Page 1 of 13

  1. 65,779
    251
    Front-page RELEASE

    Lockpick_RCM payload - Official Thread

    shchmue
    By shchmue
    Member

    Description
    Lockpick_RCM is a bare metal Nintendo Switch payload that derives encryption keys for use in Switch file handling software like hactool, hactoolnet/LibHac, ChoiDujour, etc. without booting Horizon OS.

    Source: https://github.com/shchmue/Lockpick_RCM
    Payload: https://github.com/shchmue/Lockpick_RCM/releases

    Due to changes imposed by firmware 7.0.0, Lockpick homebrew can no longer derive the latest keys. In the boot-time environment however, there are fewer limitations. That means the new keys are finally easy to dump!

    Usage
    • Launch Lockpick_RCM.bin using your favorite payload injector or chainload from Hekate by placing it in /bootloader/payloads
    • Upon completion, keys will be saved to /switch/prod.keys on SD
    • If the console has Firmware 7.x, the /sept/ folder from Atmosphère or Kosmos release zip containing both sept-primary.bin and sept-secondary.enc must be present on SD or else only keyblob master key derivation is possible (ie. up to master_key_05 only)
    Big thanks to CTCaer
    For Hekate and all the advice while developing this!

    Known Issues
    • Chainloading from SX will hang immediately due to quirks in their hwinit code, please launch payload directly
     
    Jay Griggs, NoNAND, IMnoob and 61 others like this.

    2. Discussion (251 replies)

  2. AliciaBurrito

    AliciaBurrito Member
    Newcomer
    Level 3

    Joined:
    Sep 8, 2018
    Messages:
    45
    Country:
    United States
    This looks awesome, and should really help a lot of people who can't get into Horizon for whatever reason :)
     
    Daggot and shchmue like this.
  3. tomGER

    tomGER GBAtemp Fan
    Member
    Level 7

    Joined:
    Feb 6, 2017
    Messages:
    346
    Country:
    Germany
    Awesome work!
     
    teamlocust and shchmue like this.
  4. Draxzelex

    Draxzelex GBAtemp Legend
    Member
    Level 19

    Joined:
    Aug 6, 2017
    Messages:
    10,724
    Country:
    United States
    RCMPick had potential...
     
    RHOPKINS13 and shchmue like this.
  5. LeviDL

    LeviDL Member
    Newcomer
    Level 5

    Joined:
    Apr 6, 2017
    Messages:
    20
    Country:
    United States
    You're Awesome!
     
    shchmue likes this.
  6. Whovian NineThreeSixNine

    Whovian NineThreeSixNine Advanced Member
    Newcomer
    Level 4

    Joined:
    May 3, 2016
    Messages:
    93
    Country:
    United States
    Congrats to ya, and thanks! :D
     
    shchmue likes this.
  7. Adran_Marit

    Adran_Marit Walküre's Hacker
    Member
    Level 10

    Joined:
    Oct 3, 2015
    Messages:
    2,520
    Country:
    Australia
    Ty for the release :)
     
    shchmue likes this.
  8. Vaatu

    Vaatu Advanced Member
    Newcomer
    Level 3

    Joined:
    Sep 18, 2018
    Messages:
    55
    Country:
    United States
    This is beyond cool! Good work :D
     
    shchmue likes this.
  9. ZachyCatGames

    ZachyCatGames GBAtemp Addict
    Member
    Level 9

    Joined:
    Jun 19, 2018
    Messages:
    2,398
    Country:
    United States
    and people on 7.0.0 who want the new keys ;)
     
    shchmue likes this.
  10. Kadji

    Kadji GBAtemp Regular
    Member
    Level 6

    Joined:
    Nov 16, 2006
    Messages:
    139
    Country:
    Germany
    Its not mentioned and while I am fairly sure that it should work I have to ask: Is 7.0.1 also supported?
    And is the dereived key the same key that was needed when Atmosphere was still in "bring your own keys for 7.x support" mode?

    Thanks for clarifying.
     
    shchmue likes this.
  11. Beerus

    Beerus Gbatemp's God Of Destruction
    Member
    Level 8

    Joined:
    May 3, 2017
    Messages:
    1,200
    Country:
    Canada
    Ayyyy thanks dude this gonna bless bare manz
     
    shchmue likes this.
  12. shchmue

    OP shchmue Developer
    Developer
    Level 8

    Joined:
    Dec 23, 2013
    Messages:
    733
    Country:
    United States
    it supports every firmware :) but no the keys for BYOK on 7.x remain private, Sept uses them and clears them from memory.
     
  13. huma_dawii

    huma_dawii GBAtemp Psycho!
    Member
    Level 11

    Joined:
    Apr 3, 2014
    Messages:
    3,448
    Country:
    United States
    Run this and then run lockpick?
     
  14. Kadji

    Kadji GBAtemp Regular
    Member
    Level 6

    Joined:
    Nov 16, 2006
    Messages:
    139
    Country:
    Germany
    Ok now I am a bit confused: If I understood right it *does* dump *some* 7.X keys if we provide RCM_Paylock with the files from Atmo / Kosmos.
    Are those the keys that would be used in the future to decrypt 7.X games (when they appear in the fututre)?

    Sorry if those questions have been answered for about 100 times, the whole 7.X situation is a bit messy and I am out of the loop (private stuff that is kinda ruining my life atm).
     
  15. shchmue

    OP shchmue Developer
    Developer
    Level 8

    Joined:
    Dec 23, 2013
    Messages:
    733
    Country:
    United States
    the only thing Lockpick does that this doesn't is derive titlekeys. so unless you want those this is all you need.

    — Posts automatically merged - Please don't double post! —

    it dumps and derives all the keys you need to decrypt 7.x files.
     
    huma_dawii likes this.
  16. bundat

    bundat ¿
    Member
    Level 4

    Joined:
    Jul 25, 2018
    Messages:
    438
    Country:
    Antarctica
    Are these the keys TX needed for SX OS 7.x support?
     
  17. Draxzelex

    Draxzelex GBAtemp Legend
    Member
    Level 19

    Joined:
    Aug 6, 2017
    Messages:
    10,724
    Country:
    United States
     
  18. huma_dawii

    huma_dawii GBAtemp Psycho!
    Member
    Level 11

    Joined:
    Apr 3, 2014
    Messages:
    3,448
    Country:
    United States
    I hope your life gets better :) stay strong.

    — Posts automatically merged - Please don't double post! —

    I got only 126 keys, normal? On 7.0.1
     
    lordelan likes this.
  19. shchmue

    OP shchmue Developer
    Developer
    Level 8

    Joined:
    Dec 23, 2013
    Messages:
    733
    Country:
    United States
    yes that's the count for 7.x

    though I'd caution generally not to be too focused on key count as long as you have those you need. for example, consoles on 6.2.0 can dump a master kek and tsec root key that can't be dumped on any other firmware but those are just intermediate calculations and aren't as important as their result for anyone using this software
     
    miss_nakano, Quantumcat and huma_dawii like this.
  20. Nerdtendo

    Nerdtendo Your friendly neighborhood idiot
    Member
    Level 9

    Joined:
    Sep 29, 2016
    Messages:
    1,114
    Country:
    United States
    I haven't really looked into what exactly I need but would this give me the keys for yuzu?
     
(You must log in or sign up to post here.)
Page 1 of 13
Draft saved Draft deleted
Loading...

Hide similar threads Similar threads with keywords - Lockpick_RCM, Official, payload

  1. Reisyukaku

    RELEASE [Official] ReiNX thread

    Reisyukaku, Jul 22, 2018, in forum: Switch - Exploits, Custom Firmwares & Soft Mods
    Replies:
    2,798
    Views:
    822,543
    hippy dave
    Jan 22, 2020 at 10:34 AM
  2. Chary

    New official DualShock 4 attachment adds two extra buttons to the back of the controller

    Chary, Dec 17, 2019, in forum: GBAtemp & Scene News
    Replies:
    78
    Views:
    8,619
    Corgano
    Jan 22, 2020 at 6:15 AM
  3. cpasjuste

    [RELEASE] PFBA: Portable Final Burn Alpha - official thread

    cpasjuste, Jan 23, 2017, in forum: PS Vita - Hacking & Homebrew
    Replies:
    550
    Views:
    182,514
    Rahkeesh
    Jan 22, 2020 at 1:52 AM
  4. CTCaer

    [RCM Payload] Hekate - CTCaer mod

    CTCaer, May 1, 2018, in forum: Switch - Exploits, Custom Firmwares & Soft Mods
    Replies:
    3,016
    Views:
    727,190
    LeMageFro
    Jan 20, 2020 at 2:20 PM
  5. MatinatorX

    WIP DragonInjector - Game Cart Payload Injector (Trinket M0 Clone)

    MatinatorX, Jul 18, 2018, in forum: Switch - Backup Loaders & Modchips
    Replies:
    1,327
    Views:
    229,274
    IS_Nitro
    Jan 20, 2020 at 12:32 AM