You can't solve for two unknowns. You don't have a normal key or a way to dump a normal key for a given keyY.
You can't solve for two unknowns. You don't have a normal key or a way to dump a normal key for a given keyY.
PSA: I don't think what we're doing has any real practical use whatsoever. This is just nerd science for the sake of knowledge for the time being.
Until we get bootrom dumps (if ever...), it will likely stay this way.
Until we get bootrom dumps (if ever...), it will likely stay this way.
Like I said, you can make a Sky3DS clone with that currently. And sniff Download Play traffic.
No. It's extremely unlikely that any major entity will release it. If we wait we'll stall indefinitely.
Sorry, but I fail to find an answer to my question in your reply.
"wasn't there anything useful (in what derrek said)? What's the point of what he said, then?"
More information about the bootrom. They have access. They want to let us know.
I remember it being mentioned, but can't remember in detail.
Maybe you should watch that part again.
Eh.. Could anyone tell me what the CTR with the KeyX/KeyY is for, then?
There isn't a place for it in the algorithm listed, and i fear no place for it in normal AES-CTR decryption with PC software.
If you can calculate two C out of the different keyslots, please tell me if they are the same.
Also as you might already know, that CTR is set when you need the xorpads, see decrypt9.
There isn't a place for it in the algorithm listed, and i fear no place for it in normal AES-CTR decryption with PC software.
If you can calculate two C out of the different keyslots, please tell me if they are the same.
Also as you might already know, that CTR is set when you need the xorpads, see decrypt9.
The CTR has absolutely nothing to do with the key generator. The key generator is just an optional function that can be invoked that generates a normal AES key from two inputs. The AES hardware can be used without invoking it (and with normal keys themselves).
Edit: There are two key generator algorithms. One for DSi keyslots (which can also be optionally/temporarily enabled for 3DS keyslots) and has been known for some time. The other (3DS) can only be used on 3DS keyslots. Both have their own constant, but the constant does not change based on the keyslot.
Last edited by Dazzozo,
At the talk they showed how to do it, you can encrypt something with all 0's with a KeyY and unknown corresponding KeyX, then flip bits in KeyY and you can determine KeyX from that, then you only have one unknown which you can solve for
I know exactly what they showed everyone, because I have the constant.
You still can't solve with two unknowns...
