Homebrew Question Unban concept? certs question

[The Real Jdbye]

Hello,
I recently got banned from online services but i got a idea for an different Cert creator.
What happens when i use HxD (Hex Editor) and edit a few bytes in the Cert and use it again will i get online and when i need an registered cert cant i bruteforce a valid cert from other one?

The certs are basically random data, and to generate a valid cert you would need to bruteforce the root certificate used to validate all other certs which is just not going to happen.

 

[TR_mahmutpek]

Bro, forget online playing. Just use switch lan-play. Nothing to do. And its not worth to play Ninty servers. Maybe Super Mario Maker will be worth but there will be solutions for that.

 

[GothicIII]

Omg. This is never going to work. The random data of the cert is hashed and signed. Any manipulation of the data inside it causes the certificate to be invalid. The cert must be signed again to be valid. This is only possible with nintendos root certificate or if that cert gets bruteforced (because of huge design flaws or new mathematical methods).

 

[blahblah]

If someone wishes to know more about how something works or has an idea about something, why stop them from asking. I'm getting quite tired of people shutting others down just because they don't fully understand a concept and wish to know more.

Everyone here is a real life person and deserves to be treated as such

No. I expect people to have a basic understanding of how cryptography works and there is a way to obtain that understanding. It's not to make spammy thread #957571 proposing the latest weird old trick to totally solve bans!!!111

 

[SecureBoot]

No. I expect people to have a basic understanding of how cryptography works and there is a way to obtain that understanding. It's not to make spammy thread #957571 proposing the latest weird old trick to totally solve bans!!!111

Then you expect too much of people

He didn't even act like the situation you're describing. He asked "what would happen if.."

 

[PF2M]

Don't know much about the Switch, but from what I know from my days as a 3DS/Wii U network hacker the certs are, as many others have said, unbruteforcable. I'm pretty sure I remember calculating out how long it would take to try every combination of certificate until you got a working one, and it calculated out to some amount of years with more than 10 digits. So as some people are saying, it's best to just buy a new Switch or use lan-mitm, for now at least.
In the future though, there could be slightly better solutions. You'd probably still have to buy a new Switch, but perhaps we could later figure out how to use the certificate from one Switch on another one. Then if Wall Street Journal's rumors about a Switch Mini are true, maybe you could get one of those for cheap, hack it and then use that cert on a better Switch? That's my theory, at least. I tried doing something like that on 3DS and wasn't able to get there with file modification because the certs were encrypted and I couldn't find a way around that, but I was able to make a custom Nintendo Network module that connected to my server instead of Nintendo's and proxied over the requests using an unbanned cert. I never finished it, but it goes to show that this is possible if you try hard enough.
I haven't looked much into the Switch's side of networking, but for the most part it seems to be a slightly more secure version of Nintendo Network's ideas. It wouldn't be too unplausible to try and get this sort of thing to work later on... and at the very least, if we can't get that working a Wiimmfi sort of thing should at least be possible eventually. Probably. Maybe.
I think.

 

[henryford]

he said rsa, not sha. using an symmetric key for a cert wouldn't make any sense, and aes is symmetric, while rsa is asymmetric. For bruteforcing, RSA2048 is much, much harder to brute force than AES256, simply due to the key length (256 vs 2048 bits).

No, he didn't:

"Its worse than brute forcing sha256"

Also, "key length" isn't the only factor. AES256 has much, much more security than rsa and is a lot more difficult to break through. Bruteforcing RSA doesn't make any sense - in a scenario you wouldn't try to bruteforce your way through RSA because that does not make sense, whatsoever. You're solving a math problem, you need to factor primes. Which you can do a lot faster than bruteforcing against AES.

You're right about the asymmetric/symmetric part though, I'll concede that point.

 

[Deleted User]

The certs are basically random data, and to generate a valid cert you would need to bruteforce the root certificate used to validate all other certs which is just not going to happen.

finally a good answer

 

[Deleted User]

Bro, forget online playing. Just use switch lan-play. Nothing to do. And its not worth to play Ninty servers. Maybe Super Mario Maker will be worth but there will be solutions for that.

want play Duck Game that gets released in May and when nobody plays MK8D with lan-play then nobody in the complete world will play Duck Game with that

 

[AveSatanas]

No, he didn't:

"Its worse than brute forcing sha256"

Also, "key length" isn't the only factor. AES256 has much, much more security than rsa and is a lot more difficult to break through. Bruteforcing RSA doesn't make any sense - in a scenario you wouldn't try to bruteforce your way through RSA because that does not make sense, whatsoever. You're solving a math problem, you need to factor primes. Which you can do a lot faster than bruteforcing against AES.

You're right about the asymmetric/symmetric part though, I'll concede that point.

That's mostly correct, but do you expect someone who doesn't understand crypto (like OP) to know that and act sensibly?

 

[henryford]

Right again - I really don't think that