PS4 crypto coprocessor exploit found, allows for dumping of console keys

ps4-slim-and-pro-image-block-01-en-23jul20 (1).png

Yet another PlayStation 4 exploit has been found. While it may not be one that lets you run CFW, this bug has its own intriguing uses. Scene hacker Flat_z managed to come up with a code that exploits the PS4's Crypto Coprocessor interface. This can lead to being able to bruteforce certain specific keys from the console, such as the AES/HMAC PFS, portability keys, and VTRM, which can then be dumped. This exploit can be used on any PS4 on firmwares below 7.55, as that's when Sony apparently patched the issue. While this doesn't have much use for the end-user right now, we'll be able to see what developers can do with them and if they can further the PlayStation 4 hacking scene.


:arrow: Source
 

Randqalan

The Wheel of Time Turns
Member
Joined
Jan 25, 2014
Messages
1,105
Trophies
1
Location
M00N Base quanto
XP
2,101
Country
United States
Nice to see this kind of development in the PS4 scene, even if it is only for 7.55 atm. It would be nice to see the PS4 scene start breaking more ground, given how slow things have been.
For once with 9.00 exploit not really. major web and fat and updates to bin files for almost everything from 5.05 great devs to update almost everything already.
 

Sphaa

Well-Known Member
Newcomer
Joined
Mar 4, 2007
Messages
77
Trophies
1
XP
671
Country
Norway
Will these keys make it possible to the swap out a broken Blu-ray drive with one from another concole?
 

Jayro

MediCat USB Dev
Developer
Joined
Jul 23, 2012
Messages
13,057
Trophies
4
Location
WA State
Website
ko-fi.com
XP
17,248
Country
United States
If you find a PS4 Slim/Pro with 9.00 it's well worth buying. If interested, better hurry it up before Sony releases yet another "stability" firmware.
I think my pro is on 8.xx firmware, haven't turned it on in months.
 
  • Like
Reactions: Sterophonick

Marc_LFD

Well-Known Member
Member
Joined
Nov 3, 2021
Messages
5,715
Trophies
1
Age
34
XP
9,244
Country
United States
I think my pro is on 8.xx firmware, haven't turned it on in months.
Don't let it automatically update, but since it wasn't turned on that long it should be safe.

Firsr thing I did to our PS4 Slim was disable internet so it wouldn't somehow update by itself.



Gonna follow this tutorial and hack it. I've got the USB prepared and games to install.

It's ridiculous Sony shipped PS4s only with 500GB to 1TB since games are a lot bigger these days. RDR2 is over 100GB+. Yikes.
 

cearp

瓜老外
Developer
Joined
May 26, 2008
Messages
8,737
Trophies
2
XP
8,577
Country
Tuvalu
Are any of the keys this dumps 'per console'? If so, probably best to dump them before I update to 9.0 right?
But this currently is just code, not a payload.
 

kid sampson

Well-Known Member
Member
Joined
Jul 20, 2006
Messages
329
Trophies
1
XP
886
Country
United States
I just want to be able to launch my already installed retail games without inserting a disc or dumping and installing them again.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Psionic Roshambo @ Psionic Roshambo:
    Having every channel is fun lol
  • D @ diamondsofmayhem:
    Actually, finally found someone who was looking for the same thing. https://gbatemp.net/threads/lost-hyrule-warriors-legends-v1-6-0-ntr-plugin.628141/ to no avail.
  • D @ diamondsofmayhem:
    well, sorry for bugging yall with this.
  • Xdqwerty @ Xdqwerty:
    good night
  • Sicklyboy @ Sicklyboy:
    sup nerds
    +1
  • BigOnYa @ BigOnYa:
    Sup dawg, watching old rap vids so feel like I gotta talk...Real
  • BigOnYa @ BigOnYa:
    Not really just funny. I'm definitely a nerd!
  • ShinyLuxio @ ShinyLuxio:
    Hi there, it's any way to recover original LFCS if I don't have a NAND backup?
  • ShinyLuxio @ ShinyLuxio:
    Bought second hand 3DS, it seems it was "unbanned" but that was before I bought it
  • K3Nv2 @ K3Nv2:
    I got these in today for $20 stink buds they aren't that bad https://a.co/d/fOMSn8g
    +1
  • ShinyLuxio @ ShinyLuxio:
    @BigOnYa thanks but my question isn't there
  • BigOnYa @ BigOnYa:
    You ask your questions there, create a new thread if its not already answered, then eventually a 3ds genius will respond.
  • ShinyLuxio @ ShinyLuxio:
    I will, thanks
    +1
  • BigOnYa @ BigOnYa:
    No prob and btw, welcome to gbatemp! :grog:
  • BigOnYa @ BigOnYa:
    @K3Nv2 I got some cheapies at wallys, that are pretty good, already have lost a few expensive ones (one falls out and gone, can't find) while cutting grass so bought some cheap ones, and of course never lose these cheap ones. (Cheap meaning only $35, compared to air buds which I only have 1 of 2 now)
  • BigOnYa @ BigOnYa:
    They need to add air tags to they airbuds..
  • The Real Jdbye @ The Real Jdbye:
    @BigOnYa the airtags are bigger than the airpods, they won't fit
    +1
  • BigOnYa @ BigOnYa:
    Be cool tech tho. Of course they want to lose them anyways. Buy and buy again.
  • K3Nv2 @ K3Nv2:
    Apple could make a find my AirPods thing pretty easily
    +1
  • BigOnYa @ BigOnYa:
    You would think, esp using bluetooth, not GPS, like a "your getting hot-er" meter on your phone.
  • BigOnYa @ BigOnYa:
    I think they should tie up diddy, and let all the victims come and abuse him, we'll make a holiday of it every year. (jk, maybe)
  • BigOnYa @ BigOnYa:
    Crazy, the rich get away with this shit, and I can't shit without the poop police checking my asshole every time I shit, or if i have my toilet seatbelt on.
    BigOnYa @ BigOnYa: Crazy, the rich get away with this shit, and I can't shit without the poop police checking my...