- Now, add the required keydata into "00_generate_ssl_kek.py", then run it; this will output the ssl_kek.
I have a list of Keys from my Switch but what now?
- Now, add the required keydata into "00_generate_ssl_kek.py", then run it; this will output the ssl_kek.
Where do i get the other keys from in step 19?step 19: insert the keys within the quotations
I got " module 'asn1' has no attribute 'Decoder' " error using "convert_to_der.py" script (I got clcert.der); any hint about how to solve ? (I only obtained clcert.der )
Tested your one: it says pycrypto is missing but it is not the problem because the error is in asn1 module (pycrypto gets loaded before asn1 so I suppose the problem is in asn1 - i am using python3).Was this using my scripts or the ones in the OP? I think my scripts tell you which pre-requisite python modules you may be missing... give it a shot.
Tested your one: it says pycrypto is missing but it is not the problem because the error is in asn1 module (pycrypto gets loaded before asn1 so I suppose the problem is in asn1 - i am using python3).
I finally managed to get the proper cert (reinstall python3 under linux); now I get a .nca file from the cdn, i decrypted it using hactool and now I have a .istorage file... how can I decrypt it assuming I have the correct title key ? Can someone show me the hactool command to extract it ?If you're testing it from the first script, it's only trying to import Crypto.cipher from AES and Crypto.Util from Counter. So you either need pycrypto or pycryptodome.
Make sure you have the Visual Studio 2017 Python Build Tools installed, you are probably missing this...
And for 5.1? i cant find this file on SYSTEM partition.No, no, no!!!
That's completely incorrect.
Assuming you're on 5.0.2, find "F5D06292E093C651E67AA7C1A93B3880.nca" then decrypt and extract it in hactool.
Open the main file in a hex editor, then search for the hint bytes I gave in the script. Both are 16-bytes (32 characters) long.
Tried to run the first script but was greeted to this error. I did instal pycrypto and also tried pycryptodome.Traceback (most recent call last):
File "00_generate_ssl_kek.py", line 3, in <module>
from Crypto.Cipher import AES
ImportError: No module named Crypto.Cipher
Tried to run the first script but was greeted to this error. I did instal pycrypto and also tried pycryptodome.
Hey, how can I turn my PRODINFO into a PRODINFO.bin? I have everything dumped but it seems to be encrypted or something because it doesn't have the .bin extension.
I get a syntax error.Try the zip posted below and let me know how it goes...
https://gbatemp.net/threads/certnxt...t-from-a-nand-dump.503844/page-3#post-7974932
File "CertNXtractionPack.py", line 18
['key_x', (Key Removed), '69A08E62E0AE507BB5DA0E65179AE3BE051FED3C49941DF4EF2956D36D30110C'],
^
SyntaxError: invalid syntax
I get a syntax error.
keys = [['rsa_private_kek_generation_source', rsa_private_kek_generation_source, 'F3A68FC81509A41372EC479FD79019FE719A6DA7804B5557432A78F27DD74E49'],
['master_key_00', master_key_00, '0EE359BE3C864BB0782E1D70A718A0342C551EED28C369754F9C4F691BECF7CA'],
['key_x', key_x, '69A08E62E0AE507BB5DA0E65179AE3BE051FED3C49941DF4EF2956D36D30110C'],
['key_y', key_y, '1C86F363265417D499229EB1C4ADC7479B2A15F931261F31EE6776AEB4C76542']]
Sorry if I'm writing to You, I followed Your guide on each step and I have obtained prodinfo file, but now I arrived at step 19 and You tell to insert some keys into the python script, but You do not tell which keys to put into and how to put them into the script: I have my personal console keys and master keys from 00 to 04!I should add it in a new thread. So avoid that the last messages like this are not read and keep asking how to do it.
Alright guys, I made a version that I think handles a lot of the errors encountered thus far, it won't auto install dependencies or anything crazy, so I suggest opening cmd.exe and doing the following commands first...
pip install pycrypto
pip install enum34
pip install future
pip install asn1
Then do the following...
Let me know if you guys run into any problems (so I can quickly fix it!)
- Download the attached zip and extract it to your Desktop.
- Dump your SYSNAND (via hekate).
- Decrypt (BIS 0 Key) and Extract your PRODINFO.bin to your working directory (via BisKeyDump and HacDiskMount).
- Insert the 4 required keys in the top of the CertNXtractionPack.py script.
- Run CertNXtractionPack.cmd
FUCK THIS SHIT DUDE...
Trying to exctract my cert for like 2 hours and nothing work here, shit.
What am I doing wrong???
Python 2.7:
Python 3.7: