< Hardware
| OTP | |
| Latte Registers | |
| Access | |
|---|---|
| Espresso | None |
| Starbuck | Full |
| Registers | |
| Base | 0x0d8001ec |
| Length | 0x8 |
| Access size | 32 bits |
| Byte order | Big Endian |
General
The One Time P Astm e8 tensile specimen dimensions. rogrammable memory is programmed sometime during the factory process and can never be changed afterwards. The Wii U's OTP is much larger than the Wii's (1KB split across 8 banks of 128 bytes each) and contains an assortment of read-only data, including the console's encryption/decryption keys.
Brutal doom compatible wads. WII U Title Keys will provide you USB helper and for cemu. You can also use 3DS subdomain with these keys. All keys are tested and 100% working. See full list on wiiubrew.org. Planning on building a pc. Im also assuming if cemu works, dolphin, citra and other stuff will work too. If you have any other suggestions for a gpu and cpu that is around same price but would be better let me know.
Register List
Lets you convert Wii (ISO / WBFS) & GC (ISO / GCM) games into VC eshop format so they can be installed via WUP Installer GX2. If you wish to make your own download the Teconmoon WiiVC Injector. You Will need the Wii U common Key and the Rhythm Heaven Fever (USA) Title Key.
Cached
| OTP | |||
|---|---|---|---|
| Address | Bits | Name | Description |
| 0x0d8001ec | 32 | HW_OTPCMD | OTP command |
| 0x0d8001f0 | 32 | HW_OTPDATA | OTP data |
General Registers
| HW_OTPCMD (0x0d8001ec) | |||||||||||||||
| 31 | 30 | 29 | 28 | 27 | 26 | 25 | 24 | 23 | 22 | 21 | 20 | 19 | 18 | 17 | 16 |
| Access | R/W | U | |||||||||||||
| Field | RD | ||||||||||||||
| 15 | 14 | 13 | 12 | 11 | 10 | 9 | 8 | 7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 |
| Access | U | R/W | |||||||||||||
| Field | ADDR |
| Field | Description |
| RD | Set to one to execute a read command. If clear, then the data in HW_OTPDATA is unchanged. |
| ADDR | Word address to read. 0x00 to 0x1F (32 4byte words) ORed with the bank's number (0x000 to 0x700). |
This register contains the command sent to the OTP. It is unknown whether is register is also used during the factory process to program the OTP.
| HW_OTPDATA (0x0d8001f0) | |
| 310 | |
| Access | R |
This register contains the output data for the last issued OTP read command. The execution of a read operation via the HW_OTPCMD register immediately changes this register without any delay.
IOSU
The Wii U's IOSU interacts with the OTP by setting it's respective Latte registers. In addition to this, the IOS-CRYPTO process is also able to access the OTP indirectly through syscall 0x22, which takes the OTP word index, a buffer to store the result and the requested size as parameters. The IOS-KERNEL then converts the word index:
OTP Contents
The following things are stored inside the OTP and requested by the IOSU kernel at some point:
Wii Common Key File
| Bank | Offset (word index * 4) | Size | Description |
|---|---|---|---|
| 0 (Wii bank) | 0x000 (0x00 * 4) | 0x14 bytes | Wii boot1 SHA-1 hash |
| 0 (Wii bank) | 0x014 (0x05 * 4) | 0x10 bytes | Wii common key |
| 0 (Wii bank) | 0x024 (0x09 * 4) | 0x04 bytes | Wii NG ID |
| 0 (Wii bank) | 0x028 (0x0A * 4) | 0x1C bytes | Wii NG private key |
| 0 (Wii bank) | 0x044 (0x11 * 4) | 0x14 bytes | Wii NAND HMAC (overlaps with NG private key) |
| 0 (Wii bank) | 0x058 (0x16 * 4) | 0x10 bytes | Wii NAND key |
| 0 (Wii bank) | 0x068 (0x1A * 4) | 0x10 bytes | Wii RNG key |
| 0 (Wii bank) | 0x078 (0x1E * 4) | 0x08 bytes | Unknown (padding) |
| 1 (Wii U bank) | 0x080 (0x20 * 4) | 0x04 bytes | Security level flag |
| 1 (Wii U bank) | 0x084 (0x21 * 4) | 0x04 bytes | IOStrength configuration flags |
| 1 (Wii U bank) | 0x088 (0x22 * 4) | 0x04 bytes | Pulse length for SEEPROM manual CLK |
| 1 (Wii U bank) | 0x08C (0x23 * 4) | 0x04 bytes | Seems to be a signature type (0x00010000) |
| 1 (Wii U bank) | 0x090 (0x24 * 4) | 0x10 bytes | Wii U Starbuck ancast key |
| 1 (Wii U bank) | 0x0A0 (0x28 * 4) | 0x10 bytes | Wii U SEEPROM key |
| 1 (Wii U bank) | 0x0B0 (0x2C * 4) | 0x10 bytes | Unknown (unused) |
| 1 (Wii U bank) | 0x0C0 (0x30 * 4) | 0x10 bytes | Unknown (unused) |
| 1 (Wii U bank) | 0x0D0 (0x34 * 4) | 0x10 bytes | vWii common key |
| 1 (Wii U bank) | 0x0E0 (0x38 * 4) | 0x10 bytes | Wii U common key |
| 1 (Wii U bank) | 0x0F0 (0x3C * 4) | 0x10 bytes | Unknown (unused) |
| 2 (Wii U bank) | 0x100 (0x40 * 4) | 0x10 bytes | Unknown (unused) |
| 2 (Wii U bank) | 0x110 (0x44 * 4) | 0x10 bytes | Unknown (unused) |
| 2 (Wii U bank) | 0x120 (0x48 * 4) | 0x10 bytes | Key to encrypt/decrypt SSL RSA key |
| 2 (Wii U bank) | 0x130 (0x4C * 4) | 0x10 bytes | Key to encrypt/decrypt seeds for USB storage keys |
| 2 (Wii U bank) | 0x140 (0x50 * 4) | 0x10 bytes | Unknown |
| 2 (Wii U bank) | 0x150 (0x54 * 4) | 0x10 bytes | Wii U XOR key |
| 2 (Wii U bank) | 0x160 (0x58 * 4) | 0x10 bytes | Wii U RNG key |
| 2 (Wii U bank) | 0x170 (0x5C * 4) | 0x10 bytes | Wii U SLC (NAND) key |
| 3 (Wii U bank) | 0x180 (0x60 * 4) | 0x10 bytes | Wii U MLC (eMMC) key |
| 3 (Wii U bank) | 0x190 (0x64 * 4) | 0x10 bytes | Key to encrypt/decrypt SHDD key |
| 3 (Wii U bank) | 0x1A0 (0x68 * 4) | 0x10 bytes | Key to encrypt/decrypt DRH WLAN data |
| 3 (Wii U bank) | 0x1B0 (0x6C * 4) | 0x30 bytes | Unknown (unused) |
| 3 (Wii U bank) | 0x1E0 (0x78 * 4) | 0x14 bytes | Wii U SLC (NAND) HMAC |
| 3 (Wii U bank) | 0x1F4 (0x7D * 4) | 0x0C bytes | Unknown (padding) |
| 4 (Wii U NG bank) | 0x200 (0x80 * 4) | 0x10 bytes | Unknown (unused) |
| 4 (Wii U NG bank) | 0x210 (0x84 * 4) | 0x0C bytes | Unknown (unused) |
| 4 (Wii U NG bank) | 0x21C (0x87 * 4) | 0x04 bytes | Wii U NG ID |
| 4 (Wii U NG bank) | 0x220 (0x88 * 4) | 0x20 bytes | Wii U NG private key |
| 4 (Wii U NG bank) | 0x240 (0x90 * 4) | 0x20 bytes | Wii U private key for NSS device certificate |
| 4 (Wii U NG bank) | 0x260 (0x98 * 4) | 0x10 bytes | Wii U OTP RNG seed |
| 4 (Wii U NG bank) | 0x270 (0x9C * 4) | 0x10 bytes | Unknown (unused) |
| 5 (Wii U certificate bank) | 0x280 (0xA0 * 4) | 0x04 bytes | Wii U root certificate MS ID |
| 5 (Wii U certificate bank) | 0x284 (0xA1 * 4) | 0x04 bytes | Wii U root certificate CA ID |
| 5 (Wii U certificate bank) | 0x288 (0xA2 * 4) | 0x04 bytes | Wii U root certificate NG key ID |
| 5 (Wii U certificate bank) | 0x28C (0xA3 * 4) | 0x3C bytes | Wii U root certificate NG signature |
| 5 (Wii U certificate bank) | 0x2C8 (0xB2 * 4) | 0x18 bytes | Unknown (unused) |
| 5 (Wii U certificate bank) | 0x2E0 (0xB8 * 4) | 0x20 bytes | Unknown (locked out by boot1, unused) |
| 6 (Wii certificate bank) | 0x300 (0xC0 * 4) | 0x04 bytes | Wii root certificate MS ID |
| 6 (Wii certificate bank) | 0x304 (0xC1 * 4) | 0x04 bytes | Wii root certificate CA ID |
| 6 (Wii certificate bank) | 0x308 (0xC2 * 4) | 0x04 bytes | Wii root certificate NG key ID |
| 6 (Wii certificate bank) | 0x30C (0xC3 * 4) | 0x3C bytes | Wii root certificate NG signature |
| 6 (Wii certificate bank) | 0x348 (0xD2 * 4) | 0x10 bytes | Wii Korean key |
| 6 (Wii certificate bank) | 0x358 (0xD6 * 4) | 0x08 bytes | Unknown (unused) |
| 6 (Wii certificate bank) | 0x360 (0xD8 * 4) | 0x20 bytes | Wii private key for NSS device certificate |
| 7 (Misc bank) | 0x380 (0xE0 * 4) | 0x20 bytes | Unknown (locked out by boot1, unused) |
| 7 (Misc bank) | 0x3A0 (0xE8 * 4) | 0x10 bytes | Wii U boot1 key (locked out by boot0) |
| 7 (Misc bank) | 0x3B0 (0xEC * 4) | 0x10 bytes | Unknown (locked out by boot0, unused) |
| 7 (Misc bank) | 0x3C0 (0xF0 * 4) | 0x20 bytes | Empty |
| 7 (Misc bank) | 0x3E0 (0xF8 * 4) | 0x04 bytes | Empty |
| 7 (Misc bank) | 0x3E4 (0xF9 * 4) | 0x04 bytes | OTP version and revision |
| 7 (Misc bank) | 0x3E8 (0xFA * 4) | 0x08 bytes | OTP date code |
| 7 (Misc bank) | 0x3F0 (0xFC * 4) | 0x08 bytes | OTP version name string |
| 7 (Misc bank) | 0x3F8 (0xFE * 4) | 0x04 bytes | Empty |
| 7 (Misc bank) | 0x3FC (0xFF * 4) | 0x04 bytes | JTAG status |
Retrieved from 'https://wiiubrew.org/w/index.php?title=Hardware/OTP&oldid=2790'
Jan 15th, 2017
Never
Not a member of Pastebin yet?Sign Up, it unlocks many cool features!
- D7B00402659BA2ABD2CB0DB27FA2B656 # Wii U Common Key
- 36262B5F49C69164E3BE2BB87C9922A7 # Wii U Common Key
- A851D78AB8F0A6FE1E93CFCEAF99A179 # Wii U Common Key
- C253B04725C95C344AC158E7C5C93A48 # Captain Toad Treasure Tracker
- 2BA6B0DB191A15CF9ECD150CCBF2A02F # Captain Toad Treasure Tracker
- 4F72A299B800C62489A43E8FFF227E19 # Captain Toad Treasure Tracker
- 0841BA8E8A302DC84E191BA7568F0308 # Super Mario 3D World
- 78A89F4DB548D4F8937E31DF99447462 # Super Mario 3D World
- 3CEC63F6C87D47AE13768D9542F9E979 # Super Mario 3D World
- E23AEA154F1428156D25BFCC40F63856 # Super Mario 3D World
- A851D78AB8F0A6FE1E93CFCEAF99A179 # Super Smash Bros. for Wii U
- 36262B5F49C69164E3BE2BB87C9922A7 # Super Smash Bros. for Wii U
- 7B5BB5CA225196786893FD72DDBF82AD # Super Smash Bros. for Wii U
- 838CB2A5EE10408E64C1C9E19D8C7532 # Super Smash Bros. for Wii U
- DF5E4210CEBAD673AFA47EFF24C89B64 # Xenoblade Chronicles X
- D7EFAA82894692E01823CD1267741A26 # Zelda Twilight Princess HD
- DCB529E0E834BC86CF84B4D575ADA08C # Zelda Wind Waker HD
- 3CD545E19BBCB54E41DB3169F7432EA1 # Zelda Wind Waker HD
- 86352AF010C87E10C4B39DBC42C874E9 # Zelda Wind Waker HD
- C0FE8AAEE5F6E7B5B1074A460906A28F # Zelda Wind Waker HD
- E03D93BFC0F413FABDA431A1903CC350 # Super Mario Maker
- 03650CD0E681B2117EB7044129C6B8B5 # Super Mario Maker
- F02F3DC363780D36CD04C528C415775B # Yoshi's Woolly World
- 1B041837D5CA9B1CFB3ADE8EEED8665D # Hyrule Warriors
- 3048E7AD2165405B08D8AAE736F5B7A1 # Hyrule Warriors
- 93B991687B03BE0B59CE7AAC6E9BCE57 # Splatoon
- 749B617035CBEFE57F55FD5DDBA11B75 # Mario Party 10
- 545DD3F0B9B219ECB79E65AE44227C11 # Mario Party 10
- 11CEE7F2EE6272974C530C4121A0191D # Donkey Kong Country Tropical Freeze
- C18BE238CA2E039961FA32E453A415CC # Donkey Kong Country Tropical Freeze
- B24DB5464BF5E4C01C99243F8F0767CF # Monster Hunter 3 Ultimate
- CA75CC4D78A0DC3747EA94BFA6763111 # Monster Hunter 3 Ultimate
- D20395E40428036C3978A46FB14DC3B2 # Mario Kart 8
- BD93EE20E2F0D3F368201ACD5FD08224 # Mario Kart 8
- F11016B040ED761439EEA475E7786D8C # New Super Mario Bros. U
- 79C7EC6E178C9C010EC6363380DBBCEF # New Super Mario Bros. U
