Modernize MakeROM build system + bug fixes (#120)

* Move files around to new directory structure * Rework libyaml into a stand-alone dep for makerom. * Rework libpolarssl to be standalone dependency for makerom. * Update includes. * Delete makefile * Add new makefile for makerom. * Update MakeROM github actions script. * Fix again. * Update MakeROM's makefile * Tweak makerom build script * Tweak MakeROM build script. * Fix typo * Update MakeROM makefiles. * Tweak CTRTool build script. * Tweak build script * Tweak CTRTool build script. * Tweak CTRTool build script * Add libmbedtls to makerom deps * Partially migrate makerom to libmbedtls * Break out libblz as an external dependency for makerom. * Tweak makerom build script. * Move dependencies to the top level. * Put everything back. * misc * Update makerom documentation. * Link to ctrtool/makerom readmes from the root readme. * Update root readme again. * Migrate makerom to modern mbedtls * Bump makerom version to 0.18.1 * Change signing errors to be warnings when they fail. * Add error verbosity to errors when generating CIA files. * Fix bug in RSA code. * misc. * Remove polarssl now migration to mbedtls complete. * Surface more makerom errors. * [makerom] Tolerate CCI signing errors as a warning. * Add missing return. * Import initial data key_x (prod/dev included) * [makerom] Fix initial data generation.
2026-07-03 16:59:04 +00:00 · 2022-04-17 10:49:05 +08:00
parent 8a9f9bda55
commit cc707c160f
290 changed files with 115424 additions and 10431 deletions
@@ -0,0 +1,113 @@
+#include "lib.h"
+#include "certs.h"
+
+// Cert Sizes
+void GetCertSigSectionSizes(u32 *sign_size, u32 *sign_padlen, u8 *cert)
+{
+	u32 sig = u8_to_u32(cert,BE);
+	switch(sig){
+		case RSA_4096_SHA1 :
+			*sign_size = 0x200;
+			*sign_padlen = 0x3C;
+			break;
+		case RSA_2048_SHA1 :
+			*sign_size = 0x100;
+			*sign_padlen = 0x3C;
+			break;
+		case ECC_SHA1 :
+			*sign_size = 0x3C;
+			*sign_padlen = 0x40;
+			break;
+		case RSA_4096_SHA256 :
+			*sign_size = 0x200;
+			*sign_padlen = 0x3C;
+			break;
+		case RSA_2048_SHA256 :
+			*sign_size = 0x100;
+			*sign_padlen = 0x3C;
+			break;
+		case ECC_SHA256 :
+			*sign_size = 0x3C;
+			*sign_padlen = 0x40;
+			break;
+		default :
+			*sign_size = 0;
+			*sign_padlen = 0;
+			break;
+	}
+	return;
+}
+
+u32 GetCertSize(u8 *cert)
+{
+	u32 sign_size = 0;
+	u32 sign_padlen = 0;
+	GetCertSigSectionSizes(&sign_size,&sign_padlen,cert);
+	if(!sign_size || !sign_padlen)
+		return 0;
+
+	return sizeof(u32) + sign_size + sign_padlen + sizeof(cert_hdr) + GetCertPubkSectionSize(GetCertPubkType(cert));
+}
+
+
+cert_hdr* GetCertHdr(u8 *cert)
+{
+	u32 sign_size = 0;
+	u32 sign_padlen = 0;
+	GetCertSigSectionSizes(&sign_size,&sign_padlen,cert);
+	if(!sign_size || !sign_padlen) return NULL;
+
+	return (cert_hdr*)(cert+4+sign_size+sign_padlen);
+}
+
+u32 GetCertPubkSectionSize(pubk_types type)
+{
+	switch(type){
+		case RSA_4096_PUBK : return sizeof(rsa_4096_pubk_struct);
+		case RSA_2048_PUBK : return sizeof(rsa_2048_pubk_struct);
+		case ECC_PUBK : return sizeof(ecc_pubk_struct);
+		default : return 0;
+	}
+}
+
+// Issuer/Name Functions
+u8 *GetCertIssuer(u8 *cert)
+{
+	cert_hdr *hdr = GetCertHdr(cert);
+	return hdr->issuer;
+}
+u8 *GetCertName(u8 *cert)
+{
+	cert_hdr *hdr = GetCertHdr(cert);
+	return hdr->name;
+}
+
+void GenCertChildIssuer(u8 *dest, u8 *cert)
+{
+	snprintf((char*)dest,0x40,"%s-%s",GetCertIssuer(cert),GetCertName(cert));
+}
+
+// Pubk
+pubk_types GetCertPubkType(u8 *cert)
+{
+	cert_hdr *hdr = GetCertHdr(cert);
+
+	return (pubk_types)u8_to_u32(hdr->keyType,BE);
+}
+u8 *GetCertPubk(u8 *cert)
+{
+	if(!GetCertHdr(cert)) 
+		return NULL;
+	return ((u8*)GetCertHdr(cert)) + sizeof(cert_hdr);
+}
+
+bool VerifyCert(u8 *cert, u8 *pubk)
+{
+	if(!GetCertHdr(cert)) 
+		return false;
+	u8 *signature = (cert+sizeof(u32));
+	u8 *data = (u8*)GetCertHdr(cert);
+	u32 datasize = sizeof(cert_hdr) + GetCertPubkSectionSize(GetCertPubkType(cert));
+
+	return RsaSignVerify(data,datasize,signature,pubk,NULL,u8_to_u32(cert,BE),CTR_RSA_VERIFY);
+}