From iQueBrew
Revision as of 15:22, 2 May 2018 by Stuckpixel (Talk | contribs)

Jump to: navigation, search

OTP is a One Time Programmable 256 (0xFF) Byte memory region located inside the SoC. It seems to be called "virage2" in the SDK code. It can only be read in secure mode, and is mapped to 0xBFCA0000.

Offset Size Description Note
0x00 0x14 SK Hash common
0x14 0x10 x 4 ROM Patch common
0x54 0x20 EccPublicKey per-console
0x74 0x04 bbId per-console
0x78 0x40 EccPrivateKey per-console
0xB8 0x10 bootAppKey - COMMON KEY common
0xC8 0x10 recryptListKey per-console
0xD8 0x10 appStateKey per-console
0xE8 0x10 selfMsgKey per-console
0xF8 0x04 csumAdjust per-console
0xFC 0x04 jtagEnable common