Homebrew Official [Download] Decrypt9 - Open Source Decryption Tools (WIP)

[d0k3]

For the CIA Decryptor, what's the difference between "shallow" and "deep"?

Shallow only decrypts the CIA crypto and leaves the NCCH crypto intact. Deep decrypts everything. As of now, apart from development purposes, the shallow decryptor has no practical uses (that I know of, that is).

 

[Asia81]

Ok, thanks for info
Because I use everytimes deep, i'm good?

 

[Datalogger]

I think there was something wrong with the .3DS (at least the CXI/game part) right from the beginning. After deep decrypting... did you install via GW? And does the manual work for the deep decrypted game?


EDIT: maybe you forgot to tick the FW / region spoof options in Riku's tool?

Maybe not....

I just tested verified good .3DS files of Zelda Triforce Heroes in both US and EU versions.
Ran them both through Riku's and made 2 .CIA's and put the .3DS on the Gateway SD
Both the .3DS and .CIA version run fine in Gateway 3.41
The CIA's do not start in rxTools or reiNAND on the same emuNAND...

I even tried loading NTR 3.0 and they still hang on loading screen.


Edit: Ninja'ed by your edit.
I did not try the FW Spoof settings.
What numbers would we want to try for them? Default is FW 2E02

 

[Shadowtrance]

Maybe not....

I just tested verified good .3DS files of Zelda Triforce Heroes in both US and EU versions.
Ran them both through Riku's and made 2 .CIA's and put the .3DS on the Gateway SD
Both the .3DS and .CIA version run fine in Gateway 3.41
The CIA's do not start in rxTools or reiNAND on the same emdNAND...

I even tried loading NTR 3.0 and they still hang on loading screen.


Edit: Ninja'ed by your edit.
I did not try the FW Spoof settings.
What numbers would we want to try for them? Default is FW 2E02

The default is fine as it is set to FW 9.0, well i haven't had any issues with anything that needs higher than 9.5 with that setting when creating the cia. And I'm pretty sure triforce needs higher than 9.5 (forget what version) which is why you get an infinite loop on the 3ds logo screen.

 

[urherenow]

but I can play the .3ds triforce heroes with a gateway just fine on N3ds 9.5 emunand...

 

[d0k3]

Okay, new experimental release just for the Gateway users, @Uiharu , @Smyers75 , @_eyCaRambA_ and @night_hawk (once we got that Triforce issue figured out). Not every new feature is there to stay, we need to figure it out. New features:

1. NCCH/NCSD Decryptor (GW) -> only fully decrypts the first content - manuals and other stuff is untouched
2. CIA Decryptor (zerokey) -> same as the deep decryptor, but reencrypts everything with Zerokey crypto
   
3. CIA Decryptor (GW) -> same as the deep decryptor, but only fully decrypts the first content (counterpart to 1.)
4. NCCH/NCSD Encryptor (zerokey) -> encrypts a decrypted NCCH/NCSD with zerokey encryption

The CIA Encryptor (shallow) is gone. There are some problems when CIAs are encrypted with invalid titlekeys and that feature doesn't have any real use anyways.

Now, this is what we're interested in:

1. With a untouched rom from a retail cart, try the NCCH/NCSD Decryptor (GW) - does the game and manual still work?
2. With a seed encrypted 3DS from CDNto3DS.py, try the NCCH/NCSD Decryptor (GW) - does the game and manual still work (best to try this one on another 3DS, too)?
   
3. With a CIA from CDN / FunkyCIA, try the CIA Decryptor (zerokey) - can you install it in GW? Does game and manual work?
4. With a CIA from CDN / FunkyCIA, try the CIA Decryptor (GW) - can you install it in GW? Does game and manual work?
5. With a untouched rom from a retail cart, try the NCCH/NCSD Decryptor (Standard), then NCCH/NCSD Encryptor (zerokey) - does the game and manual still work?

For 3. and 4., if you use something with seed encryption, let me know if you are trying on the 3DS / NAND that has the seed installed or on a different one.

 

[Shadowtrance]

but I can play the .3ds triforce heroes with a gateway just fine on N3ds 9.5 emunand...

Because gateway is special and does things differently than all the other CFW's do....

Also.... @d0k3 you know i have gateway too right?

 

[night_hawk]

so retried to build the cia of triforce heroes, used fw spoof in riku's tool, installed and all works (game and manual). No seeddb or CIA decryption stuffs. I'm a bit confused

 

[d0k3]

so retried to build the cia of triforce heroes, used fw spoof in riku's tool, installed and all works (game and manual). No seeddb or CIA decryption stuffs. I'm a bit confused

Because you already have that seed in your system, possibly? If Triforce Heroes came from a retail cart, it doesn't even have seed crypto.

--------------------- MERGED ---------------------------

Because gateway is special and does things differently than all the other CFW's do....

Also.... @d0k3 you know i have gateway too right?

Forgot . Can you test, too? I'm still unsure about my theory concerning sig checks on GW because of @Uiharu 's tests.

 

[Datalogger]

Toki Tori (eShop that needs Seeddb Key)
N3DS with 9.0.0-20U sysNAND and 9.5.0-23U emuNAND

I'm running these tests using an eShop since only eShops (currently) use seeddb and have an issue with the Manual

Base Control:
GW using unmodified 3DS File = Game doesn't start / Manual "Home Button" reboot
GW/reiNAND using unmodified Riku's CIA = Game doesn't start / Manual "Home Button" reboot


Q: With a untouched rom from a retail cart, try the NCCH/NCSD Decryptor (GW) - does the game and manual still work?
A: GW = White Box on GW Loading Screen

Q: With a seed encrypted 3DS from CDNto3DS.py, try the NCCH/NCSD Decryptor (GW) - does the game and manual still work (best to try this one on another 3DS, too)?
A: Cannot get CDNto3DS.py to generate a valid CIA of new eShop seeddb games (works with old)

Q: With a CIA from CDN / FunkyCIA, try the CIA Decryptor (zerokey) - can you install it in GW? Does game and manual work?
A: Used Riku's - GW & reiNAND = Install Fails at 99% - SUMMARY_INVALID_ARGUMENT(7)

Q: With a CIA from CDN / FunkyCIA, try the CIA Decryptor (GW) - can you install it in GW? Does game and manual work?
A: Used Riku's - GW = Game Works!! / Manual "Home Button" reboot

Q: With a untouched rom from a retail cart, try the NCCH/NCSD Decryptor (Standard), then NCCH/NCSD Encryptor (zerokey) - does the game and manual still work?
A: GW = Game - An Error has occurred Press and Hold Power Button / No Manual



Still testing with other games.....

 

[Uiharu]

Now, this is what we're interested in:

1. With a untouched rom from a retail cart, try the NCCH/NCSD Decryptor (GW) - does the game and manual still work?
2. With a seed encrypted 3DS from CDNto3DS.py, try the NCCH/NCSD Decryptor (GW) - does the game and manual still work (best to try this one on another 3DS, too)?
   
3. With a CIA from CDN / FunkyCIA, try the CIA Decryptor (zerokey) - can you install it in GW? Does game and manual work?
4. With a CIA from CDN / FunkyCIA, try the CIA Decryptor (GW) - can you install it in GW? Does game and manual work?
5. With a untouched rom from a retail cart, try the NCCH/NCSD Decryptor (Standard), then NCCH/NCSD Encryptor (zerokey) - does the game and manual still work?

1.With a untouched rom from a retail cart,try the NCCH/NCSD Decryptor (GW). - GW game select menu,game show white box,not work.
2.With a seed encrypted 3DS from CDNto3DS.py,try the NCCH/NCSD Decryptor(GW) - GW game select menu,game show white box,not work.
3.Could not be installed.Installation progress stop at 99%,error text is '(0xD8E08025)'
4.Game works.Manual error,game card remove,press home to reboot.
5.A retail cart, try the NCCH/NCSD Decryptor (Standard), then NCCH/NCSD Encryptor (zerokey) - GW game select menu and desktop show icon,game didn't work.error and must to turn power off.

EDIT-all the test were on GW mode 10.2.0-28 emuNAND.Both New3ds and Old3ds.

 

[Datalogger]

1,Make a .CIA file from FankyCIA2.
2,Load the .CIA file with rxtools OR GW emunand mode.Both,Game and Manual show and work at the 3ds which had downloaded the game.
At other 3ds(no seed) - Game keep loading - Manual causes "Press Home Button" reboot
3,Run the .CIA file through Decrypt9(WIP) CIA Decryptor (deep)
4,Load the .CIA file with rxtools OR GW emunand mode.Both,Game and Manual show and work.(both seed or noseed).But the game must be installed by rxtools mode.GW mode is failed to install.

Is this on an O3DS running a 10.3.0-28 emuNAND ?
And what was the target eShop game?

 

[Uiharu]

Is this on an O3DS running a 10.3.0-28 emuNAND ?
And what was the target eShop game?

On O3DS/N3DS running a 10.2.0-28 emuNAND.
The eshop game is 'Touch Battle Tank 3D 3'
The retail rom is ‘Katachi Shin Hakken! Rittai Picross 2’

 

[Datalogger]

OK, so that explains why you can get the CIA to work in Gateway with the Manual, you have a seeddb on your 3DS.
I'm using a N3DS, so I don't.

I'm going to send my 3DS to get a Hardmod installed so I can upgrade it to 10.3.0-28 to use eShop again, then revert it back to 9.0.0-20 after I get what I want.
As it is now, I can only use eShop for things without seeddb...

 

[d0k3]

Toki Tori (eShop that needs Seeddb Key)
N3DS with 9.0.0-20U sysNAND and 9.5.0-23U emuNAND

I'm running these tests using an eShop since only eShops (currently) use seeddb and have an issue with the Manual

Base Control:
GW using unmodified 3DS File = Game doesn't start / Manual "Home Button" reboot
GW/reiNAND using unmodified Riku's CIA = Game doesn't start / Manual "Home Button" reboot


Q: With a untouched rom from a retail cart, try the NCCH/NCSD Decryptor (GW) - does the game and manual still work?
A: GW = White Box on GW Loading Screen

Q: With a seed encrypted 3DS from CDNto3DS.py, try the NCCH/NCSD Decryptor (GW) - does the game and manual still work (best to try this one on another 3DS, too)?
A: Cannot get CDNto3DS.py to generate a valid CIA of new eShop seeddb games (works with old)

Q: With a CIA from CDN / FunkyCIA, try the CIA Decryptor (zerokey) - can you install it in GW? Does game and manual work?
A: Used Riku's - GW & reiNAND = Install Fails at 99% - SUMMARY_INVALID_ARGUMENT(7)

Q: With a CIA from CDN / FunkyCIA, try the CIA Decryptor (GW) - can you install it in GW? Does game and manual work?
A: Used Riku's - GW = Game Works!! / Manual "Home Button" reboot

Q: With a untouched rom from a retail cart, try the NCCH/NCSD Decryptor (Standard), then NCCH/NCSD Encryptor (zerokey) - does the game and manual still work?
A: GW = Game - An Error has occurred Press and Hold Power Button / No Manual



Still testing with other games.....

1.With a untouched rom from a retail cart,try the NCCH/NCSD Decryptor (GW). - GW game select menu,game show white box,not work.
2.With a seed encrypted 3DS from CDNto3DS.py,try the NCCH/NCSD Decryptor(GW) - GW game select menu,game show white box,not work.
3.Could not be installed.Installation progress stop at 99%,error text is '(0xD8E08025)'
4.Game works.Manual error,game card remove,press home to reboot.
5.A retail cart, try the NCCH/NCSD Decryptor (Standard), then NCCH/NCSD Encryptor (zerokey) - GW game select menu and desktop show icon,game didn't work.error and must to turn power off.

EDIT-all the test were on GW mode 10.2.0-28 emuNAND.Both New3ds and Old3ds.

Alright, thank you, both of you!

• The results to 1. and 2. shouldn't come as a surprise to us, as the content 0 / CXI in both cases is fully decrypted and we already learned that GW doesn't like that for .3DS (it's no problem for .CIA, though).
• 3. is the same old problem where the sig check for contents following content 0 (ie. the manual and everything else) fails and therefore the CIA installation fails too. As we already saw, lazy team GW should simply extend their signature patches to all contents instead of what they do now.
• 4. Well, that reinforces the theory again. Sig check for content 0 would fail and is patched. All other contents are untouched and therefore the sig check passes.
• The only real surprise is that running the content 0 / CXI for 5. fails here. I guess with Zerokey encryption, we also still need to do something with the signature, I'll try to find out today.
• And, bonus info... I checked the Queno Pack created CIAs by @Uiharu, and there's no surprise here either. The manual only worked because it was untouched from retail / CDN.

I think you maybe go a wrong way.

The following is my guess.
1.The CIA downloaded by CNDto3DS / FankyCIA only need to decrypt seed-encryption.
Both CIA and .3ds file created by SDto3DS with apps and tmd file decryted by SD folder structure decryptor need seed-decrytion.
2.The rom dumped by untouched rom from a retail cart,it is run on GWmode,didn't need any decryption.
3.GW mode didn't mean no need Manual decryption,because the CIA installed on rxtools/reinand/cakes also works on GWmode,game and manual,both.
I think deep-decryption(GW) should do somewhere changing but Manual/dlp/updates decrytion remove.
4.We should find a game which has eshop and retail CTRrom edition for comparing them.And get some idea to update D9wip.

EDIT-Or Contrast between the cia created by Riku's tool and the cia created by Queno Pack whit the manual /dlp/updates

It's actually much simpler...

• If you only want to be able to play it on future 3DS consoles, the only encryption that we absolutely need to decrypt is the seed crypto. You're correct with that.
• If you decrypt (ie, "change") anything in contents other than the content 0 / CXI, the changed content will no more work via GW. Content 0 will keep working.
• Your proposal #4. Won't help us. We cannot get any information about how to build proper signatures from that.

And that's it... There is still the digital preservation standpoint (ie, what if at some point in the future an emulator is the only way to play 3DS games?), and for that full decryption and backup would be absolutely crucial, but that's not what we're discussing now.

So, how to go on from here?
Note that GW has released an update just today:

Spoiler: What's new for GW v3.5.1

Summary:
* Fixed loading issues for CIA based games, classic mode
* Allow bigger ExFAT cluster sizes again
* Teaser for the surprise feature!

These are our / GW users options now:

• Try the GW card update, hope that you can now properly install and play (manual, too!) deep decrypted CIAs. If it does, accept that the problems for CCI / .3DS persist.
• Harass Team GW until they finally implement proper signature patches for all contents (ie. contents other than content 0 / CXI) and implement proper unencrypted content handling not only for CIA but also for CCI / .3DS.
• In Debug mode (ie. with zerokey encryption), there may be a way to properly forge signatures ourselves. I'll look into that. Note that anything zerokey encrypted would work on GW and nowhere else.

The best that we have so far (in regards to compatibility with GW) in Decrypt9WIP is the "CIA Decryptor (GW)" feature, which creates installable CIAs, but the manuals will not work if they are seed encrypted. I can also adapt the "NCCH/NCSD Decryptor (GW)" so that it yields similar results.

Let me hear what you think!

 

[d0k3]

Alright, after some further search for information... zerokey-encrypted CIA and CCI / .3DS do in fact need a fixed signature to run via GW. In theory, makerom can do this, but to be honest I'm at the moment stumped with it. It also requires RSF files, and I can't get rsfgen.py to run on my machine (and that's only the first of multiple problems with the rebuild process).

If someone here is familiar with RSF files and makerom usage: What we need to do is rebuild a fully decrypted CCI with development keys and certificates. Maybe someone has an idea on how to do it.

 

[Datalogger]

Tried the new 3.51 Launcher - No change to the Manual issue.

I like the idea of:

• Harass Team GW until they finally implement proper signature patches for all contents (ie. contents other than content 0 / CXI) and implement proper unencrypted content handling not only for CIA but also for CCI / .3DS.

Anyone know of a good contact point to ask them to fix their broken software?

 

[d0k3]

Tried the new 3.51 Launcher - No change to the Manual issue.

I like the idea of:

• Harass Team GW until they finally implement proper signature patches for all contents (ie. contents other than content 0 / CXI) and implement proper unencrypted content handling not only for CIA but also for CCI / .3DS.

Anyone know of a good contact point to ask them to fix their broken software?

I also think that harassment is a good solution here . I only know the [email protected] email address, though - maybe someone knows other contacts? I haven't fully given up on the issue now just so you know, but in essence - even if we found a good way . we would be working around their bugs, which isn't a good thing at all.

 

[Datalogger]

OK, and thanks for all of your work on this!!

If you like, I can test anything up until Monday when I'm sending my N3DS out for a week or so to get a Hardmod installed.
Once it's back, I can resume testing and be able to upgrade it to 10.3 and buy more things to backup from eShop...

 

[d0k3]

OK, and thanks for all of your work on this!!

If you like, I can test anything up until Monday when I'm sending my N3DS out for a week or so to get a Hardmod installed.
Once it's back, I can resume testing and be able to upgrade it to 10.3 and buy more things to backup from eShop...

Thanks for the offer! Well, the only thing left to try (apart from harassment ) is to zerokey encrypt everything and properly fix the signatures. In theory that should be possible with makerom for development keys / certs (and for those only!), but how? No idea yet.

To sum the situation up, this is what GW does (GW users, you may link to this post when contacting team GW)....

1. For CCI files, zerokey encrypted content is loaded (possibly all contents), but only if the signatures are good
2. For CCI files, unencrypted content is never loaded
3. For CCI files, content encrypted in any way other than zerokey is loaded, but for all contents other than content 0 signatures must be good
4. For CIA files, zerokey encrypted content is loaded (possibly all contents), but only if the signatures are good
5. For CIA files, content encrypted in any way other than zerokey is loaded, but for all contents other than content 0 signatures must be good

There seems to be no reason in why it should work as described above, so it just looks like a prime example of lazy coding (which it most likely is). Also, CFWs (that are available for free, team GW), don't have the limitations described in 2./3./5. BTW, the above is also the reason why GW users can't have CIA themepacks.


In the meantime... asking the Decrypt9 users here: Are there still features you'd like to have in Decrypt9? Any ideas on how to improve it?