BCT (Boot Configuration Table) is a data structure present on Tegra based devices that supplies boot time configuration parameters.
The Switch 2 can use different types of BCTs with the BRBCT (BootROM BCT) being installed into the first bytes of UFS storage's LUN0 and LUN1.
Structure
BRBCT
| Offset
|
Size
|
Description
|
| 0x0
|
0x4
|
Magic ("BCTB")
|
| 0x4
|
0x40
|
BctSha512Hash (hash over data from 0x44 to 0x2000)
|
| 0x44
|
0x180
|
Signatures
|
| 0x1C4
|
0x40
|
SignedSectSha512Hash (hash over data from 0x1200 to 0x2000)
|
| 0x204
|
0xB10
|
Pcp
|
| 0xD14
|
0x400
|
CustomerInfo
|
| 0x1114
|
0xEC
|
|
| 0x1200
|
0xE00
|
SignedSect
|
SignedSect
| Offset
|
Size
|
Description
|
| 0x0
|
0x10
|
|
| 0x10
|
0x4
|
Magic ("BCTB")
|
| 0x14
|
0x38
|
|
| 0x48
|
0xC0 (0x10 * 12)
|
BlInfo
|
| 0x108
|
0x4
|
|
| 0x10C
|
0x400
|
CustomerInfo
|
| 0x50C
|
0x294
|
|
| 0x7A0
|
0x10
|
Ecid
|
| 0x7B0
|
0x28
|
|
| 0x7D8
|
0x4
|
NonGpioSelectBootChain
|
| 0x7DC
|
0x4
|
BootLoadersUsed
|
| 0x7E0
|
0x4
|
SecureDebugControlNoneEcid
|
| 0x7E4
|
0x4
|
SecureDebugControlEcid
|
| 0x7E8
|
0x4
|
PreprodDevSign
|
| 0x7EC
|
0x4
|
SecProvisioningKeynumSecure
|
| 0x7F0
|
0x4
|
BfBlBits
|
| 0x7F4
|
0x87
|
|
| 0x87B
|
0x20
|
SecProvisionDerivationString1
|
| 0x89B
|
0x20
|
SecProvisionDerivationString2
|
| 0x8BB
|
0x1
|
|
| 0x8BC
|
0x4
|
SoftSkuOverwrite
|
| 0x8C0
|
0x540
|
|
BlInfo
| Offset
|
Size
|
Description
|
| 0x0
|
0x4
|
StartBlock
|
| 0x4
|
0x4
|
StartPage
|
| 0x8
|
0x4
|
Version
|
| 0xC
|
0x4
|
Random
|