Iso module: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
No edit summary
(37 intermediate revisions by 8 users not shown)
Line 1: Line 1:
[[Category:Software]]
= Explanation =
= Explaination =
Isolated modules are used for de-/encryption, rehashing etc.
Isolated modules are used for de-/encryption, rehashing etc.


Commonly found in [[Boot_Order#CoreOS_PKG_Filelisting|CoreOS]], [[#Flash_Device_Archives_.5B3.55_Retail.2FCEX.5D|dev_flash]], embedded sony selfs and service packages like [[Remarry Bluray Drive]].
Commonly found in [[CoreOS]], [[Talk:Files_on_the_PS3#dev_flash|dev_flash]], embedded sony selfs and service packages like [[Remarry Bluray Drive]].


They are SPU .self binaries which can be called whenever needed: e.g. decrypting and hashcheck [[Flash#EID0_-_Section_0|EID0]] for [[Target ID]] inside [[IDPS]] when called upon by lv1 (HyperVisor) to set up restrictions for Retail/CEX or Debug/DEX etc.
They are SPU .self binaries which can be called whenever needed: e.g. decrypting and hashcheck [[Flash#EID0_-_Section_0|EID0]] for [[Target ID]] inside [[IDPS]] when called upon by lv1 (HyperVisor) to set up restrictions for Retail/CEX or Debug/DEX etc.
''Note: This page lists all isolated modules, except bootldr, metldr and other loaders from [[CoreOS]], see also [[Boot Order]]''


== Known isolated modules ==
== Known isolated modules ==
{| class="wikitable"
{| class="wikitable"
|-
|-
! Module !! Remarks
! Module !! Usage !! Location !! Remarks
|-
| AacsModule.spu.isoself || [[Flash:Encrypted_Individual_Data_-_eEID#EID3|EID3]] and theoretically [[Flash#FF_Filled_with_OCRL0200_section|OCRL]] || /dev_flash/bdplayer ||
|-
| aim_spu_module.self  || [[Flash:Encrypted_Individual_Data_-_eEID#EID0|EID0]] (section 0x00 and 0x0A) || [[CoreOS]] ||
|-
| CprmModule.spu.isoself || [[Flash:Encrypted_Individual_Data_-_eEID#EID3|EID3]] || /dev_flash/bdplayer ||
|-
| CssModule.spu.isoself ||  || /dev_flash/bdplayer ||
|-
| fdm_spu_module || [[Flash:Encrypted_Individual_Data_-_eEID#EID2|EID2]], [[Remarry Bluray Drive]] || [http://www.ps3devwiki.com/files/firmware/MFW-CEX/JIG/2.43/ 2.43 JIG PUP] ||
|-
| manu_info_spu_module.self ||  || [[CoreOS]] (since FW 3.50) ||
|-
| mc_iso_spu_module.self || PS2 || [[CoreOS]] ||
|-
| me_iso_for_ps2emu.self || PS2 || [[CoreOS]] (since FW 3.70) ||
|-
| me_iso_spu_module.self || PS2 || [[CoreOS]] ||
|-
| SacModule.spu.isoself || [[Flash:Encrypted_Individual_Data_-_eEID#EID3|EID3]], SuperAudioCD || /dev_flash/vsh/module ||
|-
| sb_iso_spu_module.self || [[South Bridge]] || [[CoreOS]] ||
|-
| sc_iso.self || [[Syscon Hardware|syscon]] || [[CoreOS]] ||
|-
| sc_iso_factory.self || [[Syscon Hardware|syscon]] || [http://www.ps3devwiki.com/files/firmware/MFW-CEX/JIG/2.43/ 2.43 JIG PUP] ||
|-
| spu_handler.isoself || PSP Savegames || self inside /dev_flash/sys/internal/libchnnlsv.sprx ||
|-
| spu_handler.isoself || PSP || self inside /dev_flash/pspemu/release/emulator_drm.sprx mself (since FW 3.15) ||
|-
|-
| aim_spu_module || [[Flash#EID0_-_Section_0|EID0]] (section 0x00 and 0x0A)
| spu_mode_auth.self ||  || [http://www.ps3devwiki.com/files/firmware/MFW-CEX/JIG/2.43/ 2.43 JIG PUP] ||  
|-
|-
| fdm_spu_module || [[Flash#EID2_-_Section_2|EID2]], [[Remarry Bluray Drive]]
| spu_pkg_rvk_verifier.self || || [[CoreOS]] ||
|-
|-
| manu_info_spu_module.self ||  
| spu_token_processor.self || systemtokens, [[QA Flagging]] || [[CoreOS]] ||
|-
| spu_utoken_processor.self || usertokens || [[CoreOS]] (since FW 2.40) ||
|-
| ss_sc_init.self || [[Syscon Hardware|syscon]] || [http://www.ps3devwiki.com/files/firmware/MFW-CEX/JIG/2.43/ 2.43 JIG PUP] ||
|-
| sv_iso_for_ps2emu.self || [[Flash:Encrypted_Individual_Data_-_eEID#EID4|EID4]], PS2 || [[CoreOS]] (since FW 3.70) ||
|-
| sv_iso_spu_module.self || [[Flash:Encrypted_Individual_Data_-_eEID#EID0|EID0]], [[Flash:Encrypted_Individual_Data_-_eEID#EID4|EID4]], PS2, bluray || [[CoreOS]] ||
|-
|}
 
=== sc_iso.self ===
sc_iso.self is used by the system to handle communications to/from syscon. Once debug printing is enabled after you load it, you can see some of the internal workings including error codes for when you are trying to use the module on your own.
 
==== Communicating w/ sc_iso.self ====
 
Look in the hv bible for more detailed info, but the gist is this:
 
1) Send the mbmsg start packet {1, 1, [sc_iso_cmd], [sc_iso_cmd_size]}. This is in response to the 0x80 mbox int.
<br />2) On 0x81 mbox int, receive the packet (same location you sent it from), do stuff, then write back new packets and then spu_in_mbox_write(problem, seqno++)
 
{| class="wikitable"
|-
|-
| mc_iso_spu_module || PS2
! Error Value !! Meaning
|-
|-
| me_iso_for_ps2emu.self || PS2
| 0x80010283 || Bad hdr->seqno (in dma_get)
|-
|-
| me_iso_spu_module || PS2
| 0x80010284 || Bad hdr->mbmsg (in dma_get)
|-
|-
| sb_iso_spu_module || southbridge
| 0x80010285 || is_align_ok fail (in dma_get)
|-
|-
| sc_iso || syscon
| 0x81010101 || sc_iso command failed
|-
|-
| spu_pkg_rvk_verifier.self ||  
| 0x81010106 || Bad input command value
|-
|-
| spu_token_processor.self || systemtokens, [[QA Flagging]]
| 0x81010607 || Bad parameter for Get SRH (0x4)
|-
|-
| spu_utoken_processor.self || usertokens
| 0x81010801 || Init for VTRM (0x6) write mngblk failed
|-
|-
| sv_iso_for_ps2emu.self || PS2
| 0x81010807 || Bad parameters for Init for VTRM (0x6)
|-
|-
| sv_iso_spu_module || [[Flash#EID4_-_Section_4|EID4]], PS2, bluray
| 0x81010907 || Bad parameters for get_region_data (0x7)
|-
|-
| AacsModule.spu.isoself || theoretically [[Flash#EID3_-_Section_3|EID3]]
| 0x81010A07 || Bad parameters for set_region_data (0x8)
|-
|-
| CprmModule.spu.isoself || theoretically [[Flash#EID3_-_Section_3|EID3]]
| 0x81010B01 || Read mngblk failed for Init For Updater (0xE)
|-
|-
| CssModule.spu.isoself ||
| 0x81010B07 || Bad parameter for Init For Updater (0xE)
|-
|-
| SacModule.spu.isoself ||
| 0x81011E07 || Bad parameter for encrypt (0x1) / decrypt (0x2)
|-
|-
|}
|}


=== Stop Codes ===
== Iso module main arguments ==
 
 
{| class="wikitable"
{| class="wikitable"
|-
|-
! Stop Code !! Module !! Remark
! Register !! Value
|-
| r3 || uint64_t iso_module_arg0
|-
| r4 || uint64_t iso_module_arg1
|-
| r5 || uint64_t iso_module_arg2
|-
| r6 || uint64_t iso_module_arg3
|-
| r7 || uint128_t indiv_data0_part0
|-
| r8 || uint128_t indiv_data0_part1
|-
| r9 || uint128_t indiv_data0_part2
|-
| r10 || uint128_t indiv_data0_part3
|-
| r11 || uint128_t indiv_data1_part0
|-
| r12 || uint128_t indiv_data1_part1
|-
| r13 || uint128_t indiv_data1_part2
|-
| r14 || uint128_t indiv_data1_part3
|-
|-
| 0x30 || isoldr || Version mismatch (isoldr version differs from version returned by SPU channel 73).
| r15 || uint128_t indiv_data2_part0
|-
| r16 || uint128_t indiv_data2_part1
|-
| r17 || uint128_t indiv_data2_part2
|-
| r18 || uint128_t indiv_data2_part3
|-
| r19 || uint128_t indiv_data3_part0
|-
| r20 || uint128_t indiv_data3_part1 (EID0_KEY_first_part for sv_iso_module only)
|-
| r21 || uint128_t indiv_data3_part2 (EID0_KEY_second_part for sv_iso_module only)
|-
| r22 || uint128_t indiv_data3_part3 (EID0_IV for sv_iso_module only)
|-
| r23 || uint32_t entry_point
|-
| r24 || uint64_t forced_sdk_minver (passed from metldr)
|-
|-
|}
|}
{{Development}}<noinclude>[[Category:Main]]</noinclude>

Revision as of 15:27, 9 April 2018

Explanation

Isolated modules are used for de-/encryption, rehashing etc.

Commonly found in CoreOS, dev_flash, embedded sony selfs and service packages like Remarry Bluray Drive.

They are SPU .self binaries which can be called whenever needed: e.g. decrypting and hashcheck EID0 for Target ID inside IDPS when called upon by lv1 (HyperVisor) to set up restrictions for Retail/CEX or Debug/DEX etc.

Note: This page lists all isolated modules, except bootldr, metldr and other loaders from CoreOS, see also Boot Order

Known isolated modules

Module Usage Location Remarks
AacsModule.spu.isoself EID3 and theoretically OCRL /dev_flash/bdplayer
aim_spu_module.self EID0 (section 0x00 and 0x0A) CoreOS
CprmModule.spu.isoself EID3 /dev_flash/bdplayer
CssModule.spu.isoself /dev_flash/bdplayer
fdm_spu_module EID2, Remarry Bluray Drive 2.43 JIG PUP
manu_info_spu_module.self CoreOS (since FW 3.50)
mc_iso_spu_module.self PS2 CoreOS
me_iso_for_ps2emu.self PS2 CoreOS (since FW 3.70)
me_iso_spu_module.self PS2 CoreOS
SacModule.spu.isoself EID3, SuperAudioCD /dev_flash/vsh/module
sb_iso_spu_module.self South Bridge CoreOS
sc_iso.self syscon CoreOS
sc_iso_factory.self syscon 2.43 JIG PUP
spu_handler.isoself PSP Savegames self inside /dev_flash/sys/internal/libchnnlsv.sprx
spu_handler.isoself PSP self inside /dev_flash/pspemu/release/emulator_drm.sprx mself (since FW 3.15)
spu_mode_auth.self 2.43 JIG PUP
spu_pkg_rvk_verifier.self CoreOS
spu_token_processor.self systemtokens, QA Flagging CoreOS
spu_utoken_processor.self usertokens CoreOS (since FW 2.40)
ss_sc_init.self syscon 2.43 JIG PUP
sv_iso_for_ps2emu.self EID4, PS2 CoreOS (since FW 3.70)
sv_iso_spu_module.self EID0, EID4, PS2, bluray CoreOS

sc_iso.self

sc_iso.self is used by the system to handle communications to/from syscon. Once debug printing is enabled after you load it, you can see some of the internal workings including error codes for when you are trying to use the module on your own.

Communicating w/ sc_iso.self

Look in the hv bible for more detailed info, but the gist is this:

1) Send the mbmsg start packet {1, 1, [sc_iso_cmd], [sc_iso_cmd_size]}. This is in response to the 0x80 mbox int.
2) On 0x81 mbox int, receive the packet (same location you sent it from), do stuff, then write back new packets and then spu_in_mbox_write(problem, seqno++)

Error Value Meaning
0x80010283 Bad hdr->seqno (in dma_get)
0x80010284 Bad hdr->mbmsg (in dma_get)
0x80010285 is_align_ok fail (in dma_get)
0x81010101 sc_iso command failed
0x81010106 Bad input command value
0x81010607 Bad parameter for Get SRH (0x4)
0x81010801 Init for VTRM (0x6) write mngblk failed
0x81010807 Bad parameters for Init for VTRM (0x6)
0x81010907 Bad parameters for get_region_data (0x7)
0x81010A07 Bad parameters for set_region_data (0x8)
0x81010B01 Read mngblk failed for Init For Updater (0xE)
0x81010B07 Bad parameter for Init For Updater (0xE)
0x81011E07 Bad parameter for encrypt (0x1) / decrypt (0x2)

Iso module main arguments

Register Value
r3 uint64_t iso_module_arg0
r4 uint64_t iso_module_arg1
r5 uint64_t iso_module_arg2
r6 uint64_t iso_module_arg3
r7 uint128_t indiv_data0_part0
r8 uint128_t indiv_data0_part1
r9 uint128_t indiv_data0_part2
r10 uint128_t indiv_data0_part3
r11 uint128_t indiv_data1_part0
r12 uint128_t indiv_data1_part1
r13 uint128_t indiv_data1_part2
r14 uint128_t indiv_data1_part3
r15 uint128_t indiv_data2_part0
r16 uint128_t indiv_data2_part1
r17 uint128_t indiv_data2_part2
r18 uint128_t indiv_data2_part3
r19 uint128_t indiv_data3_part0
r20 uint128_t indiv_data3_part1 (EID0_KEY_first_part for sv_iso_module only)
r21 uint128_t indiv_data3_part2 (EID0_KEY_second_part for sv_iso_module only)
r22 uint128_t indiv_data3_part3 (EID0_IV for sv_iso_module only)
r23 uint32_t entry_point
r24 uint64_t forced_sdk_minver (passed from metldr)
SDK
VSH
IDs + labels
Reference
Others
Retrieved from "http://www.psdevwiki.com/ps3/index.php?title=Iso_module&oldid=48778"