Switch 2: PSC-BL

PSC-BL is the second stage bootloader that runs after the PSC-ROM. It is executed on the PSC.

The load address is 0x120000, and the entrypoint is 0x120400.

Encryption

The payload is encrypted and authenticated with AES-GCM with the SBK(s).

Signature

The Stage1 signature is RSA and the Stage2 signature is XMSS.

Versions

XMSS Signature Counter	Anti-Downgrade Ratchet
496	[19.0.0+] 3
1335	[20.0.0+] 4
1477	[21.0.0+] 5