Homebrew Official [Download] Decrypt9 - Open Source Decryption Tools (WIP)

  • Thread starter Thread starter d0k3
  • Start date Start date
  • Views Views 935,151
  • Replies Replies 4,476
  • Likes Likes 71
No, I am restor(ing?) by 10.5 emunand to sysnand but when it started the screens went black. I don't know if it finished or halted.
Are you using AuReiNand? Maybe you need to create the file named updatedsysnand in the rei folder. That will cause it to autoboot your sysnand instead of your emunand.
 
And I realize I temporarily locked myself out of hax. I'm not at home so I can't connect to PC to hardmod.
Yeah, that's what happens when you do a simple flash of an emunand to sysnand. The emunand did not have its FIRM0 and FIRM1 files modified, so flashing that to sysnand means you overwrote a9lh. Good thing you've got a hardmod, it seems.

For future reference I created a guide on how to properly perform the swap, without having to do the partition extraction/injection stuff either:
http://gbatemp.net/threads/the-easy-way-to-swap-your-sysnand-and-emunand-a9lh-only.417072/
 
If I wanted to move dlc from one console to another, would it be as simple as moving the title folder to Decrypt9 getting my moveable.sed and using the sd decryptor and then on the other console getting that systems moveable.sed, putting the title folder in the Decrypt9 folder and then again running sd decryptor and then moving the folder to the appropriate place in the Nintendo ads folder?
 
  • Like
Reactions: d0k3
There's another method of getting the IV (also called NAND CTR), which might work. If the keys are not set, though, it isn't even worth trying.


I knew that, just didn't know the name of th arm9loaderhax binary :).

Question is: is it even worth it getting stuff to work on arm9loaderhax.bin? If you can't load 3DSX or CIA, your first concern, even with A9LH, should be restoring your SysNAND to working order, not fooling around with some other stuff. I might do a dumbed down / simplified SysNAND restorer later. Maybe hold a button to load it, otherwise move on to CFW? Will think about that later.

So how about we boot decrypt9 once and have it save the keys to a file or something, that I the keys can be repopulated through other means

Also, Shadowtrance already made a minimal d9 for restoring sys and emuNAND and there's also plans in place for a stage 2 recovery/restore, so if someone has a botched stage 2 install there's a layer of protection
 
  • Like
Reactions: hobbledehoy899
False call anyway
Apparently Decrypt9 says "Writing to SystemNand" although it is restoring EmuNAND.
Phew.
What do you mean by that? If Decrypt9 says it restores the SysNAND, it also does so.

So how about we boot decrypt9 once and have it save the keys to a file or something, that I the keys can be repopulated through other means

Also, Shadowtrance already made a minimal d9 for restoring sys and emuNAND and there's also plans in place for a stage 2 recovery/restore, so if someone has a botched stage 2 install there's a layer of protection
Can't store the keys. Think about it, if we could make a copy of them, we could just copy them to our PCs and then proceed to decrypt everything from PC ;). Adding to that, the keys are actually unknown, we only see their end result (the encrypted / decrypted data).

Also, @prospective GodMode9 testers... the copy and delete functions are not in any state yet that would allow me to unstub NAND writing functions with good conscience. You will have to wait a little bit more.
 
Last edited by d0k3,
Didn't the talk where the a9l exploit was detailed also talk about how flaws in the hardware keyscrambler along with various sets of leaked keys means that the 3DS's keyscrambler can be reversed? Or was it only that certain sets of keys can be recovered?
 
What do you mean by that? If Decrypt9 says it restores the SysNAND, it also does so.


Can't store the keys. Think about it, if we could make a copy of them, we could just copy them to our PCs and then proceed to decrypt everything from PC ;). Adding to that, the keys are actually unknown, we only see their end result (the encrypted / decrypted data).

Also, @prospective GodMode9 testers... the copy and delete functions are not in any state yet that would allow me to unstub NAND writing functions with good conscience. You will have to wait a little bit more.
When will we get to test it bb?
 
Didn't the talk where the a9l exploit was detailed also talk about how flaws in the hardware keyscrambler along with various sets of leaked keys means that the 3DS's keyscrambler can be reversed? Or was it only that certain sets of keys can be recovered?
Well without a bootrom dump we don't know how the key generation starts, as well as some of the actual keys, since they're stored there... we might be able to get something if we knew one key + the normalkey, but it isn't easy to get those...

tl;dr: we need a bootrom dump to do that
 
  • Like
Reactions: FenrirWolf
  • Like
Reactions: d0k3
When will we get to test it bb?
snap001.png


GodMode9 testers' release is ready!

@dark_samus3, @Svaethier, @OctopusRift, @GraFfiX420, @KashiToxicBlood and everyone else who wants to test - the release is attached to this post. Because I'm assuming everyone downloading it is a responsible adult and either owns a hardmod or can correctly estimate the risk of trying this without, this build has full capabilities (there is a write permission system in place, though, plus confirmation dialogs).

This can do everything that is in the menu, except for creating folders and renaming files. Still coming up: Creating folder, renaming files and handling 'virtual' files (such as firm0.bin / agbsave.bin / ...).

What you should try / what I want to know:
  • Try the arm9loaderhax.bin on A9LH - no guarantees if anything will work, but it has the alternate CTR calculation in place.
  • Does the permission system work correctly (ie, no writing to the EmuNAND / SysNAND before unlocking it)?
  • What about writing to the SysNAND / EmuNAND - does everything work as it should?
  • Any bugs? Anything not working as it should?
  • Also, how do you like the user interface? Any ideas how to improve it? And no, eye candy is out of question for this.
Looking forward to your feedback! :)
 

Attachments

Last edited by d0k3,
View attachment 41022

GodMode9 testers' release is ready!

@dark_samus3, @Svaethier, @OctopusRift, @GraFfiX420, @KashiToxicBlood and everyone else who wants to test - the release is attached to this post. Because I'm assuming everyone downloading it is a responsible adult and either owns a hardmod or can correctly estimate the risk of trying this without, this build has full capabilities (there is a write permission system in place, though, plus confirmation dialogs).

This can do everything that is in the menu, except for creating folders and renaming files. Still coming up: Creating folder, renaming files and handling 'virtual' files (such as firm0.bin / agbsave.bin / ...).

What you should try / what I want to know:
  • Try the arm9loaderhax.bin on A9LH - no guarantees if anything will work, but it has the alternate CTR calculation in place.
  • Does the permission system work correctly (ie, no writing to the EmuNAND / SysNAND before unlocking it)?
  • What about writing to the SysNAND / EmuNAND - does everything work as it should?
  • Any bugs? Anything not working as it should?
  • Also, how do you like the user interface? Any ideas how to improve it? And no, eye candy is out of question for this.
Looking forward to your feedback! :)
a9lh will not work. No clue if its an init issue but i enabled it in boot9 and it didnt help.
 

Site & Scene News

Popular threads in this forum