Hacking What are the OTP's ? (used for ?)

[Gnarmagon]

Hello,

I know that you need the OTP's to install A9LH but what does A9LH with these OTP's ?
How is A9LH installed ? (just a new Line in a Script / .txt ?)
The Wii and WiiU have these OTP's too ?

 

[The Catboy]

The OTP is used to get the keys needed to install A9LH.
How is it installed? You follow the guide
3ds.guide
Both the Wii and Wii U have an OTP

 

[proflayton123]

OTP - One True Pair

OTP - One Time Process?

Here is info on the OTP in depth : https://www.3dbrew.org/wiki/OTP_Registers

 

[Searinox]

OTP stands for One-Time Pad, which is actually a bit of an odd thing since the definition rather closer fits XOR pads than what the OTP actually is. The OTP is a 256-byte unique value from which several important keys are derived. Admittingly, it's too big to be outright considered a "key" in its own right since most keys are 16-byte(128bit) or 32-byte(256bit) long and the OTP is much larger. I believe -how- the keys are derived is yet unknown but then the OTP can still be used to encrypt or decrypt stuff in a valid fashion.

 

[adrifcastr]

Hello,
How is A9LH installed ? (just a new Line in a Script / .txt ?)

no clue what you mean by Line in a script, but the a9lh payloads are written to the FIRM partition of the nand. the arm9loader then executes the arm9 payload on the root of the sd card which should be called "arm9loaderhax.bin" and has to be a valid arm9 payload.

 

[Goombi]

OTP - One True Pair

OTP - One Time Process?

OTP stands for One-Time Pad

One Time Programmable*. It's a unique-per-console read-only randomly-generated-at-factory piece of data used by the Kernel9Loader on New 3DS to decrypt the secret sector (on N3DS NAND). The decrypted secret sector contains keys used by the K9L to decrypt the NATIVE_FIRM.

About A9LH, providing a carefully chosen key to K9L will allow to gain code exec, not going for the full explanation here. That key is known but in order to provide it to K9L, we need to encrypt it with the OTP and write it in the secret sector.

There's much more to it, you should check 32c3 presentation on 3DS hacking

 

[Searinox]

Thanks for clearing that up. You mentioned what it does on the N3DS, so what does it do on the O3DS?

 

[smileyhead]

One Time Programmable*