Modify and Re-sign Wii isos

[masud]

News come from http://www.elotrolado.net/hilo_Trucha-Sign...s-de-Wii_967017 , spanish scene site.

If you need more info i can translate for you. Basically there are lots of things that can be done with this tool, there is some test and work to do, but things go faster and faster now.

 

[VascoAlmeida]

am i right ?

 

[IBNobody]

Here is the readme from v0.2:

Trucha Signer 0.2 ([email protected])

This program let you extracts files, replace files, and 
insert a "trucha signature" in a Wii disc partition, the 
source data could be an ISO image or just be read straight 
from a DVD drive (backup copies).

This program requieres the "common key" available in a 
Keyset in the window registry (use the example Keyset 
provide as a template and add keys on it).

Credits goes to the original team that show this hack in
the 24th Chaos Communication Congress: bushing, segher and
tmbinc.

Also thanks goes to marcan and nuke for the help and 
support.

And the fucks goes to knobhead kids trolling around on IRC.


TODO:
-bugfix it
-add support for LG GDR drives (for read original medias)
-enable whole partition data replace
-verify TMDs and Tickets from the cert chain
-sign discs using custom private keys
-WAD support
-VC games/Channels support

 

[Jax]

Holy Crap!

One step closer to custom firmware and free VC games!

 

[mikagami]

Effing awesome.

 

[VascoAlmeida]

I dont think anyone is actually seeing what we can do with this..

I can be wrong, but think guys.. What if we take all the firmware and region files of the Iso and put the ones from a USA game that works on all regions ? Suposedly since it will Re Encrypt and Sign it.. It should work on the Wii, and as the files have been changed the game will work on Pal or Usa, even if its a Japanese game that shouldnt work right ?

Maybe its a bit confused but shouldnt i be right ?

Guys thinking about VC games for free ?

Could anyone think about Region Free for a while ? If we put all the region and firmware files of a USA game that works on all regions on a Jap game that doesnt work anywhere it could work right ?

 

[IBNobody]

Here's something I don't understand, though...

The only key they have is the decryption key (key.bin). How are they using it to sign/encrypt the stuff again? Is there another key out there?

 

[Scorpei]

Here's something I don't understand, though...

The only key they have is the decryption key (key.bin). How are they using it to sign/encrypt the stuff again? Is there another key out there?

The encryption key is known by a select few people. They are thus able to run HB via other methods then we are. You can sign things yourself (when you are using the twilight hack you are signing things) however that is done on the fly. Not sure if you could do that not-on-the-fly with what we are able to run now though.

 

[IBNobody]

Here's something I don't understand, though...

The only key they have is the decryption key (key.bin). How are they using it to sign/encrypt the stuff again? Is there another key out there?

The encryption key is known by a select few people. They are thus able to run HB via other methods then we are. You can sign things yourself (when you are using the twilight hack you are signing things) however that is done on the fly. Not sure if you could do that not-on-the-fly with what we are able to run now though.

Then in order to use this program, you need the super-secret encryption key that hasn't been released outside of the group?

 

[coolbho3000]

That complicates things quite a bit then.

 

[coolbho3000]

Argh! THERE ARE NO KEYS. The registry file that is contained inside the RAR is full of zeroes.

How do we even know if this works?

 

[jelbo]

Awesome news if this works. Can't seem to download the Trucha Signer, it says 'this post has 1 file attached.', but I can't find a link on page or in source. I should look harder, I sound like a noob

/edit: link is visible after clicking the title of the post to go to the article.

 

[masud]

Keys are not included, you have to edit the .reg file with the keys. Ask around if you don't know them.

 

[Deleted User]

Argh! THERE ARE NO KEYS. The registry file that is contained inside the RAR is full of zeroes.

How do we even know if this works?

A key has to be dumped by someone but the only people with direct access to these keys won't release it I think.

have you seen the "VC games/Channels support" in the readme ?

 

[coolbho3000]

Keys are not included, you have to edit the .reg file with the keys. Ask around if you don't know them.

Only the decryption key (key.bin) is known.

WHAT'S THE POINT OF RELEASING THIS IF THERE ARE NO KEYS??

Just give us the keys!

 

[IBNobody]

Here it is. I have attached it. Rename the extension from .txt to .rar.

Dunno if it'll do you any good without the key, though.

 

[jelbo]

It's only a matter of time. Be grateful a tool that just needs keys to sign Wii discs is released in the first place.

 

[masud]

It's easy to get the keys, some clues:

Md5's:

md5 blanker: 4582417d623c81fca07a46a570c8969e
sd-iv: d9f2b2e045d22d3805a67fe0c340ccd2
sd-key: ef33e224e45c8d8c35ce32d8a810b603
commonkey: 8D1A2EBCD82A3469B77FACF15D9C8E50

You need this files:

RVL-WiiSystemmenu-v226.wad
RVL-WiiSystemmenu-v226.wad
IOS21-64-v514.wad
BOOT2-v2-64.wad

And some tool to search them

 

[coolbho3000]

Really? Are you sure about that, masud?

 

[jelbo]

If you edit the values after "common key"=hex: in the wiikeyset.reg file to the HEX values of the common key separated by commas, and import the file into your registry, you can successfully read Wii ISO's, if you select Custom KeySet1. Haven't tested anything else, but I guess that's what's possible with just the common key.

Here's SMG PAL loaded up: