Hacking There's a software solution for decrypting games.

[Twili]

https://twitter.com/crediar/status/519593256946900993

But no release, because "Without any keys the program won't be able to do anything for you." That confuses me, because every NFO file for a scene release contains the title key for a game, which was obtained by using the common key, so doesn't that make the common key not needed? Is an additional key required? So many mysteries...

 

[Bladexdsl]

well for start that is not a scene release

 

[Twili]

well for start that is not a scene release

I'm talking about scene releases for Wii U game images. I have the title key for Hyrule Warriors, and am downloading the game as I type.

 

[Bladexdsl]

last time i heard every single one was a fake

 

[Twili]

last time i heard every single one was a fake

https://twitter.com/crediar/status/524207499214614528

If they're fake, crediar wouldn't be able to see the game's files, because he stated in another tweet that he can't rip games himself.

 

[NWPlayer123]

All the NFO key lets you do is decrypt the system data, any game data is encrypted with the common key, and there's no changing that requirement.

 

[Twili]

Plus, I already know that th

All the NFO key lets you do is decrypt the system data, any game data is encrypted with the common key, and there's no changing that requirement.

Then in theory the common key could be bruteforced, since the SHA1 hash for it is available and someone would have to produce 16 bytes that yield the same hash.

 

[NWPlayer123]

Then in theory the common key could be bruteforced, since the SHA1 hash for it is available and someone would have to produce 16 bytes that yield the same hash.

Correct, it just would take a very long time.

 

[the_randomizer]

How is this newsworthy if his Tweet isn't all that groundbreaking again?

 

[Hiccup]

Correct, it just would take a very long time.

I'm sure people are willing to wait. Unless it takes 5+ years or something.

 

[FPSRussi4]

I'm sure people are willing to wait. Unless it takes 5+ years or something.

And it has the potential to. Have you googled "time it takes to crack a hash"?

 

[pwsincd]

http://calc.opensecurityresearch.com/

 

[crwys]

I know this is never going to happen but wouldn't it be a reasonable amount of time if someone used the cloud to crack it.

 

[W hat]

I know this is never going to happen but wouldn't it be a reasonable amount of time if someone used the cloud to crack it.

No, not at all. That is only feasible for poorly-implemented hashes (see the Wii's signing bug) or hashes of a short key length (no modern hash is like this).

 

[Twili]

I guess the common key will have to be bruteforced or leaked, since no one is going to be kind enough to share it anywhere.

 

[WulfyStylez]

Anyone could create an app like this given the proper dumps (and keys, of course!) Also don't get your hopes up for bruteforcing, it would take an improbable amount of time to do.

 

[Twili]

I'm banking on the common key being leaked by someone before another year is up.

 

[ChrisRX]

I'm sure people are willing to wait. Unless it takes 5+ years or something.

Yes it definitely takes years to brute force an encryption key.

 

[Vappy]

It's been close to two years since fail0verflow first hacked the Wii U wide open, and so far the only public release is the webkit exploit. As long as no-one gives bubba anything, it'll probably stay safely private.

 

[Bladexdsl]

i wouldn't say they hacked the wiiu WIDE OPEN