FirmwareLayout

From NAS-Central Netgear Wiki
Jump to: navigation, search

ReadyNAS Firmware layout

The firmware is stored encrypted within the firmware flash. The hwdecrypt / hwcp tools required for decrypting the firmware can be accessed from tech support mode (serial port, or unknown telnet password required).

The firmware layout is block based with simple ASCII header.

The first block contains two parts.

1. Encrypted index of the parts contained in the firmware image, one line per part.

vmlinux.bin::1::3442688

initrd.img::6725::2617616

root.tgz::11838::54426


each line has the same structure:

name::start(block)::size(bytes)


2. Unencrypted identification & checksum of the firmware

info::name=RAIDiator,version=4.1.3-T150,time=1219942327,size=6048,md5sum=ed84ae3ae78f2b1ca0cc2b51483fda9d,descr=Beta

padded with an initial newline to allow grep to find the line.

The md5sum is calculated on the actual data only, excluding the index & info.

 dd if=RAIDiator-4.1.6 skip=1 | md5sum