Homebrew Official [Download] Decrypt9 - Open Source Decryption Tools (WIP)

[Shadow#1]

I hope that this great app can be translated into Spanish. XD

See if u can help with that

 

[Apache Thunder]

I just got done encrypting DevMenu and installing it to NAND. Yep it works! Encryption is indeed important for custom system titles.

I now have a DevMenu that will survive system formats.

 

[d0k3]

I just got done encrypting DevMenu and installing it to NAND. Yep it works! Encryption is indeed important for custom system titles.

I now have a DevMenu that will survive system formats.

How did you do that? Encrypted the NCCH, then build a CIA from it?

 

[Apache Thunder]

I took the CXI, encrypted it with your Decrypt9WIP and built a CIA of it with makerom. I built the CXI using a "no crypt" version of 3DS builder (then extracted the CXI using 3DS builder and got rid of the CCI file it made). Though if your encryptor works with zero keyed CXIs, I may just use the normal version instead.

Given how I packed the CXI, the exheader has to have the correct settings in the TID data before it will install to NAND. The SD flag should not be set either.

Now that I think about it, in theory I could encrypt the BBM version of DevMenu, repack the CCI and it would work on a Sky3DS if in CFW.

 

[d0k3]

I took the CXI, encrypted it with your Decrypt9WIP and built a CIA of it with makerom. I built the CXI using a "no crypt" version of 3DS builder (then extracted the CXI using 3DS builder and got rid of the CCI file it made). Though if your encryptor works with zero keyed CXIs, I may just use the normal version instead.

Given how I packed the CXI, the exheader has to have the correct settings in the TID data before it will install to NAND. The SD flag should not be set either.

Now that I think about it, in theory I could encrypt the BBM version of DevMenu, repack the CCI and it would work on a Sky3DS if in CFW.

The functionality for encrypting with any parameters is in there (you could even have you're own seed encryption, if you so wish...). And yes, zero-key (encryption and decryption), too. It's just that the encryptor defaults to vanilla-crypto now (the one that was in every ncch before 7.x). If it helps and if someone is willing to test, I'll also put the CIA encryptor (to encrypt the NCCHs inside the CIA + CIA encryption) back in.

And that, about BBM, would make a good I-don't-believe-you Youtube video .

 

[Apache Thunder]

I've built a retail encrypted CCI and will see if any Sky3DS users (Sky3DS+ users in perticuler) can get it to boot while in CFW like rxTools/CakesFW/Reinand. Obviously I didn't post it anywhere here.

It's in the Sky3DS section of a site of which can not be named.

I did confirm that it boots on Gateway Red Card. But retail encrypted DevMenu on Gateway is just a novelty when zero key is a thing with Gateway mode.

By the way, I did try to encrypt a zero key'ed CXI. It will just say it's already encrypted and do nothing to it. Perhaps it can decrypt zero key'ed stuff with the decryption menu. Did not try that. But if you intended it to work on zero key encryption. At least when done directly from the NCCH Encryption menu, it will just skip them.

It was able to encrypt a CXI while it was still inside a CCI encryptor as well. But I was not sure if there was any hashes in the CCI container that would need to be fixed or if Decrypt9WIP was correcting them. I don't have any slot-1 flashcart, so it wasn't something I could test so I played it safe and did the CXI instead and built the CCI from it afterwords.

 

[Shadowtrance]

Oh well, not simply... all the strings are hardcoded.

@Shadowtrance I updated the screenshots in the op. Looks like your source on Github is not up to date, though, or is it?

Not quite up to date no, exactly 34 commits behind atm. Mine is up to here... https://github.com/d0k3/Decrypt9/commit/075258312e3654cbad9016cc363164add21d50e7
As usual i was waiting for you to finish any changes you were making which looked to be a lot.

--------------------- MERGED ---------------------------

I've built a retail encrypted CCI and will see if any Sky3DS users (Sky3DS+ users in perticuler) can get it to boot while in CFW like rxTools/CakesFW/Reinand. Obviously I didn't post it anywhere here.

It's in the Sky3DS section of a site of which can not be named.

I did confirm that it boots on Gateway Red Card. But retail encrypted DevMenu on Gateway is just a novelty when zero key is a thing with Gateway mode.

By the way, I did try to encrypt a zero key'ed CXI. It will just say it's already encrypted and do nothing to it. Perhaps it can decrypt zero key'ed stuff with the decryption menu. Did not try that. But if you intended it to work on zero key encryption. At least when done directly from the NCCH Encryption menu, it will just skip them.

It was able to encrypt a CXI while it was still inside a CCI encryptor as well. But I was not sure if there was any hashes in the CCI container that would need to be fixed or if Decrypt9WIP was correcting them. I don't have any slot-1 flashcart, so it wasn't something I could test so I played it safe and did the CXI instead and built the CCI from it afterwords.

Totally gonna go get this and test it on my sky3ds, although I'm not sure HOW seeing as you need a template for everything. Unless you know some black magic to get around that. haha

 

[Apache Thunder]

Well the Sky3DS+ is out. Had you gotten one of those your life would have been easier.

 

[Shadowtrance]

Well the Sky3DS+ is out. Had you gotten one of those your life would have been easier.

If i could FIND one anywhere in australia I'd buy one.
But yeah i bought the blue button one ages ago before sky3ds+ even existed. haha

--------------------- MERGED ---------------------------

Seems there's only ONE shop selling them here and they're apparently instock now too. hmm
$120 though... :/

 

[Shadowtrance]

And we're all up to date on the UI version front!

Get it while it's hot! Has EVERYTHING d0k3's current version has.... EVERYTHING, all those juicy features wrapped up in a sexy UI.

https://github.com/Shadowtrance/Decrypt9/releases/tag/v2.3.5

 

[d0k3]

I've built a retail encrypted CCI and will see if any Sky3DS users (Sky3DS+ users in perticuler) can get it to boot while in CFW like rxTools/CakesFW/Reinand. Obviously I didn't post it anywhere here.

It's in the Sky3DS section of a site of which can not be named.

I did confirm that it boots on Gateway Red Card. But retail encrypted DevMenu on Gateway is just a novelty when zero key is a thing with Gateway mode.

By the way, I did try to encrypt a zero key'ed CXI. It will just say it's already encrypted and do nothing to it. Perhaps it can decrypt zero key'ed stuff with the decryption menu. Did not try that. But if you intended it to work on zero key encryption. At least when done directly from the NCCH Encryption menu, it will just skip them.

It was able to encrypt a CXI while it was still inside a CCI encryptor as well. But I was not sure if there was any hashes in the CCI container that would need to be fixed or if Decrypt9WIP was correcting them. I don't have any slot-1 flashcart, so it wasn't something I could test so I played it safe and did the CXI instead and built the CCI from it afterwords.

You first need to decrypt encrypted NCCH, then you can go on encrypting it. It's a two step operation to go from a (some type crypto) encrypted NCCH to re-encrypted NCCH. Already encrypted content is skipped, correct. And, yup, Decrypt9 takes care of all hashes in the process. That is exactly the reason why cryptofixed .3DS / . CIA from Decrypt9 are known to work on real hardware.

Fun fact: The NCCH encryption option, and the CIA decryptor (CXI only) option are actually there because of GW. GW developers are lazy and haven't implemented proper signature patching yet. Meaning: For .3DS, signatures are only patched for CXI / content 0 - you can't use a decrypted / re-encrypted manual, just try it. For CIA it is worse, cause every content but the CXI needs to be absolutely untouched for it to be installabe with GW. Seed encrypted titles can come with seed-encrypted manuals, so that means no manuals for originally seed-encrypted contents for GW users.

 

[MassExplosion213]

You first need to decrypt encrypted NCCH, then you can go on encrypting it. It's a two step operation to go from a (some type crypto) encrypted NCCH to re-encrypted NCCH. Already encrypted content is skipped, correct. And, yup, Decrypt9 takes care of all hashes in the process. That is exactly the reason why cryptofixed .3DS / . CIA from Decrypt9 are known to work on real hardware.

Fun fact: The NCCH encryption option, and the CIA decryptor (CXI only) option are actually there because of GW. GW developers are lazy and haven't implemented proper signature patching yet. Meaning: For .3DS, signatures are only patched for CXI / content 0 - you can't use a decrypted / re-encrypted manual, just try it. For CIA it is worse, cause every content but the CXI needs to be absolutely untouched for it to be installabe with GW. Seed encrypted titles can come with seed-encrypted manuals, so that means no manuals for originally seed-encrypted contents for GW users.

Could you not just inject the complete seeddb?

 

[d0k3]

Could you not just inject the complete seeddb?

No. That's because about the "seedsave" there is too little known to be able to succesfully inject seeds. We just have enough knowledge to extract seeds from this file, but not enough on injecting seeds without risking a brick or breaking functionality.

 

[MassExplosion213]

No. That's because about the "seedsave" there is too little known to be able to succesfully inject seeds. We just have enough knowledge to extract seeds from this file, but not enough on injecting seeds without risking a brick or breaking functionality.

We have a complete seeddb file generator. It generates it from the NUS. Link: http://tinivi.net/seeddb

 

[d0k3]

We have a complete seeddb file generator. It generates it from the NUS. Link: http://tinivi.net/seeddb

Yes, that's correct. We can generate the (Decrypt9-readable) seeddb.bin from the (3DS Hardware readable) NUS seedsave, but not vice versa. That's what I just wrote .

 

[Krude]

FWIW, i tested firm0firm1 XORpad generation and it works fine for me.

Loving the added dynamic input, esp. for H&S injection, that would have been the next thing i'd have asked for. I hated having to rename my FMP and FBI injections on the SD card just to switch between them.

 

[Krude]

I did find a probjem with file injection, though, specifically movable.sed.
I'm trying to inject a movable.sed that's smaller than the one currently in NAND, and Decrypt9 won't recognize the smaller file on my SD card.

The one in my NAND is 0x140 bytes, the one i want to inject is missing the last 0x20 bytes from the file that get written during a system transfer / format. See http://3dbrew.org/wiki/Nand/private/movable.sed

 

[ootnes2]

@d0k3 is the seedsave functionality only usable to recover seeds from N3DS emunand? Or is there a way to get a seedsave (and later a seeddb) from an O3DS 10.3 emunand?

Also, great work!

 

[Krude]

More injection size problems:

I dumped my EmuNAND (formatted with GW back then) via EmuNAND9 to EmuNAND.bin, 1888MB.
I then broke my emunand and wanted to restore the backup with Decrypt9. The EmuNAND Restore option recognized the EmuNAND.bin on my SD, but it complained about an invalid size and aborted.

 

[ootnes2]

More injection size problems:

I dumped my EmuNAND (formatted with GW back then) via EmuNAND9 to EmuNAND.bin, 1888MB.
I then broke my emunand and wanted to restore the backup with Decrypt9. The EmuNAND Restore option recognized the EmuNAND.bin on my SD, but it complained about an invalid size and aborted.

I was able to use version 1.01 of the emunand inject tool to inject my emunand when there was size issue. If your emunand is already messed up it might be worth a shot...

See: https://gbatemp.net/threads/emunand-tool-release-and-support-thread.359239/