^This. Totally agree, makerom certainly isn't the best way to make cia.
Dirty, can hang PC while making large cia, fails at titles that have lot of content (some DLC).
make_cdn_cia does not support creating CIAs from games that are titlekey encrypted, so I'm interested in how else you propose making the CIA
Also, I honestly can't understand, why decrypting content with Decrypt9 before making cia?
This statement is quite incorrect:
Orginal CDNto3DS script builds cia from encrypted NCCH (and PlaiCDN actually still can do it too).
Full decryption can be useful for seed encrypted titles, but you shouldn't force people to do it
by telling them that it "cannot be used", it's not true and also useless for most of old eShop content.
People can do decryption in Decrypt9 after packing cia if they want so. Or just get seed from eShop.
Especially when this script can also create .3ds, which obviously can be used only with Gateway.
And Gateway can't handle decrypted non executable NCCH (aka CFA), so you either left them
encrypted and thus properly signed, or GW users can forget about manuals, download play and DLC.
It was a oversimplification until I added more sophisticated functionality, which I'm working on right now