1. Josephvb10

    OP Josephvb10 GBAtemp Advanced Fan
    Member

    Joined:
    Aug 26, 2009
    Messages:
    650
    Country:
    Costa Rica
    https://pastebin.com/DUe6KMXZ

    This is crazy. As part of the leaks in 4chan related to Nintendo's old source code, looks like someone has posted the algorithm that generates the title key for 3DS and Wii U titles.

    IMPORTANT: The script doesn't contain any Nintendo specific keys or any potential "illegal numbers". Thanks to Nintendo for using common words for their passwords.

    The only parameter for the algorithm is the title ID. Turns out the "password" Nintendo decided to use for the algorithm is either:
    • nintendo
    • mypass
    The password and the title ID are passed to a pbkdf2 hash function and with some other modifications that generates the title key. It's hilariously bad.
     
    Last edited by Josephvb10, May 29, 2020
  2. Brawl345

    Brawl345 GBAtemp Advanced Fan
    Member

    Joined:
    Jan 14, 2012
    Messages:
    655
    Country:
    Germany
    (this also works for Wii titles)
     
  3. EduAAA

    EduAAA Member
    Newcomer

    Joined:
    Sep 3, 2017
    Messages:
    38
    Country:
    Spain
    Cool, does this mean that we can download all their upcoming releases for free? I think I saw a new indie slot machine game the other day, can't wait to play it.

    This is big business, big business man.
     
    yuyuyup likes this.
  4. lone_wolf323

    lone_wolf323 GBAtemp Psycho!
    Member

    Joined:
    May 27, 2011
    Messages:
    3,210
    Country:
    Canada
    Freeshop was screwed years ago. This aint gonna replace nothing of it. This is merely title keys, NOT the tickets needed to actually download the games.
     
  5. V10lator

    V10lator GBAtemp Regular
    Member

    Joined:
    Apr 21, 2019
    Messages:
    209
    Country:
    Germany
    Seems like the passwords don't apply to the Wii U. Does anyone know the pasword for the Wii U?
     
  6. iSubaru

    iSubaru Kitsune
    Member

    Joined:
    Apr 14, 2009
    Messages:
    379
    Country:
    Poland
    Called it~!
     
  7. alexander1970

    alexander1970 Wuff Wuff.
    Member

    Joined:
    Nov 8, 2018
    Messages:
    9,401
    Country:
    Austria
    It also seems not ALL Titles works..:(

    https://wiidatabase.de/wii-3ds-und-wii-u-title-key-generierung-geleaked/
    (German Page).:)

    Thank you.:)
     
  8. Magnus87

    Magnus87 GBAtemp Regular
    Member

    Joined:
    Apr 28, 2013
    Messages:
    278
    Country:
    Argentina
    This means that it will not be necessary to download a DS game from the eshop to hack the WiiU?
     
  9. V10lator

    V10lator GBAtemp Regular
    Member

    Joined:
    Apr 21, 2019
    Messages:
    209
    Country:
    Germany
    NVM, got it to work with mypass.


    I don't plan to generate keys for DSI games, only Wii ones. Don't worry.
     
    alexander1970 likes this.
  10. Brawl345

    Brawl345 GBAtemp Advanced Fan
    Member

    Joined:
    Jan 14, 2012
    Messages:
    655
    Country:
    Germany
    I now have confirmation that this also works with DSi titles. I made a wrong assumption based on a few system titles.

    No.
    What this means is that one can decrypt the contents of a title without having a ticket or the key. Imagine Nintendo would release a new Wii U or 3DS game, then you could create a fake ticket and/or decrypt the contents of the game before release. This might also be useful for titles that were never dumped or have wrong tickets (looking at you Wii scene!).

    This DOES NOT allow you to
    1. Magically hack your console
    2. Pirate games without modding your console
    3. Pirate games without signature patches
    For these things you would need to have a valid ticket which MUST BE signed by Nintendo with their private key.
     
    Kwyjor, E1ite007, Lightyose and 2 others like this.
  11. Magnus87

    Magnus87 GBAtemp Regular
    Member

    Joined:
    Apr 28, 2013
    Messages:
    278
    Country:
    Argentina
    Ok, so we are still in the same state as before, We need to buy a DS game for the eshop so we can use Haxchi later :unsure:
    It is incredible that not even the modders want the Wii U, however for Wii and Switch there are a lot of possibilities and methods.
     
    Mr.Faq2015 and Lightyose like this.
  12. botik

    botik Advanced Member
    Newcomer

    Joined:
    Sep 22, 2017
    Messages:
    69
    Country:
    Russia
    To find privatekey Nintendo you need find two multiplier (P*Q) to number
     
    Dartz150 and Vulpes-Vulpeos like this.
  13. asper

    asper GBAtemp Advanced Fan
    Member

    Joined:
    May 14, 2010
    Messages:
    878
    Country:
    United States
    NUSgrabber, NUS downloader, etc... I see "mods" coming :)

    Can someone explain me the difference of a title ID4 and other Nintendo IDs ?
     
  14. Lacius

    Lacius GBAtemp Legend
    Member

    Joined:
    May 11, 2008
    Messages:
    12,825
    Country:
    United States
    There are other options on the Wii U. Using Mocha with the internet browser is as easy as using Haxchi now. We also have a boot1 exploit that just hasn't been implemented in any meaningful way.
     
  15. V10lator

    V10lator GBAtemp Regular
    Member

    Joined:
    Apr 21, 2019
    Messages:
    209
    Country:
    Germany
    I'm not sure if this boot one exploit is helpfull at all. We still need a prior exploit to be able to use it and as no boot0 exploit exists that means booting the console, using a exploit like Mocha, warmrebooting the console... That's a slow process and I fail to see a need to exploit an already cracked console... Anyway, we'll see what @Maschell does with it / how it will be integrated into wiiu-env. He's not talking much about it (but I also didn't ask). Wasn't Maschell. Sry for mixing that up.

    //EDIT:
    NUSspli already uses this: https://github.com/V10lator/NUSspli/blob/master/src/keygen.c
    USB Helpers[ developer is working on integrating it while we speak... Not sure what tool works on integrating it tbh. There was just one developer contacting me after I implemented this into NUSspli.
     
    Last edited by V10lator, Jun 1, 2020
    Magnus87 and peteruk like this.
  16. Lacius

    Lacius GBAtemp Legend
    Member

    Joined:
    May 11, 2008
    Messages:
    12,825
    Country:
    United States
    From the write-up:
     
  17. V10lator

    V10lator GBAtemp Regular
    Member

    Joined:
    Apr 21, 2019
    Messages:
    209
    Country:
    Germany
    Thanks for this. Just one thing:
    How should that work? At boot time no CFW is loaded and nothing is exploitet, again: We need a boot 0 exploit for such nice things. In the current situation one would have to boot a CFW (CBHC) to get that dual-boot menu working. Booting into CBHC to reboot into hacked vWii doesn't sound fast to me [EDIT]and it is also pretty useless. When CBHC is already bootet, why reboot into another CFW?[/EDIT]
     
    Last edited by V10lator, Jun 1, 2020
  18. Lacius

    Lacius GBAtemp Legend
    Member

    Joined:
    May 11, 2008
    Messages:
    12,825
    Country:
    United States
    It would work analogously to CBHC, except instead of a DS game launching contenthax at boot, vWii launches this boot1 exploit at boot.
     
  19. V10lator

    V10lator GBAtemp Regular
    Member

    Joined:
    Apr 21, 2019
    Messages:
    209
    Country:
    Germany
    So you're telling me the Wii U is already booting into vWii when pressing B (can't test this right now as a friend is gaming) ? If so that would ofc be great. :)
     
  20. Lacius

    Lacius GBAtemp Legend
    Member

    Joined:
    May 11, 2008
    Messages:
    12,825
    Country:
    United States
    Yes, sort of.
    https://en-americas-support.nintend...w-to-boot-the-wii-u-console-into-the-wii-menu

     
    Last edited by Lacius, Jun 1, 2020
    V10lator likes this.
Draft saved Draft deleted
Loading...

Hide similar threads Similar threads with keywords - generation, algorithm, titlekey