Hacking Discussion TSEC is broken

DPyro · Mar 2, 2019

I'll now try to provide a brief overview for all this.
TSEC is a controller used in most Tegra devices, including the Switch. Like many other controllers found in Tegra devices, it is powered by a Falcon microprocessor, but with additional crypto capabilities (via the SCP).
— Mike Heskin (@hexkyz) March 2, 2019

zoogie · Mar 2, 2019

Those tweets don't say anything about it being broken.

Kubas_inko · Mar 2, 2019

This says absolutely nothing about breaking the TSEC.

zoogie · Mar 2, 2019

Kubas_inko said:
This says absolutely nothing breaking the TSEC.

OP fail.
Here's the tweet that says that.

Due to this, it was uncertain if keys in future updates could be extracted or not... Until now.
Third time's the charm. I found a critical design flaw a few weeks ago and after a short brainstorm session with @SciresM, we were able to obliterate the TSEC's crypto scheme forever.
— Mike Heskin (@hexkyz) March 2, 2019

Kubas_inko · Mar 2, 2019

zoogie said:
OP fail.
Here's the tweet that says that.
https://twitter.com/hexkyz/status/1101940127474032641

Then it should be: "TSEC is dead"

V-Temp · Mar 2, 2019

Indeed it is, and this will likely be reported to everyone (ie. bug bounty submission) and never released aside from Sept obfuscated delivery, because this has ramifications far and beyond the Switch. As discussed in the discord, this is by nVidia's own bragging, compromising 3 billion devices.

Oops.

b17bomber · Mar 2, 2019

Does this mean if TX knew what this is they could get around scires sept crypto thingy

KirovAir · Mar 2, 2019

b17bomber said:
Does this mean if TX knew what this is they could get around scires sept crypto thingy

Yes. But I'm sure TX is the last person on hexkyz' list to share this with.

DPyro · Mar 2, 2019

zoogie said:
OP fail.
Here's the tweet that says that.

I posted the entire twitter thread.

b17bomber · Mar 2, 2019

KirovAir said:
Yes. But I'm sure TX is the last person on hexkyz' list to share this with.

Right, but then what was the purpose of posting that hash on twitter?

KirovAir · Mar 2, 2019

b17bomber said:
Right, but then what was the purpose of posting that hash on twitter?

Proof/showing off the 'crack' I suppose. When TSEC is eventually wide open for the rest of the world (which is inevitable after some time) you can validate that hexkyz indeed had pwned TSEC first.

b17bomber · Mar 2, 2019

KirovAir said:
Proof/showing off the 'crack' I suppose. When TSEC is eventually wide open for the rest of the world (which is inevitable after some time) you can validate that hexkyz indeed had pwned TSEC first.

Yea, he tweeted an explanation.

proffk · Mar 2, 2019

Its great to see a dedicated dev who is actively exploiting the nsw simillar as the flow for vita. Unlike the ps4 scene which is dead on 5.05.

Snomannen_kalle · Mar 3, 2019

proffk said:
Its great to see a dedicated dev who is actively exploiting the nsw simillar as the flow for vita. Unlike the ps4 scene which is dead on 5.05.

If I recall correctly, there is an exploit that works on even the latest FW, but it's the last one they have, so they don't want to release it either before Sony patches it or EOL, whichever comes first

smf · Mar 3, 2019

KirovAir said:
Proof/showing off the 'crack' I suppose. When TSEC is eventually wide open for the rest of the world (which is inevitable after some time) you can validate that hexkyz indeed had pwned TSEC first.

Or maybe he was just the first to talk about it?

kkcheong · Mar 3, 2019

Posting in legendary thread

Phenj · Mar 3, 2019

What does this mean for us?

aos10 · Mar 3, 2019

Phenj said:
What does this mean for us?

A new way to hack the switch for all non patched switch, you still need to push the payload.

smf · Mar 3, 2019

Phenj said:
What does this mean for us?

It means that a method to get hold of some information that was hoarded by nintendo is now hoarded by a few people outside nintendo.

I'm not sure what practical difference it makes. If nobody wants to release the keys or the exploit, then we're still no better off.

We'll see what happens when the next atmosphere comes out.

Dungeonseeker · Mar 3, 2019

Phenj said:
What does this mean for us?

Absolutely nothing for a long ass time yet.

josete2k · Mar 3, 2019

Phenj said:
What does this mean for us?

Nintendo can't use the TSEC against CFW.

bodefuceta · Mar 3, 2019

I hope SX gets stuck in 6.2 forever.

gizmomelb · Mar 3, 2019

and derailed..

SapphireExile · Mar 3, 2019

Interesting. I wonder how Nvidia will address this, considering it impacts more than just the Switch.

Hacking Discussion TSEC is broken

Well-Known Member

playing around in the end of life

"Something funny goes here."

playing around in the end of life

"Something funny goes here."

Well-Known Member

Well-Known Member

Alcoholic Programmer

Well-Known Member

Well-Known Member

Alcoholic Programmer

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Yuuki chan

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Sapphire

Similar threads

Popular threads in this forum