In memory of Ben “bushing” Byer, who passed away on Monday, February 8th, 2016.

Difference between revisions of "Encryption keys"

From WiiUBrew
Jump to navigation Jump to search
Line 22: Line 22:
 
<code>6a0b87fc98b306ae3366f0e0a88d0b06a2813313</code>
 
<code>6a0b87fc98b306ae3366f0e0a88d0b06a2813313</code>
  
Actual Key <code>D7B00402659BA2ABD2CB0DB27FA2B656</code>
+
Actual Key - <code>D7B00402659BA2ABD2CB0DB27FA2B656</code>
  
 
Used to decrypt the title key for every Wii U application. System titles and installable applications are decrypted at install time, disc-based games are decrypted at load time.
 
Used to decrypt the title key for every Wii U application. System titles and installable applications are decrypted at install time, disc-based games are decrypted at load time.
Line 38: Line 38:
 
<code>d8b4970a7ed12e1002a0c4bf89bee171740d268b</code>
 
<code>d8b4970a7ed12e1002a0c4bf89bee171740d268b</code>
 
   
 
   
Actual Key <code>B5D8AB06ED7F6CFC529F2CE1B4EA32FD</code>
+
Actual Key - <code>B5D8AB06ED7F6CFC529F2CE1B4EA32FD</code>
  
 
Used to decrypt Starbuck binaries at load time (namely [[IOSU]] for Wii U and [[cafe2wii]] for vWii).
 
Used to decrypt Starbuck binaries at load time (namely [[IOSU]] for Wii U and [[cafe2wii]] for vWii).

Revision as of 00:49, 19 January 2016

There are lots of encryption keys used on the Wii U. They're seperated into two types, Espresso and Starbuck (for the normal and security processors), aside from a few exceptions. Only SHA1 hashes will be posted here, but several keys are publicly available, as it's possible to dump the Espresso key bank from the OTP. See Fail0verflow's writeup for more details.

Espresso Keys

The Espresso keybank is 64 bytes, with the first 32 being the Ancast Image keys. After the Boot ROM reads these keys, it disables access until the Espresso is reset again.

vWii Ancast Key

ce3641b2660253f5a7e789db297be2c1585b3054

Actual Key - 2EFE8ABCEDBB7BAAE3C0ED92FA29F866

Used to decrypt vWii System Menu and new NANDloader binaries at load time. See Fail0verflow's talk for more information on the NANDloader.

Wii U Ancast Key

2ba6f692ddbf0b3cd267e9374fa7dd849e80f8ab

Actual Key - 805E6285CD487DE0FAFFAA65A6985E17

Used to decrypt the Cafe OS kernel at load time.

Starbuck Keys

Wii U Common Key

6a0b87fc98b306ae3366f0e0a88d0b06a2813313

Actual Key - D7B00402659BA2ABD2CB0DB27FA2B656

Used to decrypt the title key for every Wii U application. System titles and installable applications are decrypted at install time, disc-based games are decrypted at load time.

Cafe OS and Starbuck binaries are double-encrypted with this and the Starbuck Wii U Ancast Key.

vWii Common Key

2b30b703c6676c8124c7347b30c7972ffeae2b39

Actual Key - 30BFC76E7C19AFBB23163330CED7C28D

Used to decrypt the title key for vWii system updates (as part of the Wii U's update process, meaning vWii doesn't have access to it).

Wii U Ancast Key

d8b4970a7ed12e1002a0c4bf89bee171740d268b

Actual Key - B5D8AB06ED7F6CFC529F2CE1B4EA32FD

Used to decrypt Starbuck binaries at load time (namely IOSU for Wii U and cafe2wii for vWii).