Hacking Question Cant we try to extract the private key with a already existing CFW?

[Deleted User]

Hey I know that private keys should not accessable for an normal user (except the Playstation 3)
But we already can dump the complete BootRom so shouldn't be a way to extract the private key
and if the Key is splitted anywhere should stand where the splitted strings (or what ever var it is) are
Is this possible?

 

[arianadark]

lockpick rcm

 

[GothicIII]

Hey I know that private keys should not accessable for an normal user (except the Playstation 3)
But we already can dump the complete BootRom so shouldn't be a way to extract the private key
and if the Key is splitted anywhere should stand where the splitted strings (or what ever var it is) are
Is this possible?

Short answer: No and you didn't do your homework.

Long answer:
This is not how it works. On PS3 they fucked up random number generation and used the same entropy multiple times. That's why it was possible to recalculate the private key.
Nintendo didn't do this mistake. Per definition it would take a tremendous amount of time with todays hardware to create a valid signature without the private key. If no miracle happens (like screwing up the signature process and leave the private key somewhere behind) it won't be possible to sign anything.
CFW are disabling this layer thats why you can run unsigned code.

 

[Deleted User]

Short answer: No and you didn't do your homework.

Long answer:
This is not how it works. On PS3 they fucked up random number generation and used the same entropy multiple times. That's why it was possible to recalculate the private key.
Nintendo didn't do this mistake. Per definition it would take a tremendous amount of time with todays hardware to create a valid signature without the private key. If no miracle happens (like screwing up the signature process and leave the private key somewhere behind) it won't be possible to sign anything.
CFW are disabling this layer thats why you can run unsigned code.

thanks and yes i know how the random number gen works on the Playstation (it works... change my mind)

 

[bailli]

You don't understand cryptography. When you talk about a private key, you talk about asymmetric or public-key cryptography. The so called private key is meant to never leave some secure environment - in your example some highly secured, probably even offline computer located at Nintendo to do the actual signing.

https://en.wikipedia.org/wiki/Public-key_cryptography

 

[hippy dave]

^ that. The private key should never be in any Switch console. It's very private.

 

[Deleted User]

If you want the private key you should go to college and do a dual major in cybersecurity and Japanese. Be a fucking great student always getting top marks. Get a job at Nintendo in Kyoto. Climb up the corporate ladder and when the opportunity arises leak the keys. You will most likely have signed a non-disclosure agreement so you’ll probably get sued and or go to jail.

We will most likely never get the Switch’s private key.

 

[The Real Jdbye]

Hey I know that private keys should not accessable for an normal user (except the Playstation 3)
But we already can dump the complete BootRom so shouldn't be a way to extract the private key
and if the Key is splitted anywhere should stand where the splitted strings (or what ever var it is) are
Is this possible?

It's in the name, private key. Because it's only used to encrypt, it never needs to leave Nintendo's build server or whatever.
FWIW, quantum computers are very good at brute forcing private keys. Once they become mainstream (if ever), we are going to have to design entirely new encryption algorithms that can't be cracked with a quantum computer.

 

[Deleted User]

It's in the name, private key. Because it's only used to encrypt, it never needs to leave Nintendo's build server or whatever.
FWIW, quantum computers are very good at brute forcing private keys. Once they become mainstream (if ever), we are going to have to design entirely new encryption algorithms that can't be cracked with a quantum computer.

Putting it that way, maybe I'll have to eat my words some day. By that time the Switch will probably be an obsolete piece of hard which still attracts attention from hardcore fans, similar to the Game Boy today. We might see new Switch games released by fans decades in a few decades.

 

[blahblah]

Google Public/Private Cryptography. You've been told before to stop making threads about stuff like this because you know no where near enough to intelligently post about the subject.

EDIT: In this thread: https://gbatemp.net/threads/unban-concept-certs-question.534413/ you were told to stop. Follow direction already. Stop.