Oberon Secure Loader

From PS5 Developer wiki
Jump to navigation Jump to search

Header Info[edit | edit source]

Offset Size Description Notes
0x0 4 Magic E4 DB 7C 02
0x4 4 Header Size Little Endian (0x400)
0x8 4 Entry Point Little Endian (0xB0)
0xC 4 Payload Size Little Endian (e.g 0x631D0)
0x10 0x10 Padding Zeroes
0x20 0x20 SHA256 of the decrypted payload Verified from 0x400 to 0x635D0
0x40 0xB0 Padding Ascii Quoted Numbers And Zeroes
0xF0 1 Flag? 0x80
0xF1 0x2D Padding
0x11E 2 Security Revision? 00 07 (1.05-6.02) / 00 FF (6.50) / 03 FF (7.00-7-61) / 0F FF (8.00-8.60) / 3F FF (9.00-9.XX)
0x120 0x20 Revision Nonce (Likely) SHA256 of the IPL's revision, from this point onward, Oberon IPL is encrypted with two layers of CBC crypto
0x140 0xC0 Metadata?
0x200 0x200 RSA4096 Header Signature?
0x400 0x631D0 Ipl body

Table of Nonces[edit | edit source]

Version Hash Notes
F0 6F 20 B4 5B 4F CB 66 67 71 5F 4B 0E E4 90 7C C2 CB 41 47 0A 59 B2 26 E0 D4 F0 D0 1B 67 E8 80 50
E0 FD 50 C2 9C C4 AE 88 21 1B CA 0B C5 09 1C 1D BF D6 A4 DC 07 DB F8 C0 B2 A6 17 FD 1D BE E0 3A 3B
D0 1C B3 91 12 79 BA 5E 83 42 C9 C9 6B 2F C5 49 B3 DE BF D7 3D D6 B6 97 4E 07 84 DF 7B E8 BD 21 39
C0 B3 59 79 B6 23 19 7C 34 6E E6 B1 62 8E 18 98 96 8C 66 DC DF 1C 96 5F 4C 77 07 30 07 78 4C 4E 6A
B0 55 18 14 A6 79 F1 4D 09 31 8B EC 56 DD EA 43 44 55 27 9A C4 7D 0C 5C 7E 14 91 D6 EF B2 1F 2B 48