Differences

This shows you the differences between two versions of the page.

--- scsidrminfo [2009/04/24 16:49] – created megadiscman
+++ scsidrminfo [2009/04/24 17:41] – megadiscman
@@ Line 3: / Line 3: @@
 ===== Commands =====
-Command A3: Write Crypto Stuff (Sony calls it "Send Key")
+==== Command A3: Write Crypto Stuff ====
+(Sony calls it "Send Key")
 <code>
 : BYTE  Command byte A3
-: BYTE  unused, send as Zero (might contain LUN)
+: BYTE  unused (might contain LUN)
 : DWORD Object Number
-: BYTE  unsused, send as Zero
+: BYTE  unused
 : BYTE  Magic Byte BD
 : WORD  Size of cryptographic data
 A: BYTE  key type
-B: BYTE  unused, send as Zero
+B: BYTE  unused
 </code>
-Command A4: Read Crypto Stuff (Sony calls it "Request Key")
+==== Command A4: Read Crypto Stuff ====
+(Sony calls it "Request Key")
 <code>
@@ Line 22: / Line 24: @@
 : BYTE  unused, send as Zero (might contain LUN)
 : DWORD Object Number
-: BYTE  unsused, send as Zero
+: BYTE  unsused
 : BYTE  Magic Byte BD
 : WORD  Size of cryptographic data
 A: BYTE  key type
-B: BYTE  unused, send as Zero
+B: BYTE  unused
+</code>
+===== Data formats =====
+==== Key type 30: Authentication Token 1 ====
+This data packet is sent from the Host to the HiMD device
+<code>
+: WORD  Length, must be 0012
+: WORD  unsused
+: BYTES 8 bytes "Leaf ID of Host"
+C: BYTES 8 bytes "Nonce from Host"
+</code>
+==== Key type 31: Authentication Token 2 ====
+This data packet is sent from the HiMD device to the Host, the expected length is 43C (i.e. header + 64 keys?)
+<code>
+: DWORD unknown, maybe length in first WORD
+: BYTES 16 bytes "Disc ID"
+: BYTES 8 bytes "MAC from Device"
+C: BYTES 8 bytes "Leaf ID of Device"
+: BYTES 8 bytes "Nonce from Device"
+C: BYTES The "local EKB of the Device" Starts with its length in 16 byte units - 1
+</code>
+==== Key type 32: Authentication Token 3 ====
+This data packet is sent from the Host to the HiMD device
+<code>
+: WORD  Length, must be 41A
+: WORD  unused
+: BYTES 8 bytes "MAC from Host"
+C: BYTES The "local EKB of the Host"
+</code>
+==== Key type 33: ICV from device ====
+This data packet is sent from the HiMD device to the Host (expected length 404)
+While this packet is never explained in the HiMD Transfer Tool for MAC, it looks suspiciously like the
+next one, just the other transfer direction.
+<code>
+: DWORD unknown, length?
+: BYTE  unknown, but used
+: BYTE  bit flags. Bits 6,7: encryption type (0=plain, 2=des ecb, 3=des cbc)
+                     Bit  5:   MAC flag
+                     Bit  4:   DIR flag
+: WORD  length of following data
+: DWORD unknown, but used
+C: BYTES data, length from field 6.
+</code>
+==== Key type 34: ICV data to device ====
+This data packet is sent from the Host to the HiMD device
+<code>
+: WORD  length (must be 404)
+: WORD  unused
+: BYTE  ICV slot number (must be between 0 and 31)
+: BYTE  bit flags, same bits used as in Type 33
+: WORD  length of ICV data
+: WORD  Revision
+A: WORD  unknown, but used
+C: BYTES ICV data
+XX: BYTES 8 Bytes MAC
 </code>