Homebrew Official [Download] Decrypt9 - Open Source Decryption Tools (WIP)

[Shadowtrance]

I lost the link for Decrypt9E (the emunand build).
Someone can send me it again?

Both versions are in the latest build.
https://github.com/Shadowtrance/Decrypt9/releases/tag/v2.1

 

[Asia81]

Both versions are in the latest build.
https://github.com/Shadowtrance/Decrypt9/releases/tag/v2.1

It's what I said a little after :3

 

[Ronhero]

It's what I said a little after :3

Na that was in a PM to me, you didn't say it here

 

[Asia81]

I use the EmuNand version just for extract my ticket.db (because it's more faster than dump the emunand + xor + extract FAT16)

No need to compil it again, i found a new link in the shadow's releases

 

[Ronhero]

Oh wow I am glad you said something because that's a great idea

 

[d0k3]

Animal Crossing: Happy Home Designer seeds for eShop @d0k3 should have a look.

This is not the end all be all. Still needs fixes.

JPN SEED - 051355aee70c283a91ebd365800d3f61
PAL SEED - 34d142bb045aa13705feb22f2ec04283

Has that issue already been solved for you or does Decrypt9 need a fix? You used the xorpad method of decrypting roms, not the title/3DS/rom decryptor, correct? What error message did you get?

 

[Deleted member 356526]

Has that issue already been solved for you or does Decrypt9 need a fix? You used the xorpad method of decrypting roms, not the title/3DS/rom decryptor, correct? What error message did you get?

yes, no error just a fail, and i need a fix.

 

[d0k3]

I sent you the seed and the CDN id, I can't get it to crypto fix it keeps telling me there is a bad seedbin

Alright, I tried it with the seed and CDN download you sent me, using both the xorpad method and the title decryptor. Worked without an issue for me and output was (apart from the changed header flags with the title decryptor, just 3 byte) identical for both methods. There was no error message.

I will need more information, maybe also your full seeddb.bin file (if the issue happened with a bigger one). Which Decrypt9 build did you use (mine/Shadowtrance/Archshift)? Did you use NCCH padgen or the title decryptor? At which point did you get the error message (in Decrypt9, before/after/while decrypting, in another tool)? I'll now also work through that Binding of Isaac thread, maybe I'll find some useful info there.

 

[d0k3]

http://gbatemp.net/threads/binding-...k-on-9-5-or-lower.393441/page-18#post-5666117

Here is the post I have been adding info too. You want me to pm you the seed?

Alright, I tried it with the seed and CDN download you sent me, using both the xorpad method and the title decryptor. Worked without an issue for me and output was (apart from the changed header flags with the title decryptor, just 3 byte) identical for both methods. There was no error message.

I will need more information, maybe also your full seeddb.bin file (if the issue happened with a bigger one). Which Decrypt9 build did you use (mine/Shadowtrance/Archshift)? Did you use NCCH padgen or the title decryptor? At which point did you get the error message (in Decrypt9, before/after/while decrypting, in another tool)? I'll now also work through that Binding of Isaac thread, maybe I'll find some useful info there.

Okay, I know what happened there. Binding of Isaac Afterbirth has been updated, and the new version doesn't have that issue anymore. To test I'd need a copy of the old version, but getting that will be almost impossible now. Duh :/. See motezazers post:

That's NOT sarcasm!
I don't why but it seems they didn't use the same SDK to compile the latest update than to compile the first one.
So:
-the first update uses N3DS keys
-the second not!

@everyone: I still need help reconstructing that issue. It seems to happen only with certain fairly new (N3DS only) eShop games. If you can help, please send me a PN.

 

[motezazer]

Okay, I know what happened there. Binding of Isaac Afterbirth has been updated, and the new version doesn't have that issue anymore. To test I'd need a copy of the old version, but getting that will be almost impossible now. Duh :/. See motezazers post:


@everyone: I still need help reconstructing that issue. It seems to happen only with certain fairly new (N3DS only) eShop games. If you can help, please send me a PN.

The older version can be downloaded freely on CDN.
The content ID is 00000002

 

[d0k3]

The older version can be downloaded freely on CDN.
The content ID is 00000002

Oh well, I feel pretty noob for asking this, but how do I make cdn_download.py download content ID 00000002? If I just use the title ID + the titlekey, all I get is content IDs 00000003 and 00000001. Maybe there's a different tool to download it?

 

[motezazer]

Oh well, I feel pretty noob for asking this, but how do I make cdn_download.py download content ID 00000002? If I just use the title ID + the titlekey, all I get is content IDs 00000003 and 00000001. Maybe there's a different tool to download it?

Download and decrypt manually with the title key.
Details will be sent to you by PM.

 

[Ronhero]

Hooray it just wasn't me! So just to recap @motezazer @d0k3 if I was to say download it again on 10.x and then generate everything all over again it would work and it was just the version I personally captured that has since been updated and that version work?

 

[d0k3]

Hooray it just wasn't me! So just to recap @motezazer @d0k3 if I was to say download it again on 10.x and then generate everything all over again it would work and it was just the version I personally captured that has since been updated and that version work?

Correct, it would work.

The explanation for the failing decryption of some newer N3DS only eShop titles, which @Shadowtrance and @OctopusRift will be interested in is as follows...

There's a new kind of encryption called the Secure4 encryption. This can, for some reason, only be used for N3DS only eShop titles. Secure4 encryption uses new keys for several keyslots. Without the keys (which can, if even possible, only be acquired by someone with some serious hacking skills), Secure4 encrypted titles can only be decrypted on N3DS consoles >= FW 9.6. If you followed this thread closely and / or have a basic understanding of how these things work, you understand the catch by now: We cannot run Decrypt9 on consoles > 9.2 and we cannot decrypt Secure4 on consoles < 9.6. In short: Secure4 cannot be decrypted yet.

Luckily, only very few titles are Secure4 encrypted by now, and as I said, it is limited to N3DS only eShop titiles. The first release of Binding of Isaac Afterbirth had Secure4 encryption, after the update (ie. with the version now downloadable from the eShop), Secure4 encryption is strangely gone. Animal Crossing: Happy Home Designer seems to have Secure4 encryption, too (needs confirmation).

Now, what to do about that? I'm assuming that if ncchflag[3] == 0x0B, Secure4 is used (it was ncchflag[3] == 0x0A for Secure3). Here is the explanation of the NCCH header. I do now check for that (in both, NCCH padgen and the title decryptor), and if Secure4 is detected, you at least get a proper error message instead of inexplainable problems.

If anyone can add some useful info to this, or even better, tell me that I'm wrong, your participation is greatly appreciated.

 

[Ronhero]

@d0k3 as always thanks for being so informative.

Now lets say for example peope with a hard mod (like me) would it be possible to point d9 at an emunand of 10.x while on 9.2 or lower?

 

[d0k3]

@d0k3 as always thanks for being so informative.

Now lets say for example peope with a hard mod (like me) would it be possible to point d9 at an emunand of 10.x while on 9.2 or lower?

Nope. The NAND you run Decrypt9 from has to be >= FW 9.6. So, of course we could use Decrypt9 to decrypt stuff from a 10.x EmuNAND, but you would still run Decrypt9 from 9.2 and the limitations of 9.2 would still apply. If there was a way to run Decrypt9 on FWs >= 9.6, it would be a whole different story.

A hardmod would be useful to retrieve the keys, but as to how to start with that, I am at a complete loss.

 

[Ronhero]

Nope. The NAND you run Decrypt9 from has to be >= FW 9.6. So, of course we could use Decrypt9 to decrypt stuff from a 10.x EmuNAND, but you would still run Decrypt9 from 9.2 and the limitations of 9.2 would still apply. If there was a way to run Decrypt9 on FWs >= 9.6, it would be a whole different story.

A hardmod would be useful to retrieve the keys, but as to how to start with that, I am at a complete loss.

Would arm11 help?

 

[d0k3]

Would arm11 help?

All information that I've read on that so far says that we need ARM9 for the stuff that Decrypt9 does. On ARM11, we don't even have access to NAND reading / writing and crypto functions.

--------------------- MERGED ---------------------------

Here's a new release for everyone to test:
https://github.com/d0k3/Decrypt9/releases/tag/20150915

This will (hopefully) detect secure4 encryption and give you a proper error message. If you still have trouble with the title decryptor or NCCH padgen and don't get a proper error message in Decrypt9, please let me know and I will fix the problem!

 

[d0k3]

New release coming up soon, but, in the meantime, I had a short discussion with Archshift about EmuNAND features... In short, I think rather than releasing two different builds, or implementing a malfunctioning NAND switch feature, I decided it would be best to have EmuNAND functionality in the main build, via additional menu entries.

These features are eligible for EmuNAND:

• Dump ticket_emu.db
• Decrypt Titlekeys (EmuNAND)
• Dump EmuNAND partitions
• EmuNAND backup
• Inject EmuNAND partitions
• EmuNAND restore

I'm unsure if all would be needed, so I ask the users: Which features would you want for EmuNAND, and which will you actually use?

 

[atkfromabove]

Would it be able to detect which nand was in use or would the switch need to be selected manually?