|
|
|
@ -113,17 +113,27 @@ boost::optional<Core::Crypto::Key128> NCA::GetKeyAreaKey(NCASectionCryptoType ty
|
|
|
|
|
return out;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
boost::optional<Core::Crypto::Key128> NCA::GetTitlekey() const {
|
|
|
|
|
boost::optional<Core::Crypto::Key128> NCA::GetTitlekey() {
|
|
|
|
|
const auto master_key_id = GetCryptoRevision();
|
|
|
|
|
|
|
|
|
|
u128 rights_id{};
|
|
|
|
|
memcpy(rights_id.data(), header.rights_id.data(), 16);
|
|
|
|
|
if (rights_id == u128{})
|
|
|
|
|
if (rights_id == u128{}) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorInvalidRightsID;
|
|
|
|
|
return boost::none;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
auto titlekey = keys.GetKey(Core::Crypto::S128KeyType::Titlekey, rights_id[1], rights_id[0]);
|
|
|
|
|
if (titlekey == Core::Crypto::Key128{})
|
|
|
|
|
if (titlekey == Core::Crypto::Key128{}) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorMissingTitlekey;
|
|
|
|
|
return boost::none;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (!keys.HasKey(Core::Crypto::S128KeyType::Titlekek, master_key_id)) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorMissingTitlekek;
|
|
|
|
|
return boost::none;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
Core::Crypto::AESCipher<Core::Crypto::Key128> cipher(
|
|
|
|
|
keys.GetKey(Core::Crypto::S128KeyType::Titlekek, master_key_id), Core::Crypto::Mode::ECB);
|
|
|
|
|
cipher.Transcode(titlekey.data(), titlekey.size(), titlekey.data(), Core::Crypto::Op::Decrypt);
|
|
|
|
@ -131,7 +141,7 @@ boost::optional<Core::Crypto::Key128> NCA::GetTitlekey() const {
|
|
|
|
|
return titlekey;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
VirtualFile NCA::Decrypt(NCASectionHeader s_header, VirtualFile in, u64 starting_offset) const {
|
|
|
|
|
VirtualFile NCA::Decrypt(NCASectionHeader s_header, VirtualFile in, u64 starting_offset) {
|
|
|
|
|
if (!encrypted)
|
|
|
|
|
return in;
|
|
|
|
|
|
|
|
|
@ -143,15 +153,22 @@ VirtualFile NCA::Decrypt(NCASectionHeader s_header, VirtualFile in, u64 starting
|
|
|
|
|
LOG_DEBUG(Crypto, "called with mode=CTR, starting_offset={:016X}", starting_offset);
|
|
|
|
|
{
|
|
|
|
|
boost::optional<Core::Crypto::Key128> key = boost::none;
|
|
|
|
|
if (std::find_if_not(header.rights_id.begin(), header.rights_id.end(),
|
|
|
|
|
[](char c) { return c == 0; }) == header.rights_id.end()) {
|
|
|
|
|
key = GetKeyAreaKey(NCASectionCryptoType::CTR);
|
|
|
|
|
} else {
|
|
|
|
|
if (has_rights_id) {
|
|
|
|
|
status = Loader::ResultStatus::Success;
|
|
|
|
|
key = GetTitlekey();
|
|
|
|
|
if (key == boost::none) {
|
|
|
|
|
if (status == Loader::ResultStatus::Success)
|
|
|
|
|
status = Loader::ResultStatus::ErrorMissingTitlekey;
|
|
|
|
|
return nullptr;
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
key = GetKeyAreaKey(NCASectionCryptoType::CTR);
|
|
|
|
|
if (key == boost::none) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorMissingKeyAreaKey;
|
|
|
|
|
return nullptr;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (key == boost::none)
|
|
|
|
|
return nullptr;
|
|
|
|
|
auto out = std::make_shared<Core::Crypto::CTREncryptionLayer>(
|
|
|
|
|
std::move(in), key.value(), starting_offset);
|
|
|
|
|
std::vector<u8> iv(16);
|
|
|
|
@ -170,16 +187,31 @@ VirtualFile NCA::Decrypt(NCASectionHeader s_header, VirtualFile in, u64 starting
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
NCA::NCA(VirtualFile file_) : file(std::move(file_)) {
|
|
|
|
|
status = Loader::ResultStatus::Success;
|
|
|
|
|
|
|
|
|
|
if (file == nullptr) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorInvalidFormat;
|
|
|
|
|
status = Loader::ResultStatus::ErrorNullFile;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
if (sizeof(NCAHeader) != file->ReadObject(&header))
|
|
|
|
|
|
|
|
|
|
if (sizeof(NCAHeader) != file->ReadObject(&header)) {
|
|
|
|
|
LOG_ERROR(Loader, "File reader errored out during header read.");
|
|
|
|
|
status = Loader::ResultStatus::ErrorBadNCAHeader;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
encrypted = false;
|
|
|
|
|
|
|
|
|
|
if (!IsValidNCA(header)) {
|
|
|
|
|
if (header.magic == Common::MakeMagic('N', 'C', 'A', '2')) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorNCA2;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
if (header.magic == Common::MakeMagic('N', 'C', 'A', '0')) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorNCA0;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
NCAHeader dec_header{};
|
|
|
|
|
Core::Crypto::AESCipher<Core::Crypto::Key256> cipher(
|
|
|
|
|
keys.GetKey(Core::Crypto::S256KeyType::Header), Core::Crypto::Mode::XTS);
|
|
|
|
@ -189,14 +221,26 @@ NCA::NCA(VirtualFile file_) : file(std::move(file_)) {
|
|
|
|
|
header = dec_header;
|
|
|
|
|
encrypted = true;
|
|
|
|
|
} else {
|
|
|
|
|
if (dec_header.magic == Common::MakeMagic('N', 'C', 'A', '2')) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorNCA2;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
if (dec_header.magic == Common::MakeMagic('N', 'C', 'A', '0')) {
|
|
|
|
|
status = Loader::ResultStatus::ErrorNCA0;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (!keys.HasKey(Core::Crypto::S256KeyType::Header))
|
|
|
|
|
status = Loader::ResultStatus::ErrorMissingKeys;
|
|
|
|
|
status = Loader::ResultStatus::ErrorMissingHeaderKey;
|
|
|
|
|
else
|
|
|
|
|
status = Loader::ResultStatus::ErrorDecrypting;
|
|
|
|
|
status = Loader::ResultStatus::ErrorIncorrectHeaderKey;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
has_rights_id = std::find_if_not(header.rights_id.begin(), header.rights_id.end(),
|
|
|
|
|
[](char c) { return c == '\0'; }) != header.rights_id.end();
|
|
|
|
|
|
|
|
|
|
const std::ptrdiff_t number_sections =
|
|
|
|
|
std::count_if(std::begin(header.section_tables), std::end(header.section_tables),
|
|
|
|
|
[](NCASectionTableEntry entry) { return entry.media_offset > 0; });
|
|
|
|
@ -229,7 +273,12 @@ NCA::NCA(VirtualFile file_) : file(std::move(file_)) {
|
|
|
|
|
files.push_back(std::move(dec));
|
|
|
|
|
romfs = files.back();
|
|
|
|
|
} else {
|
|
|
|
|
status = Loader::ResultStatus::ErrorMissingKeys;
|
|
|
|
|
if (status != Loader::ResultStatus::Success)
|
|
|
|
|
return;
|
|
|
|
|
if (has_rights_id)
|
|
|
|
|
status = Loader::ResultStatus::ErrorIncorrectTitlekeyOrTitlekek;
|
|
|
|
|
else
|
|
|
|
|
status = Loader::ResultStatus::ErrorIncorrectKeyAreaKey;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
} else if (section.raw.header.filesystem_type == NCASectionFilesystemType::PFS0) {
|
|
|
|
@ -249,7 +298,12 @@ NCA::NCA(VirtualFile file_) : file(std::move(file_)) {
|
|
|
|
|
exefs = dirs.back();
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
status = Loader::ResultStatus::ErrorMissingKeys;
|
|
|
|
|
if (status != Loader::ResultStatus::Success)
|
|
|
|
|
return;
|
|
|
|
|
if (has_rights_id)
|
|
|
|
|
status = Loader::ResultStatus::ErrorIncorrectTitlekeyOrTitlekek;
|
|
|
|
|
else
|
|
|
|
|
status = Loader::ResultStatus::ErrorIncorrectKeyAreaKey;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|