Virage2
Revision as of 15:22, 2 May 2018 by Stuckpixel (talk | contribs)
OTP is a One Time Programmable 256 (0xFF) Byte memory region located inside the SoC. It seems to be called "virage2" in the SDK code. It can only be read in secure mode, and is mapped to 0xBFCA0000.
| Offset | Size | Description | Note |
|---|---|---|---|
| 0x00 | 0x14 | SK Hash | common |
| 0x14 | 0x10 x 4 | ROM Patch | common |
| 0x54 | 0x20 | EccPublicKey | per-console |
| 0x74 | 0x04 | bbId | per-console |
| 0x78 | 0x40 | EccPrivateKey | per-console |
| 0xB8 | 0x10 | bootAppKey - COMMON KEY | common |
| 0xC8 | 0x10 | recryptListKey | per-console |
| 0xD8 | 0x10 | appStateKey | per-console |
| 0xE8 | 0x10 | selfMsgKey | per-console |
| 0xF8 | 0x04 | csumAdjust | per-console |
| 0xFC | 0x04 | jtagEnable | common |