It's not about confirming the keys, it's about confirming whether they're set as normalkey or keyX+keyY in the bootrom. Look at slot 0x0d.However some keys can be confirmed without the bootrom, if you know there is limited types of storage on a 3DS, and only OTP contains the console-unique when factoried. But i don't know that the external fault injection with hardware might still be applied on a 3DS and not WiiU as fail0verflow did. Well and to most pirates the current state is enough that missing bootrom and other stages