It's a separate PROM inside the cpu, unlike the bootrom which is also there but a factory-stamped ROM!
Yes, at least if you can follow a guide without skipping any step.
Unless we end up getting some kind of a bootrom exploit, or some other "miracle" hack comes about, downgrading to 2.1 will remain the only realistic option to get the OTP, and @d0k3's tools have proven time and again to be safe. As long as you can follow directions, the entire process is about as safe as it can possibly be, especially now since Hourglass9 is out, which should remove a lot of human error from the NAND restoration parts.
- Joined
- Nov 6, 2005
- Messages
- 3,100
- Trophies
- 0
- Age
- 35
- Location
- Foggy California
- Website
- heranbago.com
- XP
- 1,187
- Country
i've done two installs of A9LH in recent days. it's safe but read the guide thoroughly, follow the guide exactly, take it slow, and if you're unsure of anything ask for help somewhere. don't assume anything.
Oh, don't worry, it's a technical detail that won't affect common users/developers and most likely not even bootrom researchers; but when you make consoles by the tens of thousands, a fixed rom + a small prom is cheaper and more reliable than a larger prom!
- Joined
- Oct 10, 2014
- Messages
- 707
- Trophies
- 0
- Age
- 23
- Location
- Swallowed up by the ocean!
- XP
- 388
- Country
Do you know if anyone has looked at applying Tempesthax to the 3DS? I know it already has to several different kinds of encryption software on both the iPhone and Android to extract ECDSA keys.
I don't fully understand what they're doing there, but it says this:
Wouldn't that mean we would need to know the encryption/decryption key used to protect OTP in order to have any hope of discovering it using the method? Also, the equipment needed is so specialised, whereas currently OTP can be captured using a relatively safe method.
- Joined
- Oct 10, 2014
- Messages
- 707
- Trophies
- 0
- Age
- 23
- Location
- Swallowed up by the ocean!
- XP
- 388
- Country
No, the whole point of what they did is to extract the keys. Known/chosen plaintext means that you know (or can control) what is being encrypted or decrypted. Also, the point of using something like that would be to get the Bootrom keys or other keys we don't have, not OTP. You know, like the ones that would be needed to install CIA files or system titles directly, which would allow downgrading to any firmware via hardmod. Or decrypting games without the need for a 3DS and decrypt9.
I see. But still, wouldn't those keys be per-console, and hence the same elaborate process would be needed to capture them each time?
Similar threads
- No one is chatting at the moment.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
@
RedColoredStars:
There is an actual trailer with footage too. lol. Going to watch it tonight. Grabbed it from... a place. -
-
@
SylverReZ:
@Psionic Roshambo, JonTron's back yet again until he disappears into the void for another 6 or so months.+1 -
-
-
-
-
-
-
