mirror of
https://github.com/DarkStore-3DS/Project_CTR.git
synced 2026-07-03 00:39:14 +00:00
Jack
cc707c160f
* Move files around to new directory structure * Rework libyaml into a stand-alone dep for makerom. * Rework libpolarssl to be standalone dependency for makerom. * Update includes. * Delete makefile * Add new makefile for makerom. * Update MakeROM github actions script. * Fix again. * Update MakeROM's makefile * Tweak makerom build script * Tweak MakeROM build script. * Fix typo * Update MakeROM makefiles. * Tweak CTRTool build script. * Tweak build script * Tweak CTRTool build script. * Tweak CTRTool build script * Add libmbedtls to makerom deps * Partially migrate makerom to libmbedtls * Break out libblz as an external dependency for makerom. * Tweak makerom build script. * Move dependencies to the top level. * Put everything back. * misc * Update makerom documentation. * Link to ctrtool/makerom readmes from the root readme. * Update root readme again. * Migrate makerom to modern mbedtls * Bump makerom version to 0.18.1 * Change signing errors to be warnings when they fail. * Add error verbosity to errors when generating CIA files. * Fix bug in RSA code. * misc. * Remove polarssl now migration to mbedtls complete. * Surface more makerom errors. * [makerom] Tolerate CCI signing errors as a warning. * Add missing return. * Import initial data key_x (prod/dev included) * [makerom] Fix initial data generation.
113 lines
2.3 KiB
C
113 lines
2.3 KiB
C
#include "lib.h"
|
|
#include "certs.h"
|
|
|
|
// Cert Sizes
|
|
void GetCertSigSectionSizes(u32 *sign_size, u32 *sign_padlen, u8 *cert)
|
|
{
|
|
u32 sig = u8_to_u32(cert,BE);
|
|
switch(sig){
|
|
case RSA_4096_SHA1 :
|
|
*sign_size = 0x200;
|
|
*sign_padlen = 0x3C;
|
|
break;
|
|
case RSA_2048_SHA1 :
|
|
*sign_size = 0x100;
|
|
*sign_padlen = 0x3C;
|
|
break;
|
|
case ECC_SHA1 :
|
|
*sign_size = 0x3C;
|
|
*sign_padlen = 0x40;
|
|
break;
|
|
case RSA_4096_SHA256 :
|
|
*sign_size = 0x200;
|
|
*sign_padlen = 0x3C;
|
|
break;
|
|
case RSA_2048_SHA256 :
|
|
*sign_size = 0x100;
|
|
*sign_padlen = 0x3C;
|
|
break;
|
|
case ECC_SHA256 :
|
|
*sign_size = 0x3C;
|
|
*sign_padlen = 0x40;
|
|
break;
|
|
default :
|
|
*sign_size = 0;
|
|
*sign_padlen = 0;
|
|
break;
|
|
}
|
|
return;
|
|
}
|
|
|
|
u32 GetCertSize(u8 *cert)
|
|
{
|
|
u32 sign_size = 0;
|
|
u32 sign_padlen = 0;
|
|
GetCertSigSectionSizes(&sign_size,&sign_padlen,cert);
|
|
if(!sign_size || !sign_padlen)
|
|
return 0;
|
|
|
|
return sizeof(u32) + sign_size + sign_padlen + sizeof(cert_hdr) + GetCertPubkSectionSize(GetCertPubkType(cert));
|
|
}
|
|
|
|
|
|
cert_hdr* GetCertHdr(u8 *cert)
|
|
{
|
|
u32 sign_size = 0;
|
|
u32 sign_padlen = 0;
|
|
GetCertSigSectionSizes(&sign_size,&sign_padlen,cert);
|
|
if(!sign_size || !sign_padlen) return NULL;
|
|
|
|
return (cert_hdr*)(cert+4+sign_size+sign_padlen);
|
|
}
|
|
|
|
u32 GetCertPubkSectionSize(pubk_types type)
|
|
{
|
|
switch(type){
|
|
case RSA_4096_PUBK : return sizeof(rsa_4096_pubk_struct);
|
|
case RSA_2048_PUBK : return sizeof(rsa_2048_pubk_struct);
|
|
case ECC_PUBK : return sizeof(ecc_pubk_struct);
|
|
default : return 0;
|
|
}
|
|
}
|
|
|
|
// Issuer/Name Functions
|
|
u8 *GetCertIssuer(u8 *cert)
|
|
{
|
|
cert_hdr *hdr = GetCertHdr(cert);
|
|
return hdr->issuer;
|
|
}
|
|
u8 *GetCertName(u8 *cert)
|
|
{
|
|
cert_hdr *hdr = GetCertHdr(cert);
|
|
return hdr->name;
|
|
}
|
|
|
|
void GenCertChildIssuer(u8 *dest, u8 *cert)
|
|
{
|
|
snprintf((char*)dest,0x40,"%s-%s",GetCertIssuer(cert),GetCertName(cert));
|
|
}
|
|
|
|
// Pubk
|
|
pubk_types GetCertPubkType(u8 *cert)
|
|
{
|
|
cert_hdr *hdr = GetCertHdr(cert);
|
|
|
|
return (pubk_types)u8_to_u32(hdr->keyType,BE);
|
|
}
|
|
u8 *GetCertPubk(u8 *cert)
|
|
{
|
|
if(!GetCertHdr(cert))
|
|
return NULL;
|
|
return ((u8*)GetCertHdr(cert)) + sizeof(cert_hdr);
|
|
}
|
|
|
|
bool VerifyCert(u8 *cert, u8 *pubk)
|
|
{
|
|
if(!GetCertHdr(cert))
|
|
return false;
|
|
u8 *signature = (cert+sizeof(u32));
|
|
u8 *data = (u8*)GetCertHdr(cert);
|
|
u32 datasize = sizeof(cert_hdr) + GetCertPubkSectionSize(GetCertPubkType(cert));
|
|
|
|
return RsaSignVerify(data,datasize,signature,pubk,NULL,u8_to_u32(cert,BE),CTR_RSA_VERIFY);
|
|
} |