Difference between revisions of "Virage2"
Jump to navigation
Jump to search
Stuckpixel (talk | contribs) m |
|||
Line 18: | Line 18: | ||
| 0x78 || 0x40 || EccPrivateKey || per-console | | 0x78 || 0x40 || EccPrivateKey || per-console | ||
|- | |- | ||
− | | 0xB8 || 0x10 || bootAppKey | + | | 0xB8 || 0x10 || bootAppKey (COMMON KEY)|| common |
|- | |- | ||
| 0xC8 || 0x10 || recryptListKey || per-console | | 0xC8 || 0x10 || recryptListKey || per-console |
Revision as of 13:38, 3 May 2018
OTP is a One Time Programmable 256 (0xFF) Byte memory region located inside the SoC. It seems to be called "virage2" in the SDK code. It can only be read in secure mode, and is mapped to 0xBFCA0000.
Offset | Size | Description | Note |
---|---|---|---|
0x00 | 0x14 | SK Hash | common |
0x14 | 0x10 x 4 | ROM Patch | common |
0x54 | 0x20 | EccPublicKey | per-console |
0x74 | 0x04 | bbId | per-console |
0x78 | 0x40 | EccPrivateKey | per-console |
0xB8 | 0x10 | bootAppKey (COMMON KEY) | common |
0xC8 | 0x10 | recryptListKey | per-console |
0xD8 | 0x10 | appStateKey | per-console |
0xE8 | 0x10 | selfMsgKey | per-console |
0xF8 | 0x04 | csumAdjust | per-console |
0xFC | 0x04 | jtagEnable | common |