1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
|
// Copyright 2018 Citra Emulator Project
// Licensed under GPLv2 or any later version
// Refer to the license.txt file included.
#include <cryptopp/aes.h>
#include <cryptopp/modes.h>
#include "common/archives.h"
#include "common/logging/log.h"
#include "core/core.h"
#include "core/hle/ipc_helpers.h"
#include "core/hle/service/ps/ps_ps.h"
#include "core/hle/service/ssl/ssl_c.h"
#include "core/hw/aes/arithmetic128.h"
#include "core/hw/aes/key.h"
SERIALIZE_EXPORT_IMPL(Service::PS::PS_PS)
namespace Service::PS {
enum class AlgorithmType : u8 {
CBC_Encrypt,
CBC_Decrypt,
CTR_Encrypt,
CTR_Decrypt,
CCM_Encrypt,
CCM_Decrypt,
};
constexpr std::array<u8, 10> KeyTypes{{
HW::AES::SSLKey,
HW::AES::UDSDataKey,
HW::AES::APTWrap,
HW::AES::BOSSDataKey,
0x32, // unknown
HW::AES::DLPNFCDataKey,
HW::AES::CECDDataKey,
0, // invalid
HW::AES::FRDKey,
// Note: According to 3dbrew the KeyY is overridden by Process9 when using this key type.
HW::AES::DLPNFCDataKey,
}};
void PS_PS::EncryptDecryptAes(Kernel::HLERequestContext& ctx) {
IPC::RequestParser rp(ctx);
auto src_size = rp.Pop<u32>();
[[maybe_unused]] const auto dest_size = rp.Pop<u32>();
using CryptoPP::AES;
std::array<u8, AES::BLOCKSIZE> iv;
rp.PopRaw(iv);
AlgorithmType algorithm = rp.PopEnum<AlgorithmType>();
u8 key_type = rp.Pop<u8>();
auto source = rp.PopMappedBuffer();
auto destination = rp.PopMappedBuffer();
LOG_DEBUG(Service_PS, "called algorithm={} key_type={}", algorithm, key_type);
// TODO(zhaowenlan1779): Tests on a real 3DS shows that no error is returned in this case
// and encrypted data is actually returned, but the key used is unknown.
ASSERT_MSG(key_type != 7 && key_type < 10, "Key type is invalid");
if (key_type == 0x5) {
HW::AES::SelectDlpNfcKeyYIndex(HW::AES::DlpNfcKeyY::Dlp);
} else if (key_type == 0x9) {
HW::AES::SelectDlpNfcKeyYIndex(HW::AES::DlpNfcKeyY::Nfc);
}
if (!HW::AES::IsNormalKeyAvailable(KeyTypes[key_type])) {
LOG_ERROR(Service_PS,
"Key 0x{:2X} is not available, encryption/decryption will not be correct",
KeyTypes[key_type]);
}
HW::AES::AESKey key = HW::AES::GetNormalKey(KeyTypes[key_type]);
if (algorithm == AlgorithmType::CCM_Encrypt || algorithm == AlgorithmType::CCM_Decrypt) {
// AES-CCM is not supported with this function
IPC::RequestBuilder rb = rp.MakeBuilder(1, 4);
rb.Push(Result(ErrorDescription::InvalidSection, ErrorModule::PS,
ErrorSummary::WrongArgument, ErrorLevel::Status));
rb.PushMappedBuffer(source);
rb.PushMappedBuffer(destination);
return;
}
if (algorithm == AlgorithmType::CBC_Encrypt || algorithm == AlgorithmType::CBC_Decrypt) {
src_size &= 0xFFFFFFF0; // Clear the lowest 4 bits of the size (make it a multiple of 16)
ASSERT(src_size > 0); // Real 3DS calls svcBreak in this case
}
std::vector<u8> src_buffer(src_size);
source.Read(src_buffer.data(), 0, src_buffer.size());
std::vector<u8> dst_buffer(src_buffer.size());
switch (algorithm) {
case AlgorithmType::CTR_Encrypt: {
CryptoPP::CTR_Mode<AES>::Encryption aes;
aes.SetKeyWithIV(key.data(), AES::BLOCKSIZE, iv.data());
aes.ProcessData(dst_buffer.data(), src_buffer.data(), src_buffer.size());
break;
}
case AlgorithmType::CTR_Decrypt: {
CryptoPP::CTR_Mode<AES>::Decryption aes;
aes.SetKeyWithIV(key.data(), AES::BLOCKSIZE, iv.data());
aes.ProcessData(dst_buffer.data(), src_buffer.data(), src_buffer.size());
break;
}
case AlgorithmType::CBC_Encrypt: {
CryptoPP::CBC_Mode<AES>::Encryption aes;
aes.SetKeyWithIV(key.data(), AES::BLOCKSIZE, iv.data());
aes.ProcessData(dst_buffer.data(), src_buffer.data(), src_buffer.size());
break;
}
case AlgorithmType::CBC_Decrypt: {
CryptoPP::CBC_Mode<AES>::Decryption aes;
aes.SetKeyWithIV(key.data(), AES::BLOCKSIZE, iv.data());
aes.ProcessData(dst_buffer.data(), src_buffer.data(), src_buffer.size());
break;
}
default:
UNREACHABLE();
}
destination.Write(dst_buffer.data(), 0, dst_buffer.size());
// We will need to calculate the resulting IV/CTR ourselves as CrytoPP does not
// provide an easy way to get them
std::array<u8, AES::BLOCKSIZE> new_iv;
if (algorithm == AlgorithmType::CTR_Encrypt || algorithm == AlgorithmType::CTR_Decrypt) {
new_iv = HW::AES::Add128(iv, src_size / 16);
} else if (algorithm == AlgorithmType::CBC_Encrypt) {
// For AES-CBC, The new IV is the last block of ciphertext
std::copy_n(dst_buffer.end() - new_iv.size(), new_iv.size(), new_iv.begin());
} else {
std::copy_n(src_buffer.end() - new_iv.size(), new_iv.size(), new_iv.begin());
}
IPC::RequestBuilder rb = rp.MakeBuilder(5, 4);
rb.Push(ResultSuccess);
rb.PushRaw(new_iv);
rb.PushMappedBuffer(source);
rb.PushMappedBuffer(destination);
}
void PS_PS::GenerateRandomBytes(Kernel::HLERequestContext& ctx) {
IPC::RequestParser rp(ctx);
const u32 size = rp.Pop<u32>();
auto buffer = rp.PopMappedBuffer();
std::vector<u8> out_data(size);
SSL::GenerateRandomData(out_data);
buffer.Write(out_data.data(), 0, size);
IPC::RequestBuilder rb = rp.MakeBuilder(1, 2);
rb.Push(ResultSuccess);
rb.PushMappedBuffer(buffer);
}
PS_PS::PS_PS() : ServiceFramework("ps:ps", DefaultMaxSessions) {
static const FunctionInfo functions[] = {
// clang-format off
{0x0001, nullptr, "SignRsaSha256"},
{0x0002, nullptr, "VerifyRsaSha256"},
{0x0004, &PS_PS::EncryptDecryptAes, "EncryptDecryptAes"},
{0x0005, nullptr, "EncryptSignDecryptVerifyAesCcm"},
{0x0006, nullptr, "GetRomId"},
{0x0007, nullptr, "GetRomId2"},
{0x0008, nullptr, "GetRomMakerCode"},
{0x0009, nullptr, "GetCTRCardAutoStartupBit"},
{0x000A, nullptr, "GetLocalFriendCodeSeed"},
{0x000B, nullptr, "GetDeviceId"},
{0x000C, nullptr, "SeedRNG"},
{0x000D, &PS_PS::GenerateRandomBytes, "GenerateRandomBytes"},
{0x000E, nullptr, "InterfaceForPXI_0x04010084"},
{0x000F, nullptr, "InterfaceForPXI_0x04020082"},
{0x0010, nullptr, "InterfaceForPXI_0x04030044"},
{0x0011, nullptr, "InterfaceForPXI_0x04040044"},
// clang-format on
};
RegisterHandlers(functions);
};
void InstallInterfaces(Core::System& system) {
auto& service_manager = system.ServiceManager();
std::make_shared<PS_PS>()->InstallAsService(service_manager);
}
} // namespace Service::PS
|
