mirror of
https://github.com/DarkStore-3DS/Project_CTR.git
synced 2026-07-03 00:39:14 +00:00
applestash
c7c2c3f73e
Moved away from ctrtool's polarssl api completely. Brought certs.c/h inline with code style, fixed bugs relating to tmd savedata field generation and not recording savedata size from rsf (ncsd.c)
113 lines
2.3 KiB
C
113 lines
2.3 KiB
C
#include "lib.h"
|
|
#include "certs.h"
|
|
|
|
// Cert Sizes
|
|
void GetCertSigSectionSizes(u32 *sign_size, u32 *sign_padlen, u8 *cert)
|
|
{
|
|
u32 sig = u8_to_u32(cert,BE);
|
|
switch(sig){
|
|
case RSA_4096_SHA1 :
|
|
*sign_size = 0x200;
|
|
*sign_padlen = 0x3C;
|
|
break;
|
|
case RSA_2048_SHA1 :
|
|
*sign_size = 0x100;
|
|
*sign_padlen = 0x3C;
|
|
break;
|
|
case ECC_SHA1 :
|
|
*sign_size = 0x3C;
|
|
*sign_padlen = 0x40;
|
|
break;
|
|
case RSA_4096_SHA256 :
|
|
*sign_size = 0x200;
|
|
*sign_padlen = 0x3C;
|
|
break;
|
|
case RSA_2048_SHA256 :
|
|
*sign_size = 0x100;
|
|
*sign_padlen = 0x3C;
|
|
break;
|
|
case ECC_SHA256 :
|
|
*sign_size = 0x3C;
|
|
*sign_padlen = 0x40;
|
|
break;
|
|
default :
|
|
*sign_size = 0;
|
|
*sign_padlen = 0;
|
|
break;
|
|
}
|
|
return;
|
|
}
|
|
|
|
u32 GetCertSize(u8 *cert)
|
|
{
|
|
u32 sign_size = 0;
|
|
u32 sign_padlen = 0;
|
|
GetCertSigSectionSizes(&sign_size,&sign_padlen,cert);
|
|
if(!sign_size || !sign_padlen)
|
|
return 0;
|
|
|
|
return sizeof(u32) + sign_size + sign_padlen + sizeof(cert_hdr) + GetCertPubkSectionSize(GetCertPubkType(cert));
|
|
}
|
|
|
|
|
|
cert_hdr* GetCertHdr(u8 *cert)
|
|
{
|
|
u32 sign_size = 0;
|
|
u32 sign_padlen = 0;
|
|
GetCertSigSectionSizes(&sign_size,&sign_padlen,cert);
|
|
if(!sign_size || !sign_padlen) return NULL;
|
|
|
|
return (cert_hdr*)(cert+4+sign_size+sign_padlen);
|
|
}
|
|
|
|
u32 GetCertPubkSectionSize(pubk_types type)
|
|
{
|
|
switch(type){
|
|
case RSA_4096_PUBK : return sizeof(rsa_4096_pubk_struct);
|
|
case RSA_2048_PUBK : return sizeof(rsa_2048_pubk_struct);
|
|
case ECC_PUBK : return sizeof(ecc_pubk_struct);
|
|
default : return 0;
|
|
}
|
|
}
|
|
|
|
// Issuer/Name Functions
|
|
u8 *GetCertIssuer(u8 *cert)
|
|
{
|
|
cert_hdr *hdr = GetCertHdr(cert);
|
|
return hdr->issuer;
|
|
}
|
|
u8 *GetCertName(u8 *cert)
|
|
{
|
|
cert_hdr *hdr = GetCertHdr(cert);
|
|
return hdr->name;
|
|
}
|
|
|
|
void GenCertChildIssuer(u8 *dest, u8 *cert)
|
|
{
|
|
snprintf((char*)dest,0x40,"%s-%s",GetCertIssuer(cert),GetCertName(cert));
|
|
}
|
|
|
|
// Pubk
|
|
pubk_types GetCertPubkType(u8 *cert)
|
|
{
|
|
cert_hdr *hdr = GetCertHdr(cert);
|
|
|
|
return (pubk_types)u8_to_u32(hdr->keyType,BE);
|
|
}
|
|
u8 *GetCertPubk(u8 *cert)
|
|
{
|
|
if(!GetCertHdr(cert))
|
|
return NULL;
|
|
return ((u8*)GetCertHdr(cert)) + sizeof(cert_hdr);
|
|
}
|
|
|
|
bool VerifyCert(u8 *cert, u8 *pubk)
|
|
{
|
|
if(!GetCertHdr(cert))
|
|
return false;
|
|
u8 *signature = (cert+sizeof(u32));
|
|
u8 *data = (u8*)GetCertHdr(cert);
|
|
u32 datasize = sizeof(cert_hdr) + GetCertPubkSectionSize(GetCertPubkType(cert));
|
|
|
|
return RsaSignVerify(data,datasize,signature,pubk,NULL,u8_to_u32(cert,BE),CTR_RSA_VERIFY);
|
|
} |