Differences

This shows you the differences between two versions of the page.

--- scsidrminfo [2009/04/24 16:49] – created megadiscman
+++ scsidrminfo [2010/07/06 15:10] – megadiscman
@@ Line 3: / Line 3: @@
 ===== Commands =====
-Command A3: Write Crypto Stuff (Sony calls it "Send Key")
+==== Command A3: Write Crypto Stuff ====
+(This is officially "Send Key", but only on CD/DVD devices...)
 <code>
 : BYTE  Command byte A3
-: BYTE  unused, send as Zero (might contain LUN)
+: BYTE  unused (might contain LUN)
 : DWORD Object Number
-: BYTE  unsused, send as Zero
+: BYTE  unused
-: BYTE  Magic Byte BD
+: BYTE  Key class - For Sony DRM: BD
 : WORD  Size of cryptographic data
 A: BYTE  key type
-B: BYTE  unused, send as Zero
+B: BYTE  unused
 </code>
-Command A4: Read Crypto Stuff (Sony calls it "Request Key")
+==== Command A4: Read Crypto Stuff ====
+(This is officially "Report Key", but only on CD/DVD devices...)
 <code>
@@ Line 22: / Line 24: @@
 : BYTE  unused, send as Zero (might contain LUN)
 : DWORD Object Number
-: BYTE  unsused, send as Zero
+: BYTE  unsused
-: BYTE  Magic Byte BD
+: BYTE  Key class - For Sony DRM: BD
 : WORD  Size of cryptographic data
 A: BYTE  key type
-B: BYTE  unused, send as Zero
+B: BYTE  unused
+</code>
+===== Data formats =====
+even key types imply data transfer to device (using A3 command), whereas odd key types imply data transfer from device (using A4 command)
+Generally, all unused fields are sent as zero.
+==== Key type 30: Authentication Token 1 ====
+This data packet is sent from the Host to the HiMD device
+<code>
+: WORD  Length, must be 0012
+: WORD  unsused
+: BYTES 8 bytes "Leaf ID of Host"
+C: BYTES 8 bytes "Nonce from Host"
+</code>
+==== Key type 31: Authentication Token 2 ====
+This data packet is sent from the HiMD device to the Host, the expected length is 43C (i.e. header + 64 keys?)
+<code>
+: DWORD unknown, maybe length in first WORD
+: BYTES 16 bytes "Disc ID"
+: BYTES 8 bytes "MAC from Device"
+C: BYTES 8 bytes "Leaf ID of Device"
+: BYTES 8 bytes "Nonce from Device"
+C: BYTES The "local EKB of the Device" Starts with its length in 16 byte units - 1
+</code>
+==== Key type 32: Authentication Token 3 ====
+This data packet is sent from the Host to the HiMD device
+<code>
+: WORD  Length, must be 41A
+: WORD  unused
+: BYTES 8 bytes "MAC from Host"
+C: BYTES The "local EKB of the Host"
+</code>
+==== Key type 33: ICV from device ====
+This data packet is sent from the HiMD device to the Host (expected length 404)
+While this packet is never explained in the HiMD Transfer Tool for MAC, it looks suspiciously like the
+next one, just the other transfer direction.
+<code>
+: DWORD unknown, length?
+: BYTE  unknown, must be zero
+: BYTE  bit flags. Bits 6,7: encryption type (0=plain, 2=des ecb, 3=des cbc)
+                     Bit  5:   MAC flag
+                     Bit  4:   DIR flag
+: WORD  length of following data
+: DWORD generation number
+C: BYTES data, length from field 6.
+..: BYTES MAC, only present if MAC bit is set. NOT included in length
+</code>
+==== Key type 34: ICV data to device ====
+This data packet is sent from the Host to the HiMD device
+<code>
+: WORD  length (must be 404)
+: WORD  unused
+: BYTE  ICV slot number (must be between 0 and 31)
+: BYTE  bit flags, same bits used as in Type 33
+: WORD  length of ICV data
+: WORD  Revision
+A: WORD  unknown, but used
+C: BYTES ICV data
+XX: BYTES 8 Bytes MAC
+</code>
+==== Key type 38: secure clock ====
+This data packet is sent to the device
+<code>
+: BYTE  unused
+: BYTE  constant 0
+: WORD  unused
+: BYTE  unused
+: BYTE  constant 20
+: BYTE  unused
+: BYTE  constant 8
+: DWORD unused
+C: BYTE  unused
+D: BYTE  Seconds
+E: BYTE  Minutes
+F: BYTE  Hour
+: BYTE  Day
+: BYTE  Month
+: BYTE  Year
+: BYTE  unused
+: BYTES MAC
+</code>
+==== Key type 39: Unique ID ====
+This data packet is sent from the HiMD device to the host (expected length 192 bytes)
+<code>
+: DWORD unknown, maybe length in first two bytes
+: WORD  "UidCode"
+: BYTE  Version
+: BYTE  Length
+: BYTES Uid Data
+</code>
+==== Key type 3B: Leaf ID ====
+This data packet is sent from the HiMD device to the host
+<code>
+: WORD  unknown, length?
+: BYTES 8 Bytes leaf ID
+</code>
+==== Key type 3D: Disc ID ====
+<code>
+: WORD  unknown, length?
+: BYTES 16 bytes disc ID
 </code>