PfsCryptEngine.h

#pragma once

#include <cstdint>
#include <memory>

#include "FlagOperations.h"

#include "IF00DKeyEncryptor.h"
#include "ICryptoOperations.h"

typedef int SceUID;

typedef struct CryptEngineData
{
   unsigned const char* klicensee;
   std::uint32_t files_salt; // salt from files.db is used to derive keys
   std::uint32_t icv_salt; // unicv page or icv filename is used as salt to derive keys
   std::uint16_t mode_index;
   std::uint16_t crypto_engine_flag;
   std::uint16_t key_id; // used for WithKeygen DMAC5 / F00D functions. always 0.
   std::uint16_t fs_attr;
   std::uint32_t block_size; // file sector size specified in unicv.db

   unsigned char dec_key[0x10]; // decryption key. derived from klicensee or sealedkey
   unsigned char tweak_enc_key[0x10]; // tweak encryption key. used to encrypt tweak iv vectors
   unsigned char secret[0x14]; // secret key derived from klicensee or sealedkey. used for checking hashes or deriving other keys

}CryptEngineData;

#define CRYPT_ENGINE_WRITE 2
#define CRYPT_ENGINE_TRUNC 4
#define CRYPT_ENGINE_READ 3

typedef struct CryptEngineSubctx
{
   std::uint32_t opt_code; // if 3 then decrypt, if 4 then encrypt, if 2 then encrypt
   CryptEngineData* data;
   
   unsigned char* work_buffer_ofst;
   std::uint32_t nBlocksOffset; // offset in sectors
   std::uint32_t nBlocksTail;
   
   std::uint32_t nBlocks; // number of file sectors corresponding to unicv page with signatures
   
   std::uint32_t sector_base; // first file sector corresponding to unicv page with signatures. used to derive iv for xts-aes
   std::uint32_t dest_offset; // not sure
   
   std::uint32_t tail_size; // size of last sector corresponding to unicv page with signatures. should be equal to file sector size in case of full page.
   
   unsigned char* signature_table; // corresponding unicv page with hmac-sha1 signatures
   
   unsigned char* work_buffer0; // input buffer to decrypt - contains file sectors corresponding to unicv page with signatures
   unsigned char* work_buffer1; // input buffer to decrypt - contains file sectors corresponding to unicv page with signatures
   
}CryptEngineSubctx;

typedef struct CryptEngineWorkCtx
{
   CryptEngineSubctx* subctx;
   int error; // set to 0 or error code after executing crypto task   
   
}CryptEngineWorkCtx;

typedef struct derive_keys_ctx
{
   db_types db_type; //type of db
   std::uint32_t icv_version; // version of icv/unicv
   unsigned char dbseed[0x14];

}derive_keys_ctx;

void pfs_decrypt(std::shared_ptr<ICryptoOperations> cryptops, std::shared_ptr<IF00DKeyEncryptor> iF00D, CryptEngineWorkCtx *work_ctx);