Hacking Question Decrypt Switch games installed in NAND

Mazamin

Well-Known Member
OP
Member
Joined
Sep 4, 2014
Messages
1,895
Trophies
0
XP
3,082
Country
Italy
Is it possible to decrypt the games installed in Switch's NAND? I have dumped my NAND and I managed to get my keys and to mount it to browse the files: I have found the content of the installed games but I don't know how to decrypt and extract them. The folder's name is "some numbers and letters".nca, and there are three files inside: 00, 01 and 02. I've tried concatenating these three files and decrypting them with the tool to decrypt NCAs, but it doesn't work. (Yes, I have all the keys needed)

Sorry if this was already asked but I wasn't able to find a thread about this.

Also, how can I dump my tickets (title keys)?
 
  • Like
Reactions: chronoss

Mazamin

Well-Known Member
OP
Member
Joined
Sep 4, 2014
Messages
1,895
Trophies
0
XP
3,082
Country
Italy
This should help you read those "some numbers and letters" I guess: https://gbatemp.net/threads/shoguntool-get-game-information-from-title-ids.503340/
And here you might find some further info for decrypting those files: https://gbatemp.net/threads/wip-bntx-extractor.478808/
Hope this helps a bit.
Shoguntools will be useful, thanks :)
Anyway I don't need to decrypt bntx files (textures I suppose), but the whole game content, so I suppose that's not the tool I need for now
 
  • Like
Reactions: HinaNaru Cutie

Falo

Well-Known Member
Member
Joined
Jul 22, 2012
Messages
680
Trophies
2
XP
2,627
Country
Germany
To decrypt these, you need to dump your titlekeys or find them online.

To dump them, extract these files from SYSTEM:
80000000000000e0 = Ticket Certs
80000000000000e1 = Update Ticket DB (CETK)
80000000000000e2 = Console Unique Ticket DB
80000000000000e3 = Unused Ticket DB

There are currently no public tools to mount saves, so try to find a script or use a hex editor to extract them.
For the Console Unique Ticket DB, they need to be decrypted first with your consoles rsa key to get generic keys, the rsa key is in PRODINFO.
 
  • Like
Reactions: Crazy-S and Mazamin

Mazamin

Well-Known Member
OP
Member
Joined
Sep 4, 2014
Messages
1,895
Trophies
0
XP
3,082
Country
Italy
To decrypt these, you need to dump your titlekeys or find them online.

To dump them, extract these files from SYSTEM:
80000000000000e0 = Ticket Certs
80000000000000e1 = Update Ticket DB (CETK)
80000000000000e2 = Console Unique Ticket DB
80000000000000e3 = Unused Ticket DB

There are currently no public tools to mount saves, so try to find a script or use a hex editor to extract them.
For the Console Unique Ticket DB, they need to be decrypted first with your consoles rsa key to get generic keys, the rsa key is in PRODINFO.
Thank you so much, really accurate explanation :D
 

SimonMKWii

Professional Idiot
Member
Joined
Nov 18, 2017
Messages
666
Trophies
0
Location
Melbourne, Victoria
XP
2,760
Country
Australia
To decrypt these, you need to dump your titlekeys or find them online.

To dump them, extract these files from SYSTEM:
80000000000000e0 = Ticket Certs
80000000000000e1 = Update Ticket DB (CETK)
80000000000000e2 = Console Unique Ticket DB
80000000000000e3 = Unused Ticket DB

There are currently no public tools to mount saves, so try to find a script or use a hex editor to extract them.
For the Console Unique Ticket DB, they need to be decrypted first with your consoles rsa key to get generic keys, the rsa key is in PRODINFO.
80000000000000e3 contains pre-order ticket placeholders.
 
  • Like
Reactions: Mazamin

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Xdqwerty @ Xdqwerty: good night