Virage2
Jump to navigation
Jump to search
OTP is a One Time Programmable 256 (0xFF) Byte memory region located inside the SoC. It seems to be called "virage2" in the SDK code. It can only be read in secure mode, and is mapped to 0xBFCA0000.
Offset | Size | Description | Note |
---|---|---|---|
0x00 | 0x14 | SK Hash | common |
0x14 | 0x10 x 4 | ROM Patch | common |
0x54 | 0x20 | EccPublicKey | per-console |
0x74 | 0x04 | bbId | per-console |
0x78 | 0x40 | EccPrivateKey | per-console |
0xB8 | 0x10 | bootAppKey (COMMON KEY) | common |
0xC8 | 0x10 | recryptListKey | per-console |
0xD8 | 0x10 | appStateKey | per-console |
0xE8 | 0x10 | selfMsgKey | per-console |
0xF8 | 0x04 | csumAdjust | per-console |
0xFC | 0x04 | jtagEnable | common |