1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
.TH rskeygen 1 "July 2009" "RabbitSign 2.0"
.SH NAME
rskeygen \- generate private key pairs for TI graphing calculators
.SH SYNOPSIS
\fBrskeygen\fR [ \fB--secure\fR ] [ \fB--ti\fR ]
[ \fB--length\fR \fInbytes\fR ]
.SH DESCRIPTION
\fBrskeygen\fR generates application and OS signing keys for the Texas
Instruments TI-73, TI-83 Plus, TI-84 Plus, TI-89, and TI-92 Plus
graphing calculators. These keys consist of two prime numbers \fIp\fR
and \fIq\fR as well as their product \fIn\fR. Current calculator
models impose a limit of 512 bits (64 bytes) on the size of \fIn\fR,
so \fIp\fR and \fIq\fR are generally about 256 bits each. As of this
writing this means factoring \fIn\fR is beyond the reach of most
people, though this will undoubtedly change in the future.
The keys generated by \fBrskeygen\fR are not very useful at the
moment, because in order for an application or OS to be accepted by
the calculator, the key used to sign it must itself be signed using
the calculator's own (possibly unique) private key, which is only
known to TI. Nevertheless, \fBrskeygen\fR is provided in the hope
that it can be useful, both for testing and for devising new signature
schemes based on TI's.
.SS OPTIONS
.TP
\fB--secure\fR
Attempt to generate a ``secure'' key using the system's entropy pool,
/dev/random (see \fBrandom\fR(4).) The actual security is thus
dependent on your system's implementation of /dev/random.
Without \fB--secure\fR, the keys are generated based on the current
time and process ID, which is not secure in the slightest.
.TP
\fB--ti\fR
Generate keys which are palatable to TI's official app signing
programs. This forces \fIp\fR to be congruent to 3 and \fIq\fR to 7
modulo 8. This option is not necessary when using
\fBrabbitsign\fR(1), nor is it necessary for the calculator to
validate signatures properly.
.TP
\fB--length\fR \fInbytes\fR
Specify the length in bytes of the modulus \fIn\fR; \fIp\fR and
\fIq\fR are each calculated to be approximately half this length.
This should not be greater than 64 for current calculators, and must
be less than 256 in any event due to a limitation of the key file
format.
.SH SEE ALSO
\fBrabbitsign\fR(1), \fBpackxxk\fR(1)
.SH AUTHOR
Benjamin Moody <floppusmaximus@users.sf.net>
|
