remaketad.pl

@@ -0,0 +1,202 @@
+#!/bin/perl
+#
+# You'll need to do "cpan Crypt::Rijndael"
+#
+# I've commented out all the lines for using maketad to create a new TAD. Also prevented deleting the extracted app/tik/tmd.
+# Just doing a bunch of testing stuff.
+
+use strict;
+use Crypt::Rijndael;
+use Digest::SHA1 qw(sha1);
+
+my $tad = $ARGV[0] or die "split_tad <tad>\n";
+my $outdir = "out";
+
+my $buf;
+my $common_key    = pack("H*", "A1604A6A7123B529AE8BEC32C816FCAA");		# dev
+# my $common_key    = pack("H*", "A2FDDDF2E423574AE7ED8657B5AB19D3");		# debugger/update
+# my $common_key    = pack("H*", "AF1BF516A807D21AEA45984F04742861");		# retail		
+
+open(F, $tad) or die "cant open $tad\n";
+binmode(F);
+read(F, $buf, -s $tad);
+close(F);
+
+mkdir $outdir;
+
+
+my $offset = 0;
+my $size = 32;
+my( $hdrSize, $tadType, $tadVersion, $certSize, 
+	$crlSize, $ticketSize, $tmdSize, $contentSize, $metaSize)
+		= unpack("Na2nNNNNNN", substr($buf, $offset, $size));
+$offset += $size;
+
+print <<__REPORT__;
+
+hdrSize     $hdrSize
+ tadType     $tadType
+ tadVersion  $tadVersion
+ certSize    $certSize
+ crlSize     $crlSize
+ ticketSize  $ticketSize
+ tmdSize     $tmdSize
+ contentSize $contentSize
+ metaSize    $metaSize
+
+__REPORT__
+
+my $certOffset 		= &round_up($hdrSize, 64);
+my $crlOffset  		= &round_up($certOffset 	+ $certSize, 	64);
+my $ticketOffset 	= &round_up($crlOffset 		+ $crlSize, 	64);
+my $tmdOffset  		= &round_up($ticketOffset 	+ $ticketSize, 	64);
+my $contentOffset	= &round_up($tmdOffset 		+ $tmdSize, 	64);
+my $metaOffset 		= &round_up($contentOffset	+ $contentSize, 64);
+my $fileSize		= &round_up($metaOffset 	+ $metaSize, 	64);
+
+die "file size is not expected size(=$fileSize)\n" if $fileSize != -s $tad;
+
+my $ticket  = substr($buf, $ticketOffset, 	$ticketSize);
+my $tmd     = substr($buf, $tmdOffset, 		$tmdSize);
+my $content = substr($buf, $contentOffset, 	$contentSize);
+
+&save_file("$outdir/cert.bin", 		substr($buf, $certOffset, 		$certSize));
+&save_file("$outdir/crl.bin", 		substr($buf, $crlOffset, 		$crlSize));
+&save_file("$outdir/ticket.bin", 	$ticket);
+&save_file("$outdir/tmd.bin", 		$tmd);
+#&save_file("$outdir/content.bin", 	substr($buf, $contentOffset, 	$contentSize));
+&save_file("$outdir/meta.bin",		substr($buf, $metaOffset, 		$metaSize));
+
+
+my $title_key = &read_title_key($ticket);
+my $rci = &read_content_info($tmd);
+
+print unpack("H*", $title_key), "\n";
+
+my $offset = 0;
+foreach my $i ( @$rci )
+{
+	my $size = &round_up($i->[3], 16);
+	my $enc_content_x = substr($content, $offset, $size);
+	my $content_x_iv = pack("n", $i->[1]) . pack("x14");
+	my $dec_content_x = &dec_cbc($title_key, $content_x_iv, $enc_content_x);
+	my $dec_content = substr($dec_content_x, 0, $i->[3]);
+	my $hash = &sha1($dec_content);
+
+	print unpack("H*", $hash), "  ";
+	print((($hash eq $i->[4]) ? "OK": "hash mismatch"), "\n");
+	&save_file("$outdir/content_$i->[1].encrypted.bin", $enc_content_x);
+	&save_file("$outdir/content_$i->[1].bin", $dec_content);
+
+	$offset += &round_up($size, 64);
+}
+
+my $cfg = read_cfg($tmd);
+save_cfg("$outdir/config.txt", $cfg);
+
+print <<__REPORT__;
+
+dataflg   $cfg->[0]
+ titleid   $cfg->[1]
+ groupid   $cfg->[2]
+ major_ver $cfg->[3]
+ minor_ver $cfg->[4]
+
+__REPORT__
+
+#maketad($tad, $cfg);
+#system("/bin/rm -rf $outdir");
+
+
+sub round_up
+{	my( $x, $align ) = @_;
+
+	return int( ($x + $align - 1)/$align ) * $align;
+}
+
+sub save_file
+{	my( $name, $data ) = @_;
+
+	open(OUT, ">$name") or die "cant open $name\n";
+	binmode(OUT);
+	print OUT $data;
+	close(OUT);
+}
+
+sub read_content_info
+{	my( $tmd ) = @_;
+	my @ci = ();
+
+	my $nContent = unpack("n", substr($tmd, 0x1DE, 2));
+
+	for( my $i = 0; $i < $nContent; ++$i )
+	{
+		my( $cid, $idx, $type, $size, $hash )
+			= unpack("Nnnx4Na20", substr($tmd, 0x1E4 + 36 * $i, 36));
+
+		push @ci, [$cid, $idx, $type, $size, $hash];
+	}
+
+	return \@ci;
+}
+
+#sub maketad
+#{	my( $tad, $cfg ) = @_;
+#
+#	my $maketad = "$ENV{TWL_IPL_RED_PRIVATE_ROOT}/tools/bin/maketad.updater.exe";
+#	$tad =~ s/tad/updater.tad/;
+#
+#	my $option = "";
+#	if( $cfg->[0] )
+#	{
+#		$option = "-d $cfg->[1] $cfg->[2] $cfg->[3] $tad -v $cfg->[4]";
+#	} else {
+#		$option = "-v $cfg->[4]";
+#	}
+#
+#	my $cmd = "$maketad $outdir/content_0.bin $option -s -o $tad";
+#	system("/bin/echo $cmd");
+#	system("$cmd");
+#}
+
+sub read_cfg
+{	my( $tmd ) = @_;
+
+	my( $titleid_h, $titleid_l ) = unpack("NN", substr($tmd, 0x18C, 8));
+	my $groupid  = sprintf("%04X", unpack("n", substr($tmd, 0x198, 2)));
+	my( $major_ver, $minor_ver ) = unpack("CC", substr($tmd, 0x1DC, 2));
+
+	my $titleid  = sprintf("%08X%08X", $titleid_h, $titleid_l);
+	my $dataflg  = ($titleid_h & 0x08) >> 3;
+
+	return [ $dataflg, $titleid, $groupid, $major_ver, $minor_ver ]
+}
+
+sub save_cfg
+{	my( $name, $cfg ) = @_;
+
+	open(OUT, ">$name") or die "cant open $name\n";
+	print OUT sprintf("dataflg = $cfg->[0]\n");
+	print OUT sprintf("titleid = $cfg->[1]\n");
+	print OUT sprintf("groupid = $cfg->[2]\n");
+	print OUT sprintf("major_ver = $cfg->[3]\n");
+	print OUT sprintf("minor_ver = $cfg->[4]\n");
+	close(OUT);
+}
+
+sub read_title_key
+{	my( $ticket ) = @_;
+
+	my $enc_title_key = substr($ticket, 0x1BF, 16);
+	my $title_key_iv = substr($ticket, 0x1DC, 8) . pack("x8");
+
+	return &dec_cbc($common_key, $title_key_iv, $enc_title_key);
+}
+
+sub dec_cbc
+{	my( $key, $iv, $data ) = @_;
+
+	my $cbc = Crypt::Rijndael->new($key, Crypt::Rijndael::MODE_CBC);
+	$cbc->set_iv($iv);
+	return $cbc->decrypt($data);
+}