The KeyY is in 9.3+, but thanks for the info.About the keyY, https://github.com/mid-kid/CakesForeveryWan/blob/master/patches/emunand/info.json#L160 may help. I didn't bother tracing that function yet because I don't have a 8.1/9.0 decrypted arm9bin yet, and without that, I can't proceed anyway.