Nintendo Switch Key List

From EurAsiaWiki

Jump to: navigation, search


Source: ub3r1337 @ http://www.maxconsole.com/threads/maxconsole-underground-skull-crossbones-nintendo-switch-package.46753/


; NINTENDO SWITCH KEY LIST
; ========================
; By ub3r1337 on 201804.06

; Obtainable with TrustZone code execution
; All the other keys are derived with this one
; Which gets updated with each major new firmware
;
; SHA256(master_key_00) = 0EE359BE3C864BB0782E1D70A718A0342C551EED28C369754F9C4F691BECF7CA
; SHA256(master_key_01) = 4FE707B7E4ABDAF727C894AAF13B1351BFE2AC90D875F73B2E20FA94B9CC661E
; SHA256(master_key_02) = 79277C0237A2252EC3DFAC1F7C359C2B3D121E9DB15BB9AB4C2B4408D2F3AE09
; SHA256(master_key_03) = 4F36C565D13325F65EE134073C6A578FFCB0008E02D69400836844EAB7432754
; SHA256(master_key_04) = -> (unknown still missing as of 201804.06 / for v5.0.x games) <-
;
master_key_00 = c2caaff089b9aed55694876055271c7d
master_key_01 = 54e1b8e999c2fd16cd07b66109acaaa6
master_key_02 = 4f6b10d33072af2f250562bff06b6da3
master_key_03 = 84e04ec20b9373818c540829cf147f3d

; Obtainable with Package1LDR code execution
; Allows decrypting (package1)
; Which contains the bootloader, warmboot.bin and TrustZone
;
; SHA256(package1_key_00) = 4543CD1B7CAD7EE0466A3DE2086A0EF923805DCEA6C741541CDDB14F54F97B40
; SHA256(package1_key_01) = 4A11DA019D26470C9B805F1721364830DC0096DD66EAC453B0D14455E5AF5CF8
; SHA256(package1_key_02) = CCA867360B3318246FBF0B8A86473176ED486DFE229772B941A02E84D50A3155
; SHA256(package1_key_03) = E65C383CDF526DFFAA77682868EBFA9535EE60D8075C961BBC1EDE5FBF7E3C5F
;
package1_key_00 = f4eca1685c1e4df77f19db7b44a985ca
package1_key_01 = c2caaff089b9aed55694876055271c7d
package1_key_02 = (missing)
package1_key_03 = c32009c8cb268ed053052c9237dfd8bc

; Found in TrustZone .rodata
; Derivable from the master_key_## and package2_key_source
; Allows decrypting (package2)
; Which contains the kernel and builtins
;
; SHA256(package2_key_source) = 21E2DF100FC9E094DB51B47B9B1D6E94ED379DB8B547955BEF8FE08D8DD35603
; SHA256(package2_key_00) = 94D6F38B9D0456644E21DFF4707D092B70179B82D1AA2F5B6A76B8F9ED948264
; SHA256(package2_key_01) = 7794F24FA879D378FEFDC8776B949B88AD89386410BE9025D463C619F1530509
; SHA256(package2_key_02) = 5304BDDE6AC8E462961B5DB6E328B1816D245D36D6574BB78938B74D4418AF35
; SHA256(package2_key_03) = BE1E52C4345A979DDD4924375B91C902052C2E1CF8FBF2FAA42E8F26D5125B60
;
package2_key_source = fb8b6a9c7900c849efd24d854d30a0c7
package2_key_00 = a35a19cb14404b2f4460d343d178638d
package2_key_01 = a0dd1eacd438610c85a191f02c1db8a8
package2_key_02 = 7e5ba2aafd57d47a85fd4a57f2076679
package2_key_03 = bf03e9889fa18f0d7a55e8e9f684323d

; Found in TrustZone .rodata
; Derivable from master_key_## and titlekek_source
; Title Key Encryption Key
;
; SHA256(titlekek_source) = C48B619827986C7F4E3081D59DB2B460C84312650E9A8E6B458E53E8CBCA4E87
; SHA256(titlekek_00) = C2FA30CAC6AE1680466CB54750C24550E8652B3B6F38C30B49DADF067B5935E9
; SHA256(titlekek_01) = 0D6B8F3746AD910D36438A859C11E8BE4310112425D63751D09B5043B87DE598
; SHA256(titlekek_02) = D09E18D3DB6BC7393536896F728528736FBEFCDD15C09D9D612FDE5C7BDCD821
; SHA256(titlekek_03) = 47C6F9F7E99BB1F56DCDC93CDBD340EA82DCCD74DD8F3535ADA20ECF79D438ED
;
titlekek_source = 1edc7b3b60e6b4d878b81715985e629b
titlekek_00 = 62a24d6e6d0d0e0abf3554d259be3dc9
titlekek_01 = 8821f642176969b1a18021d2665c0111
titlekek_02 = 5d15b9b95a5739a0ac9b20f600283962
titlekek_03 = 1b3f63bcb67d4b06da5badc7d89acce1

; Found in TrustZone .rodata
; Seed for GenerateAesKek, usecase + generation 0
;
; SHA256(aes_kek_generation_source) = FC02B9D37B42D7A1452E71444F1F700311D1132E301A83B16062E72A78175085
;
aes_kek_generation_source = 4d870986c45d20722fba1053da92e8a9

; Found in SPL .rodata
; Seed for GenerateAesKey
;
; SHA256(aes_key_generation_source) = FBD10056999EDC7ACDB96098E47E2C3606230270D23281E671F0F389FC5BC585
;
aes_key_generation_source = 89615ee05c31b6805fe58f3da24f7aa8

; Found in FS .rodata
; Derivable from master_key_##, aes generation sources, and key_area_key_application_source
; Seed for Key Area Encryption Key 0
;
; SHA256(key_area_key_application_source) = 04AD66143C726B2A139FB6B21128B46F56C553B2B3887110304298D8D0092D9E
; SHA256(key_area_key_application_00) = 592957F44FE5DB5EC6B095F568910E31A226D3B7FE42D64CFB9CE4051E90AEB6
; SHA256(key_area_key_application_01) = C2252A0FBF9D339ABC3D681351D00452F926E7CA0C6CA85F659078DE3FA647F3
; SHA256(key_area_key_application_02) = 7C7722824B2F7C4938C40F3EA93E16CB69D3285EB133490EF8ECCD2C4B52DF41
; SHA256(key_area_key_application_03) = AFBB8EBFB2094F1CF71E330826AE06D64414FCA128C464618DF30EED92E62BE6
;
key_area_key_application_source = 7f59971e629f36a13098066f2144c30d
key_area_key_application_00 = ef979e289a132c23d39c4ec5a0bba969
key_area_key_application_01 = cdedbab97b69729073dfb2440bff2c13
key_area_key_application_02 = 75716ed3b524a01dfe21456ce26c7270
key_area_key_application_03 = f428306544cf5707c25eaa8bc0583fd1

; Found in FS .rodata
; Derivable from master_key_##, aes generation sources, and key_area_key_ocean_source
; Seed for Key Area Encryption Key 1
;
; SHA256(key_area_key_ocean_source) = FD434000C8FF2B26F8E9A9D2D2C12F6BE5773CBB9DC86300E1BD99F8EA33A417
; SHA256(key_area_key_ocean_00) = AA2C65F0E27F730807A13F2ED5B99BE5183165B87C50B6ED48F5CAC2840687EB
; SHA256(key_area_key_ocean_01) = 860185F2313A14F7006A029CB21A52750E7718C1E94FFB98C0AE2207D1A60165
; SHA256(key_area_key_ocean_02) = 7283FB1EFBD42438DADF363FDB776ED355C98737A2AAE75D0E9283CE1C12A2E4
; SHA256(key_area_key_ocean_03) = 9881C2D3AB70B14C8AA12016FC73ADAD93C6AD9FB59A9ECAD312B6F89E2413EC
;
key_area_key_ocean_source = 327d36085ad1758dab4e6fbaa555d882
key_area_key_ocean_00 = b33813e4c9c4399c75fabc673ab4947b
key_area_key_ocean_01 = c54166efa8c9c0f6511fa8b580191677
key_area_key_ocean_02 = 3061ce73461e0b0409d6a33da85843c8
key_area_key_ocean_03 = 06f170025a64921c849df168e74d37f2

; Found in FS .rodata
; Derivable from master_key_##, aes generation sources, and key_area_key_system_source
; Seed for Key Area Encryption Key 2
;
; SHA256(key_area_key_system_source) = 1F17B1FD51AD1C2379B58F152CA4912EC2106441E51722F38700D5937A1162F7
; SHA256(key_area_key_system_00) = 194CF6BD14554DA8D457E14CBFE04E55C8FB8CA52E0AFB3D7CB7084AE435B801
; SHA256(key_area_key_system_01) = CE1DB7BB6E5962384889DB7A396AFD614F82F69DC38A33D2DEAF47F3E4B964B7
; SHA256(key_area_key_system_02) = 42238DE5685DEF4FDE7BE42C0097CEB92447006386D6B5D5AAA2C9AFD2E28422
; SHA256(key_area_key_system_03) = 1F6847F268E9D9C5D1AD4D7E226A63B833BF02071446957A962EF065521879C1
;
key_area_key_system_source = 8745f1bba6be79647d048ba67b5fda4a
key_area_key_system_00 = 6dd02aa15b440d6231236b6677de86bc
key_area_key_system_01 = 4ab155e7f29a292037fd147592770b12
key_area_key_system_02 = b7a74adeaf89c2a198c327bdff322d7d
key_area_key_system_03 = d5aab1acd23a8aec284a316df859d377

; Found in FS .rodata
; Seed for Header Key Encryption Key
;
; SHA256(header_kek_source) = 1888CAED5551B3EDE01499E87CE0D86827F80820EFB275921055AA4E2ABDFFC2
;
header_kek_source = 1f12913a4acbf00d4cde3af6d523882a

; Found in FS .data
; Seed for NCA Header Key
;
; SHA256(header_key_source) = 8F783E46852DF6BE0BA4E19273C4ADBAEE16380043E1B8C418C4089A8BD64AA6
;
header_key_source = 5a3ed84fdec0d82631f7e25d197bf5d01c9b7bfaf628183d71f64d73f150b9d2

; Derivable from master_key_##, aes generation sources, and header sources
; NCA Header Key
;
; SHA256(header_key) = 8E03DE24818D96CE4F2A09B43AF979E679974F7570713A61EED8B314864A11D5
;
header_key = aeaab1ca08adf9bef12991f369e3c567d6881e4e4a6a47a51f6e4877062d542d

; Obtainable/Derivable from 0x120:0x130 in all plaintext XCI cartridge dumps
; XCI Header Key (sometimes referred to as Header IV)
; Once obtained, the key needs to be reversed for proper use
;
; Nights of Azure 2: Bride of the New Moon
; ----------------------------------------
xci_header_key = 01c58fe7002d135ab29a3f69339574b1

; New Untested Keys
; -----------------
;
; The Count Lucanor Update = 70DEDA522775E174DCAB7B15B18F3190
; Decrypted (content key) = 68CF11C4CD6F0FDB888B6FBCC6FE7772
;
; Yooka-Laylee = F28921A36270C34B5476A384A212FC18
; Decrypted (content key) = 6DC4DB8FE890821FA24E587510F958F8
Personal tools