6
edits
Changes
Jump to navigation
Jump to search
Let's start this one too
Tickets are found in many encrypted file used by the Wii (e.g. [[WAD Files]] or [[Wiidisc|Wiidiscs]]). They contain the encrypted AES key, the Title ID of the data and are followed by a [[certificate chain]].
So far I have only seen tickets with RSA-2048 signatures. (Discs will only work with those signatures because the size of partition ticket is always 0x2a4)
=== File structure ===
{| style="border-collapse: collapse; padding: 0.2em 0.2em 0.2em 0.2em;"
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | '''Start'''
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | '''Length'''
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | '''Description'''
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x000
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 4
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Signature type (always 0x10001 for RSA-2048 (to be confirmed))
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x005
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 256
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Signature (everything after this field is covered by this signature)
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x140
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 8
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Signature issuer
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x1dc
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 8
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Title ID / IV used for AES-CBC encryption
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x1bf
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 16
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Encrypted Title key
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x222
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 32
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Always 0xFF (?)
|}
To get the title key decrypt the 16 bytes at offset 0x1dc using the master key and the Title ID as IV.
So far I have only seen tickets with RSA-2048 signatures. (Discs will only work with those signatures because the size of partition ticket is always 0x2a4)
=== File structure ===
{| style="border-collapse: collapse; padding: 0.2em 0.2em 0.2em 0.2em;"
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | '''Start'''
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | '''Length'''
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | '''Description'''
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x000
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 4
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Signature type (always 0x10001 for RSA-2048 (to be confirmed))
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x005
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 256
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Signature (everything after this field is covered by this signature)
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x140
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 8
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Signature issuer
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x1dc
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 8
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Title ID / IV used for AES-CBC encryption
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x1bf
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 16
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Encrypted Title key
|- style="background-color: #ddd;"
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ded;" | 0x222
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #ddd;" | 32
| style="border: 1px solid #ccc; padding: 0.2em; background-color: #edd;" | Always 0xFF (?)
|}
To get the title key decrypt the 16 bytes at offset 0x1dc using the master key and the Title ID as IV.