diff --git a/AES-Keys.md b/AES-Keys.md
new file mode 100644
index 0000000..e6164a2
--- /dev/null
+++ b/AES-Keys.md
@@ -0,0 +1,38 @@
+Users can provide some additional crypto keys to enable some advanced features in citra. These keys are not officially provided by citra due to legal considerations.
+
+The keys are supplied by filling the file `sysdata/aes_keys.txt` (located in the [[User Directory]]) in the following format:
+```
+generator=0123456789ABCDEF0123456789ABCDEF
+slot0x0DKeyX=0123456789ABCDEF0123456789ABCDEF
+slot0x0DKeyY=0123456789ABCDEF0123456789ABCDEF
+slot0x0DKeyN=0123456789ABCDEF0123456789ABCDEF
+slot0x18KeyX=0123456789ABCDEF0123456789ABCDEF
+slot0x1BKeyX=0123456789ABCDEF0123456789ABCDEF
+slot0x25KeyX=0123456789ABCDEF0123456789ABCDEF
+slot0x2CKeyX=0123456789ABCDEF0123456789ABCDEF
+slot0x2DKeyX=0123456789ABCDEF0123456789ABCDEF
+slot0x2DKeyY=0123456789ABCDEF0123456789ABCDEF
+slot0x2DKeyN=0123456789ABCDEF0123456789ABCDEF
+slot0x31KeyX=0123456789ABCDEF0123456789ABCDEF
+slot0x31KeyY=0123456789ABCDEF0123456789ABCDEF
+slot0x31KeyN=0123456789ABCDEF0123456789ABCDEF
+slot0x3DKeyX=0123456789ABCDEF0123456789ABCDEF
+common0=0123456789ABCDEF0123456789ABCDEF
+common1=0123456789ABCDEF0123456789ABCDEF
+```
+The strings `0123456789ABCDEF0123456789ABCDEF` in the example above are all placeholder and should be replaced by correct 32-digit hex values of keys. Not all lines in the example are required at the same time. Please read the explanation below about which key enables which feature
+
+## Loading encrypted games
+Required keys: `generator`, `slot0x25KeyX` and `slot0x2CKeyX`. If loading encrypted New 3DS games, `slot0x18KeyX` and `slot0x1BKeyX` are also required. 
+
+## Sharing Mii via QR code between citra and 3DS
+Required keys: single `slot0x2DKeyN`, OR `slot0x2DKeyX`, `slot0x2DKeyY` and `generator` together.
+
+## Generating accurate UDS data frame
+Required keys: single `slot0x31KeyN`, OR `slot0x31KeyX`, `slot0x31KeyY` and `generator` together.
+
+## Using client cert dumped from 3DS
+Required keys: single `slot0x0DKeyN`, OR `slot0x0DKeyX`, `slot0x0DKeyY` and `generator` together.
+
+## Installing encrypted CIA
+Required keys: `generator`, `slot0x3DKeyX` and `common0`. `common1`~`5`are probably also required for some unsual CIA.
\ No newline at end of file