Homebrew AES key scrambler

  • Thread starter Thread starter Suiginou
  • Start date Start date
  • Views Views 89,907
  • Replies Replies 455
  • Likes Likes 12
legal or not, gbatemp is not going to be bold and fight against any requests, they have nothing to gain.
that's perfectly understandable.
 
in which way ? i'm curious about how this is as illegal ?
So next time you'd better send something in private. Yup don't forget to remove the code/quote/spoiler.
Since law itself is man-made, there is always exploits such as inpractical things. You could find out another way.
Instructing a user on how to modify some data (i.e. 'enter this number and click this button') or telling them where to look to find copyrighted information ('x position in this irrational number') is still disseminating copyrighted information. Digital copyright law is as arbitrary as these numbers can be, but it doesn't mean they aren't protected in all of these cases.
People tried to do this with Wii keys in the past and promptly got all their tools DMCA'd.
Thanks for clarification. Mind me ask you some questions?
If someone give a tool that used to extract and compute the needed keys, and all materials are fetched legally from the ninty website or console itself. No keys or its variants inside the tool. Could this avoid the DCMA? Even there is purpose but it is not so pracitical to prove that the author does want to violate it.
And, there is way to locate the encrypted plaintext offset inside encrypted binaries, if it is encrypted with same xorpad and the corresponding plaintext is known and share the same offset. I don't know is there any other storage except the internal Flash (for bootrom), OTP, NAND, and SD in 3DS. The bootrom should contain the same key for OTP if OTP is encrypted as other media (NAND, SD) that might even mounted (RSA for verification and Xor for storage?), since NAND is encrypted by console-unique key.
Hope this might help you reveal something. Even there is no visible progress that i can hear from SALT these days.
EDIT: I've forget the Parental Locak remove tool is hosted on SALT website. sorry. But that's an accidental found before.
 
Last edited by Syphurith, , Reason: Orz.
  • Like
Reactions: cearp
Hey, I create a simple tool which generates some of the keys from the user input, could you please check its correctness?

It generates C.bin, slot0x25KeyX.bin, slot0x38to0x3bKeyX.bin and slot0x39NFCNormalKey.bin, but I could add all leaked keys.
A noobish question. Can I build a 32bit version with the source code inside the zipped folder?
 
I modified my key creator a bit, maybe I will add something like reading the bytes from a systemtitle available on nus.
I changed the question and added some byte moving. Also I changed the name and the description in the source.
@Kajiarashi Suzaku should be possible to build a 32-bit version.
 

Attachments

I modified my key creator a bit, maybe I will add something like reading the bytes from a systemtitle available on nus.
I changed the question and added some byte moving. Also I changed the name and the description in the source.
@Kajiarashi Suzaku should be possible to build a 32-bit version.
Thank you! I'll try to build it. :)
 
Last edited by Kajiarashi Suzaku,
I modified my key creator a bit, maybe I will add something like reading the bytes from a systemtitle available on nus.
I changed the question and added some byte moving. Also I changed the name and the description in the source.
@Kajiarashi Suzaku should be possible to build a 32-bit version.
Not making people type 1337 for shame.
 
  • Like
Reactions: RednaxelaNnamtra
is it possible to make it calculate the incognitae by checking which one is blank and doing the maths on the other 2?
not with the dll, yet.. i might consider that as an option, but not really the main point of it. I'd just use the python script for that for now.
 
So does this mean that we can now self-generate xorpads without a 3DS? Forgive me if I'm wrong, don't feel like reading through all of these pages, and the first post is complete 3DS hardware and firmware talk that I don't understand.
 
So does this mean that we can now self-generate xorpads without a 3DS? Forgive me if I'm wrong, don't feel like reading through all of these pages, and the first post is complete 3DS hardware and firmware talk that I don't understand.
Absolutely, assuming you have the needed key(s). I posted http://pastebin.com/K3pVsnkq a few pages back, it generates xorpads based on ncchinfo and input keyXs. Currently it can only verify 0x25 and 0x18 (as those are the only keys I have so far).
 
Absolutely, assuming you have the needed key(s). I posted http://pastebin.com/K3pVsnkq a few pages back, it generates xorpads based on ncchinfo and input keyXs. Currently it can only verify 0x25 and 0x18 (as those are the only keys I have so far).

Provided one supplies the appropriate keys, I'd take this to mean then that theoretically emulators could make use of this to load encrypted roms directly at some point down the line? EDIT: Of course, after this would be implemented into the emulator...
 
Absolutely, assuming you have the needed key(s). I posted http://pastebin.com/K3pVsnkq a few pages back, it generates xorpads based on ncchinfo and input keyXs. Currently it can only verify 0x25 and 0x18 (as those are the only keys I have so far).
Could you simplify it down somewhat? I'm not good with 3DS tech terminology. I understand the needed keys part, but I don't know what ncchinfo and keyXs are.

--------------------- MERGED ---------------------------

Provided one supplies the appropriate keys, I'd take this to mean then that theoretically emulators could make use of this to load encrypted roms directly at some point down the line? EDIT: Of course, after this would be implemented into the emulator...
That would be great, as it would mean that a bunch more games could be tested, due to the surprisingly low number of people who have xorpads. You'd think that xorpads would be the second thing to be created for any use of the rom, but no...
 
Could you simplify it down somewhat? I'm not good with 3DS tech terminology. I understand the needed keys part, but I don't know what ncchinfo and keyXs are.
A KeyX is used in conjunction with a KeyY to create the final Key. This Key can be used to decrypt software and data that it's made for. Ncchinfo is a file format developed a while back to make xorpad generation on the 3ds simpler. It's the same concept here, just on one's computer.

Provided one supplies the appropriate keys, I'd take this to mean then that theoretically emulators could make use of this to load encrypted roms directly at some point down the line? EDIT: Of course, after this would be implemented into the emulator...
Definitely.
 
  • Like
Reactions: Xenon Hacks
A KeyX is used in conjunction with a KeyY to create the final Key. This Key can be used to decrypt software and data that it's made for. Ncchinfo is a file format developed a while back to make xorpad generation on the 3ds simpler. It's the same concept here, just on one's computer.


Definitely.
Hmmmmm I can taste it now native.3DS loading through rxTools Select Menu.
 
Hmmmmm I can taste it now native.3DS loading through rxTools Select Menu.
is that what gateway does? i thought gw had .3ds loading simply because they chose it that way and put the effort in to write it.
not because gw has some keys that other people don't have, right?
 

Site & Scene News

Popular threads in this forum