xprism1/ntool
1
Fork 0
mirror of https://github.com/xprism1/ntool.git synced 2025-06-19 05:45:39 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

ntr_twl_srl: improve secure area crypto

Browse Source
This commit is contained in:
xprism1 2024-08-19 00:36:31 +08:00
parent 5e78a74736
commit 31ab2eed7a
1 changed files with 20 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
lib/ntr_twl_srl.py
View File

@ -4,6 +4,13 @@ from .keys import *
magic30 = 0x72636E65 # 'encr' magic30 = 0x72636E65 # 'encr'
magic34 = 0x6A624F79 # 'yObj' magic34 = 0x6A624F79 # 'yObj'
decrypted_id = 0xE7FFDEFF decrypted_id = 0xE7FFDEFF
sec_area_id_special = { # Non-standard decryption values
'YV5P': (0xD0D48B67, 0x39392F23), # Dragon Quest 5 (EU)
'YV5E': (0x014A191A, 0xA5C470B9), # Dragon Quest 5 (USA)
'YV5J': (0x7829BC8D, 0x9968EF44), # Dragon Quest 5 (JP)
'CP5P': (0xC4A15AB8, 0xD2E667C8), # Prince of Persia (EU)
'CP5E': (0xD5E97D20, 0x21B2A159), # Prince of Persia (USA)
}
block_size = 512 block_size = 512
def mod_add(a, b): def mod_add(a, b):
@ -477,6 +484,8 @@ class SRLReader:
p1, p0 = blowfish_decrypt(key_lvl3, readle(secure_area[i + 4:i + 8]), readle(secure_area[i:i + 4])) p1, p0 = blowfish_decrypt(key_lvl3, readle(secure_area[i + 4:i + 8]), readle(secure_area[i:i + 4]))
secure_area = secure_area[:i] + int32tobytes(p0) + int32tobytes(p1) + secure_area[i + 8:] secure_area = secure_area[:i] + int32tobytes(p0) + int32tobytes(p1) + secure_area[i + 8:]
game_code = self.hdr.game_code.decode("ascii")
if game_code not in sec_area_id_special.keys():
if readle(secure_area[:4]) == magic30 and readle(secure_area[4:8]) == magic34: if readle(secure_area[:4]) == magic30 and readle(secure_area[4:8]) == magic34:
secure_area = int32tobytes(decrypted_id) + int32tobytes(decrypted_id) + secure_area[8:] secure_area = int32tobytes(decrypted_id) + int32tobytes(decrypted_id) + secure_area[8:]
else: else:
@ -495,6 +504,8 @@ class SRLReader:
raise Exception(f'Secure area is {self.secure_area_status}, cannot be encrypted') raise Exception(f'Secure area is {self.secure_area_status}, cannot be encrypted')
# Set the secure area ID, which was overwritten with decrypted_id # Set the secure area ID, which was overwritten with decrypted_id
game_code = self.hdr.game_code.decode("ascii")
if game_code not in sec_area_id_special.keys():
secure_area = int32tobytes(magic30) + int32tobytes(magic34) + secure_area[8:] secure_area = int32tobytes(magic30) + int32tobytes(magic34) + secure_area[8:]
# Initialize with level 3, modulo 8 and encrypt first 2KB of secure area # Initialize with level 3, modulo 8 and encrypt first 2KB of secure area