EDAT files: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
(please help cleaning and moving info)
 
m (Reverted edits by Zer0Tolerance (talk) to last revision by CelesteBlue)
Tag: Rollback
(48 intermediate revisions by 8 users not shown)
Line 1: Line 1:
{{Wikify}}
=Info on the talk page=
=Info on the talk page=
'''Info on the talk page'''
'''Info on the talk page''': please digest the info and move it here'''
'''The info on this page is an extract of conversations and forum posts, please digest the info and move it this page'''
 
'''The info on this page is an extract of conversations, forum posts and from the talk page.
 
===Decryption of EDATS===
 
Three ways to do it:
* act.dat,rif,idps combo
* rap
* free content (npdrm1 klic)
 
====Free Content====
 
Simply decrypted with appldr keys and free klic
 
====Using RAP====
 
Overview of steps:
 
* Obtain rifkey from rap ([http://pastie.org/private/pmnmsnqg6zbfnk9xactbw flatz's rap2rifkey])
* Decrypt EDAT using corresponding klic (minis,psxclassics,etc) and rifkey
 
====='''Structure (Encrypted Format)'''=====
{| class="wikitable" style="text-align: center;"
|-
| style="background-color:#EDAEDA; color:#FFFFFF;" |
| style="background-color:#123EDA; color:#FFFFFF;" |'''Offset''' 
| style="background-color:#123EDA; color:#FFFFFF;" |'''Name'''
| style="background-color:#123EDA; color:#FFFFFF;" |'''Size'''
| style="background-color:#123EDA; color:#FFFFFF;" |'''Type'''
| style="background-color:#123EDA; color:#FFFFFF;" |'''Note'''
|-
| rowspan="19" style="background-color:#123EDA; color:#FFFFFF;" |'''Header'''
|-
| 0x00  || magic      || 4      || uint32 ||"NPD" (4E 50 44 00)
|-
| 0x04  || version    || 4      || uint32 ||
*01
*02
*03
*04
|-
| 0x08  || [[License_Types|License Types]]      || 4      || uint32 || for PS2 edat, the FW requires it to be with activation (also a.k.a. Paid content paired with your individual data)
for [[PKG_files#Misc.2FNote|PS1 PKG]], the FW 4.00 introduced some changes for installing them with regard to the EDAT license type.
|-
| 0x0C  || [[App Types|Application Type]]  || 4 || uint32 ||
|-
| 0x10  || [[PARAM.SFO#CONTENT_ID|CONTENT ID]]    || 48 (0x30) || uint8 || Content ID
|-
| 0x40  || Digest        || 16 (0x10) || uint8 || QA digest (seems like to be a SHA-1 hash of the non-finalized file) : hash of the original data which is unknown until the whole file is read, can not be used as check. Can be used as watermark or zeroed on forged file.
|-
| 0x50  || NPD hash 1    || 16 (0x10) || uint8 || CID-FN hash (an AES CMAC hash of concatenation of Content ID and File Name using the third [[Keys#NPDRM_OMAC_Keys|NPDRM OMAC key]] as CMAC key)
|-
| 0x60  || NPD hash 2    || 16 (0x10) || uint8 || header hash (an AES CMAC hash of the 0x60 bytes from the beginning of the file using xored bytes of the developer's klicensee and the second [[Keys#NPDRM_OMAC_Keys|NPDRM OMAC key]] as CMAC key)
|-
| 0x70  || Activation time || 8  || unkn || Start of the validity period, filled with 00 if not used.
|-
| 0x78  || Activation time || 8  || unkn || End of the validity period,  filled with 00 if not used.
|-
| 0x80  || NPD type      || 1  || uint8 || (Separated from Metadata type for wiki format)
*00 Finalized EDAT
*01 Finalized SDAT
*80 Non Finalized EDAT
*81 Non Finalized SDAT
|-
| 0x81  || Metadata type      || 3 || uint8 || (Outdated Flags description from talk page)
*00
*01 Compressed?
*02 Plain text?
*03 Compressed plain text?
*05 Compressed?
*06 Plain text?
*07 Compressed plain text?
*0C ?
*0D Compressed data?
*3C data/misc?
|-
| 0x84  || Segment size      || 4 || uint8 || Default block is 16 KB (16384 bytes) = 0x4000, max is 0x8000.
|-
| 0x88  || Data size        || 8  || uint8 || decoded data size
|-
| 0x90  || meta data sections hash    || 16 (0x10)  ||  ||
|-
| 0xA0  || extended header hash  || 16 (0x10)  ||  || An AES CMAC hash of 160 bytes from the beginning of file). It uses the hash key as CMAC key and it depends on the file flags and keys.
|-
| 0xB0  || ECDSA Metadata signature    || 40 (0x28)  ||  || Can be zeroed on forged file. curve_type is vsh type 0x02, pub is vsh public key,
|-
| 0xD8  || ECDSA Header signature  || 40 (0x28)  ||  ||  Enabled (only?) for PS2 classic: all custom firmwares are patched to skip the ECDSA check. Can be zeroed on forged file. curve_type is vsh type 0x02, pub is vsh public key.
|-
| colspan=6 style="background-color:#010EDA; color:#FFFFFF;" |     
|-
| rowspan="21" style="background-color:#123EDA; color:#FFFFFF;" |'''Body'''
|-
| 0x100  || Encrypted file      || Variable  ||  || The file is encrypted using  an AES algorithm in CBC mode.
|-
| 0x**  || Padding    || Variable  ||  ||
|-
|}
 
====='''Footer Structure (Encrypted Format)'''=====
{| class="wikitable" style="text-align: center;"
|-
! style="background-color:#123EDA; color:#FFFFFF;" |Description || style="background-color:#123EDA; color:#FFFFFF;" |Size || style="background-color:#123EDA; color:#FFFFFF;" |Note
|-
| Name    || 5 || "EDATA" or "SDATA"
|-
| Space  || 1 || 0x20
|-
| Tool Version || 8 ||
*Version 1: "packager"
*Version 2: "2.4.0.L "
*Version 2: "2.4.0.W "
*Version 2: "2.7.0.L "
*Version 3: "3.1.0.W "
*Version 3: "3.3.0.L "
*Version 3: "3.3.0.W "
*Version 4: "4.0.0.L "
*Version 4: "4.0.0.W "
|-
| End of the file || 2 || 00 00
|}
----
Note: Applied for normal ps3 edats and minis.edat
 
 
 
 
{{File Formats}}
<noinclude>[[Category:Main]]</noinclude>

Revision as of 01:01, 21 August 2020

This article is marked for rewrite/restructuring in proper wiki format.
You can help PS3 Developer wiki by editing it.

Info on the talk page

Info on the talk page: please digest the info and move it here

The info on this page is an extract of conversations, forum posts and from the talk page.

Decryption of EDATS

Three ways to do it:

  • act.dat,rif,idps combo
  • rap
  • free content (npdrm1 klic)

Free Content

Simply decrypted with appldr keys and free klic

Using RAP

Overview of steps:

  • Obtain rifkey from rap (flatz's rap2rifkey)
  • Decrypt EDAT using corresponding klic (minis,psxclassics,etc) and rifkey
Structure (Encrypted Format)
Offset Name Size Type Note
Header
0x00 magic 4 uint32 "NPD" (4E 50 44 00)
0x04 version 4 uint32
  • 01
  • 02
  • 03
  • 04
0x08 License Types 4 uint32 for PS2 edat, the FW requires it to be with activation (also a.k.a. Paid content paired with your individual data)

for PS1 PKG, the FW 4.00 introduced some changes for installing them with regard to the EDAT license type.

0x0C Application Type 4 uint32
0x10 CONTENT ID 48 (0x30) uint8 Content ID
0x40 Digest 16 (0x10) uint8 QA digest (seems like to be a SHA-1 hash of the non-finalized file) : hash of the original data which is unknown until the whole file is read, can not be used as check. Can be used as watermark or zeroed on forged file.
0x50 NPD hash 1 16 (0x10) uint8 CID-FN hash (an AES CMAC hash of concatenation of Content ID and File Name using the third NPDRM OMAC key as CMAC key)
0x60 NPD hash 2 16 (0x10) uint8 header hash (an AES CMAC hash of the 0x60 bytes from the beginning of the file using xored bytes of the developer's klicensee and the second NPDRM OMAC key as CMAC key)
0x70 Activation time 8 unkn Start of the validity period, filled with 00 if not used.
0x78 Activation time 8 unkn End of the validity period, filled with 00 if not used.
0x80 NPD type 1 uint8 (Separated from Metadata type for wiki format)
  • 00 Finalized EDAT
  • 01 Finalized SDAT
  • 80 Non Finalized EDAT
  • 81 Non Finalized SDAT
0x81 Metadata type 3 uint8 (Outdated Flags description from talk page)
  • 00
  • 01 Compressed?
  • 02 Plain text?
  • 03 Compressed plain text?
  • 05 Compressed?
  • 06 Plain text?
  • 07 Compressed plain text?
  • 0C ?
  • 0D Compressed data?
  • 3C data/misc?
0x84 Segment size 4 uint8 Default block is 16 KB (16384 bytes) = 0x4000, max is 0x8000.
0x88 Data size 8 uint8 decoded data size
0x90 meta data sections hash 16 (0x10)
0xA0 extended header hash 16 (0x10) An AES CMAC hash of 160 bytes from the beginning of file). It uses the hash key as CMAC key and it depends on the file flags and keys.
0xB0 ECDSA Metadata signature 40 (0x28) Can be zeroed on forged file. curve_type is vsh type 0x02, pub is vsh public key,
0xD8 ECDSA Header signature 40 (0x28) Enabled (only?) for PS2 classic: all custom firmwares are patched to skip the ECDSA check. Can be zeroed on forged file. curve_type is vsh type 0x02, pub is vsh public key.
Body
0x100 Encrypted file Variable The file is encrypted using an AES algorithm in CBC mode.
0x** Padding Variable
Footer Structure (Encrypted Format)
Description Size Note
Name 5 "EDATA" or "SDATA"
Space 1 0x20
Tool Version 8
  • Version 1: "packager"
  • Version 2: "2.4.0.L "
  • Version 2: "2.4.0.W "
  • Version 2: "2.7.0.L "
  • Version 3: "3.1.0.W "
  • Version 3: "3.3.0.L "
  • Version 3: "3.3.0.W "
  • Version 4: "4.0.0.L "
  • Version 4: "4.0.0.W "
End of the file 2 00 00

Note: Applied for normal ps3 edats and minis.edat



SCE File Types
Certified File
NPDRM
NPDRM · App Types · ACT.DAT · RIF
PKG
EDAT
RCOXML
CXML
XMBML
XMB Config
DB Config
Databases
System Data
XMB Preload
Licences
 ·
Games/Apps
PS3
Emulators
Web
Unsorted
Retrieved from "http://www.psdevwiki.com/ps3/index.php?title=EDAT_files&oldid=57025"