの計算
|
|
SVC_CalcSHA1( md, pCert, ROM_CERT_SIGN_OFFSET );
|
|
|
|
// 比較
|
|
return CheckDigest(md, digest, TRUE, TRUE);
|
|
}
|
|
|
|
static void AesCallback(AESResult result, void* arg)
|
|
{
|
|
volatile BOOL *pBusy = (BOOL*)arg;
|
|
*pBusy = FALSE;
|
|
if (result != AES_RESULT_SUCCESS)
|
|
{
|
|
OS_TPrintf("Failed to decrypt by AES (%d)\n", result);
|
|
}
|
|
}
|
|
|
|
static void CopyWithAes( const void* src, void* dest, u32 size )
|
|
{
|
|
volatile BOOL aesBusy = TRUE;
|
|
|
|
AES_SetKeySlot( AES_KEY_SLOT_A );
|
|
aesBusy = TRUE;
|
|
if ( AES_RESULT_SUCCESS == AES_Ctr( &aesCounter, src, size, dest, AesCallback, (void*)&aesBusy ) )
|
|
{
|
|
while ( aesBusy )
|
|
{
|
|
}
|
|
}
|
|
AES_AddToCounter( &aesCounter, size / AES_BLOCK_SIZE );
|
|
}
|
|
|
|
static void EnableAes( u32 offset )
|
|
{
|
|
aesFlag = TRUE;
|
|
MI_CpuCopy8( rh->s.main_static_digest, &aesCounter, AES_BLOCK_SIZE );
|
|
AES_AddToCounter( &aesCounter, (offset - rh->s.aes_target_rom_offset) / AES_BLOCK_SIZE );
|
|
}
|
|
static void DisableAes( void )
|
|
{
|
|
aesFlag = FALSE;
|
|
}
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: GetTransferSize
|
|
|
|
Description: get size to transfer once
|
|
|
|
一度に受信するサイズを返します。
|
|
|
|
転送範囲がAES領域をまたぐ場合は、境界までのサイズ (引数より
|
|
小さなサイズ) を返します。
|
|
makerom.TWLまたはIPLの使用に依存します。
|
|
|
|
Arguments: offset offset of region from head of ROM_Header
|
|
size size of region
|
|
|
|
Returns: size to transfer once
|
|
*---------------------------------------------------------------------------*/
|
|
static u32 GetTransferSize( u32 offset, u32 size )
|
|
{
|
|
u32 aes_offset = rh->s.aes_target_rom_offset;
|
|
u32 aes_end = aes_offset + RoundUpModuleSize(rh->s.aes_target_size);
|
|
u32 end = offset + RoundUpModuleSize(size);
|
|
if ( rh->s.enable_aes )
|
|
{
|
|
if ( offset >= aes_offset && offset < aes_end )
|
|
{
|
|
if ( end > aes_end )
|
|
{
|
|
size = aes_end - offset;
|
|
}
|
|
if ( size > HW_FIRM_FS_AES_BUFFER_SIZE )
|
|
{
|
|
size = HW_FIRM_FS_AES_BUFFER_SIZE;
|
|
}
|
|
EnableAes( offset );
|
|
}
|
|
else
|
|
{
|
|
if ( offset < aes_offset && offset + size > aes_offset )
|
|
{
|
|
size = aes_offset - offset;
|
|
}
|
|
DisableAes();
|
|
}
|
|
}
|
|
else
|
|
{
|
|
DisableAes();
|
|
}
|
|
return size;
|
|
}
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: FS2_LoadModule
|
|
|
|
Description: receive data from ARM7 via WRAM-B and store in destination address
|
|
in view of AES settings in the ROM header at HW_TWL_ROM_HEADER_BUF,
|
|
then verify the digest
|
|
|
|
Arguments: pFile pointer to FSFile streucture
|
|
dest destination address to read
|
|
offset file offset to start to read in bytes
|
|
size total length to read in bytes
|
|
digest digest to verify
|
|
|
|
Returns: TRUE if success
|
|
*---------------------------------------------------------------------------*/
|
|
BOOL FS2_LoadModule( FSFile *pFile, u8* dest, u32 offset, u32 size, const u8 digest[SVC_SHA1_DIGEST_SIZE] )
|
|
{
|
|
u8 md[SVC_SHA1_DIGEST_SIZE];
|
|
u8* hmacDest = dest;
|
|
u32 hmacSize = size;
|
|
|
|
if ( !FS_SeekFile( pFile, (s32)offset, FS_SEEK_SET ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
size = RoundUpModuleSize( size );
|
|
while ( size > 0 )
|
|
{
|
|
u32 unit = GetTransferSize( offset, size );
|
|
if ( aesFlag )
|
|
{
|
|
if ( !FS_ReadFile( pFile, aesBuffer, (s32)unit ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
DC_FlushRange( aesBuffer, unit );
|
|
CopyWithAes( aesBuffer, dest, unit );
|
|
}
|
|
else
|
|
{
|
|
if ( !FS_ReadFile( pFile, dest, (s32)unit ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
}
|
|
dest += unit;
|
|
offset += unit;
|
|
size -= unit;
|
|
}
|
|
SVC_CalcHMACSHA1( md, hmacDest, hmacSize, currentKey, SVC_SHA1_BLOCK_SIZE );
|
|
return CheckDigest(md, (u8*)digest, TRUE, FALSE);
|
|
}
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: FS2_OpenSrl
|
|
|
|
Description: open srl file named at HW_TWL_FS_BOOT_SRL_PATH_BUF
|
|
|
|
Arguments: pFile pointer to FSFile streucture
|
|
|
|
Returns: TRUE if success
|
|
*---------------------------------------------------------------------------*/
|
|
BOOL FS2_OpenSrl( FSFile *pFile )
|
|
{
|
|
return FS_OpenFileEx( pFile, (char*)HW_TWL_FS_BOOT_SRL_PATH_BUF, FS_FILEMODE_R );
|
|
}
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: FS2_LoadHeader
|
|
|
|
Description: load ROM header to HW_TWL_ROM_HEADER_BUF using normal FS,
|
|
and verify signature
|
|
|
|
Arguments: pFile pointer to FSFile streucture
|
|
pool heap context to call SVC_DecryptSign
|
|
rsa_key public key to verify the signature
|
|
|
|
Returns: TRUE if success
|
|
*---------------------------------------------------------------------------*/
|
|
BOOL FS2_LoadHeader( FSFile *pFile, SVCSignHeapContext* pool, const void* rsa_key )
|
|
{
|
|
u8 md[SVC_SHA1_DIGEST_SIZE];
|
|
SignatureData sd;
|
|
|
|
if ( !FS_SeekFile( pFile, 0, FS_SEEK_SET ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
if ( !FS_ReadFile( pFile, rh, HW_TWL_ROM_HEADER_BUF_SIZE ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
SVC_CalcSHA1( md, rh, FS_HEADER_AUTH_SIZE );
|
|
|
|
// コンテンツ証明書
|
|
if ( CheckRomCertificate( pool, &rh->certificate, rsa_key, *(u32*)rh->s.game_code ) )
|
|
{
|
|
rsa_key = rh->certificate.pubKeyMod; // ヘッダ用の鍵の取り出し
|
|
}
|
|
else
|
|
{
|
|
// とりあえずコンテンツ証明書用の鍵がそのまま使えると仮定
|
|
}
|
|
|
|
// ヘッダ署名チェック
|
|
SVC_DecryptSign( pool, &sd, rh->signature, rsa_key );
|
|
|
|
if ( !CheckDigest( md, sd.digest, TRUE, FALSE ) )
|
|
{
|
|
MI_CpuClear8( &sd, sizeof(sd) ); // 残り削除 (他に必要なものはない？)
|
|
return FALSE;
|
|
}
|
|
|
|
// ダイジェスト以外のデータのチェックが必要！！
|
|
|
|
// 鍵の保存
|
|
MI_CpuCopy8( (AESKey*)sd.aes_key_seed, &FSiAesKeySeed, sizeof(FSiAesKeySeed) );
|
|
|
|
MI_CpuClear8( &sd, sizeof(sd) ); // 残り削除 (他に必要なものはない？)
|
|
|
|
// ROMヘッダのコピー
|
|
MI_CpuCopyFast( rh, (void*)HW_ROM_HEADER_BUF, HW_ROM_HEADER_BUF_END-HW_ROM_HEADER_BUF );
|
|
return TRUE;
|
|
}
|
|
|
|
/*---------------------------------------------------------------------------*
|
|
Name: FS2_LoadStatic
|
|
|
|
Description: receive static regions from ARM6 via WRAM-B and store them
|
|
specified by ROM header at HW_TWL_ROM_HEADER_BUF
|
|
|
|
Arguments: pFile pointer to FSFile streucture
|
|
|
|
Returns: TRUE if success
|
|
*---------------------------------------------------------------------------*/
|
|
BOOL FS2_LoadStatic( FSFile *pFile )
|
|
{
|
|
if ( rh->s.main_size > 0 )
|
|
{
|
|
if ( !FS2_LoadModule( pFile, rh->s.main_ram_address, rh->s.main_rom_offset, rh->s.main_size, rh->s.main_static_digest ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
}
|
|
if ( rh->s.sub_size > 0 )
|
|
{
|
|
if ( !FS2_LoadModule( pFile, rh->s.sub_ram_address, rh->s.sub_rom_offset, rh->s.sub_size, rh->s.sub_static_digest ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
}
|
|
if ( rh->s.main_ltd_size > 0 )
|
|
{
|
|
if ( !FS2_LoadModule( pFile, rh->s.main_ltd_ram_address, rh->s.main_ltd_rom_offset, rh->s.main_ltd_size, rh->s.main_ltd_static_digest ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
}
|
|
if ( rh->s.sub_ltd_size > 0 )
|
|
{
|
|
if ( !FS2_LoadModule( pFile, rh->s.sub_ltd_ram_address, rh->s.sub_ltd_rom_offset, rh->s.sub_ltd_size, rh->s.sub_ltd_static_digest ) )
|
|
{
|
|
return FALSE;
|
|
}
|
|
}
|
|
return TRUE;
|
|
}
|