Hacking Number of Switch Keys (Don't Ask For Them)

TiMeBoMb4u2 · Mar 19, 2018

As per the forum rules, no one is allowed to post any keys, so please do not ask for them.
However, after receiving permission from GBAtemp Moderators, I have posted a key template and the corresponding SHA256 hashes, below.

At the moment, there are currently eighty (88) keys that are publicly available and ~~zero (0)~~ an "undetermined amount" (v6.2.0) of keys that are currently unknown/private.

NOTES:
- There have been some name changes to keys.
- There are actually quite a few more keys (others are not necessary for currently-published tools).
- Hashes for games removed.

I'll do my best to keep this page updated with an accurate listing, but if I'm missing anything, please feel free to PM me.

Nintendo Switch Key Template — ( 2018-09-07 )

Code:

; ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
;
;                                       Nintendo Switch Keys
;
; ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
; Revision:           2018-09-07.035
;
; Key Gist:           https://gist.github.com/roblabla/d8358ab058bbe3b00614740dcba4f208
; Hashes:             https://gist.github.com/nicoboss/967cd250d3969e1c4610c54e3186193b
; Check Binary Hash:  https://www.fileformat.info/tool/hash.htm
; ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••


; ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
; Keys are only valid for NCAs, System Services, and Applets using Firmware 1.0.0-current.
; However, key_sources should remain constant.  Newer firmwares may require newer master_keys.
; ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••

; Example Binary Hash.
; SHA256(example_hash)                          = 7A7BF454C5F3CB1B9D9A20F81417F98D976FE3B3DD52C1B9968F02E89E7E8A2F
; example_hash                                  = XXXXXXXX
; example_hash                                  = 00FF00FF


; Obtainable with TrustZone code execution.
; Firmware Master Key. All the other keys are derived from this one.
; master_key must have the appropriate number!
;
; "master_key_00": 1.0.0-2.3.0
; "master_key_01": 3.0.0
; "master_key_02": 3.0.1-3.0.2
; "master_key_03": 4.0.0-4.1.0
; "master_key_04": 5.0.0-5.1.0
; "master_key_05": 6.0.0-6.1.0
;
; SHA256(master_key_00)                         = 0EE359BE3C864BB0782E1D70A718A0342C551EED28C369754F9C4F691BECF7CA
master_key_00                                   = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(master_key_01)                         = 4FE707B7E4ABDAF727C894AAF13B1351BFE2AC90D875F73B2E20FA94B9CC661E
master_key_01                                   = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(master_key_02)                         = 79277C0237A2252EC3DFAC1F7C359C2B3D121E9DB15BB9AB4C2B4408D2F3AE09
master_key_02                                   = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(master_key_03)                         = 4F36C565D13325F65EE134073C6A578FFCB0008E02D69400836844EAB7432754
master_key_03                                   = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(master_key_04)                         = 75FF1D95D26113550EE6FCC20ACB58E97EDEB3A2FF52543ED5AEC63BDCC3DA50
master_key_04                                   = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(master_key_05)                         = EBE2BCD6704673EC0F88A187BB2AD9F1CC82B718C389425941BDC194DC46B0DD
master_key_05                                   = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Master Key Seed
; Previously referred to as "normalseed_retail".
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(master_key_seed)                       = 7944862A3A5C31C6720595EFD302245ABD1B54CCDCF33000557681E65C5664A4
master_key_seed                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Master Key 4x Seed
; Also known as "normalseed_4x_retail".
; At this time, its usage is unknown.
;
; SHA256(masterkey_4x_seed)                     = 61AD021D21E5E39DEA50CC971B27780AD43419EDC16342EB85080B76BC4F15E4
masterkey_4x_seed                               = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Obtainable with Package1Ldr code execution.
; Package1 Key. Allows decrypting package1, which contains the bootloader, warmboot.bin and TrustZone (also called Secure_Monitor).
; package1_key must have the appropriate number!
;
; SHA256(package1_key_00)                       = 4543CD1B7CAD7EE0466A3DE2086A0EF923805DCEA6C741541CDDB14F54F97B40
package1_key_00                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package1_key_01)                       = 984F1916834540FF3037D65133F374BD9E715DC3B162AAC77C8387F9B22CF909
package1_key_01                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package1_key_02)                       = 9E7510E4141AD89D0FB697E817326D3C80F96156DCE7B6903049AC033E95F612
package1_key_02                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package1_key_03)                       = E65C383CDF526DFFAA77682868EBFA9535EE60D8075C961BBC1EDE5FBF7E3C5F
package1_key_03                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package1_key_04)                       = 28AE73D6AE8F7206FCA549E27097714E599DF1208E57099416FF429B71370162
package1_key_04                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package1_key_05)                       = 70AD5C51C9BFFA9DB066BD26AB4B5654235E610BEC8CD76F80FEAF6E29FFF684
package1_key_05                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Derivable from master_key_## and package2_key_source.
; Package2 Key.  Allows decrypting package2.
; package2_key must have the appropriate number!
;
; SHA256(package2_key_00)                       = 94D6F38B9D0456644E21DFF4707D092B70179B82D1AA2F5B6A76B8F9ED948264
package2_key_00                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package2_key_01)                       = 7794F24FA879D378FEFDC8776B949B88AD89386410BE9025D463C619F1530509
package2_key_01                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package2_key_02)                       = 5304BDDE6AC8E462961B5DB6E328B1816D245D36D6574BB78938B74D4418AF35
package2_key_02                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package2_key_03)                       = BE1E52C4345A979DDD4924375B91C902052C2E1CF8FBF2FAA42E8F26D5125B60
package2_key_03                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package2_key_04)                       = 631B45D349AB8F76A050FE59512966FB8DBAF0755EF5B6903048BF036CFA611E
package2_key_04                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(package2_key_05)                       = CA226C0DC345534F7573095975C762147B12DF3C491D8C24B1BE7DADB98E7813
package2_key_05                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Derivable from master_key_## and titlekek_source.
; Title Key Encryption Key.
;
; SHA256(titlekek_00)                           = C2FA30CAC6AE1680466CB54750C24550E8652B3B6F38C30B49DADF067B5935E9
titlekek_00                                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(titlekek_01)                           = 0D6B8F3746AD910D36438A859C11E8BE4310112425D63751D09B5043B87DE598
titlekek_01                                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(titlekek_02)                           = D09E18D3DB6BC7393536896F728528736FBEFCDD15C09D9D612FDE5C7BDCD821
titlekek_02                                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(titlekek_03)                           = 47C6F9F7E99BB1F56DCDC93CDBD340EA82DCCD74DD8F3535ADA20ECF79D438ED
titlekek_03                                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(titlekek_04)                           = 128610DE8424CB29E08F9EE9A81C9E6FFD3C6662854AAD0C8F937E0BCEDC4D88
titlekek_04                                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(titlekek_05)                           = D3E2504ED756221DAC6AEBF161033DB66ABCF4A1B5B97EB9D01596947B595FDA
titlekek_05                                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in TrustZone .rodata.
; Seed for Package2 Key. Allows decrypting package2, which contains the kernel and builtins.
;
; SHA256(package2_key_source)                   = 21E2DF100FC9E094DB51B47B9B1D6E94ED379DB8B547955BEF8FE08D8DD35603
package2_key_source                             = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in TrustZone .rodata.
; Seed for Title Key Encryption Key.
;
; SHA256(titlekek_source)                       = C48B619827986C7F4E3081D59DB2B460C84312650E9A8E6B458E53E8CBCA4E87
titlekek_source                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in TrustZone .rodata.
; Seed for GenerateAesKek, usecase + generation 0.
;
; SHA256(aes_kek_generation_source)             = FC02B9D37B42D7A1452E71444F1F700311D1132E301A83B16062E72A78175085
aes_kek_generation_source                       = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in spl .rodata.
; Seed for GenerateAesKey.
;
; SHA256(aes_key_generation_source)             = FBD10056999EDC7ACDB96098E47E2C3606230270D23281E671F0F389FC5BC585
aes_key_generation_source                       = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in FS .rodata.
; Seed for Key Area Encryption Key 0.
;
; SHA256(key_area_key_application_source)       = 04AD66143C726B2A139FB6B21128B46F56C553B2B3887110304298D8D0092D9E
key_area_key_application_source                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in FS .rodata.
; Seed for Key Area Encryption Key 1.
;
; SHA256(key_area_key_ocean_source)             = FD434000C8FF2B26F8E9A9D2D2C12F6BE5773CBB9DC86300E1BD99F8EA33A417
key_area_key_ocean_source                       = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in FS .rodata.
; Seed for Key Area Encryption Key 2.
;
; SHA256(key_area_key_system_source)            = 1F17B1FD51AD1C2379B58F152CA4912EC2106441E51722F38700D5937A1162F7
key_area_key_system_source                      = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in FS .rodata.
; Seed for Header Key Encryption Key.
;
; SHA256(header_kek_source)                     = 1888CAED5551B3EDE01499E87CE0D86827F80820EFB275921055AA4E2ABDFFC2
header_kek_source                               = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Found in FS .data.
; Seed for NCA Header Key.
;
; SHA256(header_key_source)                     = 8F783E46852DF6BE0BA4E19273C4ADBAEE16380043E1B8C418C4089A8BD64AA6
header_key_source                               = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Seed for SD Card Key Encryption Key.
;
; SHA256(sd_card_kek_source)                    = 6B2ED877C2C52334AC51E59ABFA7EC457F4A7D01E46291E9F2EAA45F011D24B7
sd_card_kek_source                              = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Seed for SD Card Save Key.
;
; SHA256(sd_card_save_key_source)               = D482743563D3EA5DCDC3B74E97C9AC8A342164FA041A1DC80F17F6D31E4BC01C
sd_card_save_key_source                         = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Seed for SD Card NCA Key.
;
; SHA256(sd_card_nca_key_source)                = 2E751CECF7D93A2B957BD5FFCB082FD038CC2853219DD3092C6DAB9838F5A7CC
sd_card_nca_key_source                          = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Keyblob Seeds
; Previously referred to as "wrapped_keyblob_key_##".
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
; https://github.com/Atmosphere-NX/Atmosphere/blob/master/fusee/fusee-secondary/src/key_derivation.c
;
; SHA256(keyblob_seed_00)                       = 8A06FE274AC491436791FDB388BCDD3AB9943BD4DEF8094418CDAC150FD73786
keyblob_seed_00                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(keyblob_seed_01)                       = 2D5CAEB2521FEF70B47E17D6D0F11F8CE2C1E442A979AD8035832C4E9FBCCC4B
keyblob_seed_01                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(keyblob_seed_02)                       = 61C5005E713BAE780641683AF43E5F5C0E03671117F702F401282847D2FC6064
keyblob_seed_02                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(keyblob_seed_03)                       = 8E9795928E1C4428E1B78F0BE724D7294D6934689C11B190943923B9D5B85903
keyblob_seed_03                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(keyblob_seed_04)                       = 95FA33AF95AFF9D9B61D164655B32710ED8D615D46C7D6CC3CC70481B686B402
keyblob_seed_04                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(keyblob_seed_05)                       = 3F5BE7B3C8B1ABD8C10B4B703D44766BA08730562C172A4FE0D6B866B3E2DB3E
keyblob_seed_05                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Debug Code Seeds
; All debug code was removed from package1 after firmware v4.0.0, so no keys after 02.
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(normalseed_dev_00)                     = FF1E7988E8F0A3308C80BB80743BE19A5C6311B333C34714A23D527C3775BF33
normalseed_dev_00                               = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(normalseed_dev_01)                     = 3AA88BF9399F695B7B8B2473527006F45BE8EA1E2D287EDC2FC9C1491028D87A
normalseed_dev_01                               = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(normalseed_dev_02)                     = B7B54536DCA0B6359539583ADFED1248CC275D5D29C7144289B0C9CF8775570B
normalseed_dev_02                               = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Device Key Seed
; Previously referred to as "per_console_key_generation_source" and "per_console_key_seed".
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(devicekey_seed)                        = 78762D65D81375FB050A3A2148F962FABE0EB8689F3B044BE59014AEFB50EB55
devicekey_seed                                  = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Device Key 4x Seed
; Also known as "per_console_key_generation_4x_source".
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(devicekey_4x_seed)                     = 3D2F279ED14B6ABB52E032C5968316BE815715FB8BFC15796B478A3900497999
devicekey_4x_seed                               = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Keyblob MAC Seed
; Previously referred to as "cmac_key_generation_source" and "cmac_key_seed".
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(keyblob_mac_seed)                      = B24BD293259DBC7AC5D63F88E60C59792498E6FC5443402C7FFE87EE8B61A3F0
keyblob_mac_seed                                = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Dev Master Key Seed
; Previously referred to as "dev_master_key_generation_source".
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(dev_master_key_seed)                   = 7410F1652868C0D737AC708DB8A751FC19B39604D050A06EC79283756E372044
dev_master_key_seed                             = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Debug Code Key Area 0
; All debug code was removed from package1 after firmware v4.0.0, so no keys after 02.
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(simpleseed_dev0_00)                    = 73C6B904E02B3E051B6144BFC62C5D655767102885011F6D13980B63C8A88839
simpleseed_dev0_00                              = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(simpleseed_dev0_01)                    = CAD0321D0A866CEEE94A43F22B1C5D83D8BDAE06EE9D5DD265962CE4D407237E
simpleseed_dev0_01                              = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(simpleseed_dev0_02)                    = 8401E80AE3BA81AA27D8CAC1117F7CE9E6CECE973C1C0A63DE713C4817368BB9
simpleseed_dev0_02                              = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Debug Code Key Area 1
; All debug code was removed from package1 after firmware v4.0.0, so no keys after 02.
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(simpleseed_dev1_00)                    = 9A816B4A0E857D15E236232F27AAC978CC7F20EF26EED866A3254421E3467748
simpleseed_dev1_00                              = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(simpleseed_dev1_01)                    = C36D79D631F46CC1A66DF0F7B5E90F3A01B85857281110DF88DDAB972E269514
simpleseed_dev1_01                              = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(simpleseed_dev1_02)                    = 6C66A36E93B0A8B1A5A6610709040BAA5AA9BA14692AE8386BB7F30144ACC896
simpleseed_dev1_02                              = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Dev Package1 Key Seed
; Previously referred to as "dev_package1_key_generation_source".
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(dev_package1_key_seed)                 = 708569D365C2F8260871AE0236F3E816DFFF986089CFFBFD897355BEB88F1FD9
dev_package1_key_seed                           = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Dev Per-Console Key Seed
; Previously referred to as "dev_per_console_key_generation_source".
; http://switchbrew.org/index.php?title=Cryptosystem#Key_generation
;
; SHA256(dev_per_console_key_seed)              = 13E78144713D14AC32A5753782127B83946A5331E0EAABE73A17AC5D1DF4DF80
dev_per_console_key_seed                        = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Screenshots and video capture signing key.
; http://switchbrew.org/index.php?title=Capture_services#Notes
;
; SHA256(capsrv_hmac_key )                      = E9735DAE330300B8BB4B5892C8178F5D57DAA32D7B5EF5D15F14491800CE4750
capsrv_hmac_key                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Derivable from master_key_##, aes generation sources, and header sources.
; NCA Header Key.
;
; SHA256(header_key)                            = 8E03DE24818D96CE4F2A09B43AF979E679974F7570713A61EED8B314864A11D5
header_key                                      = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Derivable from master_key_##, aes generation sources, and sd_card sources.
; SD Card Save Key.
;
; SHA256(sd_card_save_key)                      = 13020EE72D0F8B8F9112DC738B829FDB017102499A7C2259B52AEEFC0A273F5C
sd_card_save_key                                = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Derivable from master_key_##, aes generation sources, and sd_card sources.
; SD Card NCA Key.
;
; SHA256(sd_card_nca_key)                       = 8A1C05B4F88BAE5B04D77F632E6ACFC8893C4A05FD701F53585DAAFC996B532A
sd_card_nca_key                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Derivable from master_key_##, aes generation sources, and key_area_key_application_source.
; key_area_key_application must have the appropriate number!
;
; SHA256(key_area_key_application_00)           = 592957F44FE5DB5EC6B095F568910E31A226D3B7FE42D64CFB9CE4051E90AEB6
key_area_key_application_00                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_application_01)           = C2252A0FBF9D339ABC3D681351D00452F926E7CA0C6CA85F659078DE3FA647F3
key_area_key_application_01                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_application_02)           = 7C7722824B2F7C4938C40F3EA93E16CB69D3285EB133490EF8ECCD2C4B52DF41
key_area_key_application_02                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_application_03)           = AFBB8EBFB2094F1CF71E330826AE06D64414FCA128C464618DF30EED92E62BE6
key_area_key_application_03                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_application_04)           = 5DC10EB81918DA3F2FA90F69C8542511963656CFB31FB7C779581DF8FAF1F2F5
key_area_key_application_04                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_application_05)           = FE3AFDF483D090288001823CF71360F4DD81A359A49B247AE5592190840083CE
key_area_key_application_05                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Derivable from master_key_##, aes generation sources, and key_area_key_ocean_source.
; key_area_key_ocean must have the appropriate number!
;
; SHA256(key_area_key_ocean_00)                 = AA2C65F0E27F730807A13F2ED5B99BE5183165B87C50B6ED48F5CAC2840687EB
key_area_key_ocean_00                           = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_ocean_01)                 = 860185F2313A14F7006A029CB21A52750E7718C1E94FFB98C0AE2207D1A60165
key_area_key_ocean_01                           = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_ocean_02)                 = 7283FB1EFBD42438DADF363FDB776ED355C98737A2AAE75D0E9283CE1C12A2E4
key_area_key_ocean_02                           = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_ocean_03)                 = 9881C2D3AB70B14C8AA12016FC73ADAD93C6AD9FB59A9ECAD312B6F89E2413EC
key_area_key_ocean_03                           = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_ocean_04)                 = EAA6A8D242B89E174928FA9549A0F66EC1562E2576FAC896F438A2B3C1FB6005
key_area_key_ocean_04                           = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_ocean_05)                 = BFA659A0DFC54572F0E65D849C40B606EC20F6C203460A5E7EEEB020F6B142DF
key_area_key_ocean_05                           = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; Derivable from master_key_##, aes generation sources, and key_area_key_system_source.
; key_area_key_system must have the appropriate number!
;
; SHA256(key_area_key_system_00)                = 194CF6BD14554DA8D457E14CBFE04E55C8FB8CA52E0AFB3D7CB7084AE435B801
key_area_key_system_00                          = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_system_01)                = CE1DB7BB6E5962384889DB7A396AFD614F82F69DC38A33D2DEAF47F3E4B964B7
key_area_key_system_01                          = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_system_02)                = 42238DE5685DEF4FDE7BE42C0097CEB92447006386D6B5D5AAA2C9AFD2E28422
key_area_key_system_02                          = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_system_03)                = 1F6847F268E9D9C5D1AD4D7E226A63B833BF02071446957A962EF065521879C1
key_area_key_system_03                          = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_system_04)                = 644007F9913C3602399D4D75CC34FAEB7F1FAAD18B23E34187B16FDC45F4980F
key_area_key_system_04                          = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

; SHA256(key_area_key_system_05)                = 4EEF6181370A73D7A7358651ACB76F1DAF319427650E315297E51C75456FEE84
key_area_key_system_05                          = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; SHA256(rsa_oaep_kek_generation_source)        = E1DDAF657AB14B63E8A92E5899B84EF8C045BBB085F96099AF9AEE90823BFD9A
rsa_oaep_kek_generation_source                  = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; SHA256(eticket_rsa_kek_source)                = B71DB271DC338DF380AA2C4335EF8873B1AFD408E80B3582D8719FC81C5E511C
eticket_rsa_kek_source                          = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; SHA256(eticket_rsa_kekek_source)              = E8965A187D30E57869F562D04383C996DE487BBA5761363D2D4D32391866A85C
eticket_rsa_kekek_source                        = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; SHA256(eticket_rsa_kek)                       = 46CCCF288286E31C931379DE9EFA288C95C9A15E40B00A4C563A8BE244ECE515
eticket_rsa_kek                                 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; SHA256(ssl_aes_key_x)                         = 69A08E62E0AE507BB5DA0E65179AE3BE051FED3C49941DF4EF2956D36D30110C
ssl_aes_key_x                                   = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; SHA256(ssl_rsa_key_y)                         = 1C86F363265417D499229EB1C4ADC7479B2A15F931261F31EE6776AEB4C76542
ssl_rsa_key_y                                   = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX



; SHA256(ssl_rsa_kek)                           = 02A3CCF14A9572947B40AFA87AD8CDD3D3A39DCCF5D7911CDAF78F369E788840
ssl_rsa_kek                                     = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

fatsquirrel · Mar 19, 2018

What keys is that?

TR_mahmutpek · Mar 19, 2018

fatsquirrel said:
What keys is that?

Master keys..

TiMeBoMb4u2 · Mar 19, 2018

fatsquirrel said:
What keys is that?

Keys used for SciresM's "hactool": https://github.com/SciresM/hactool/blob/master/KEYS.md
roblabla posted a README.md here, as well: https://gist.github.com/roblabla/d8358ab058bbe3b00614740dcba4f208

ehnoah · Mar 19, 2018

When they got leaked?

TiMeBoMb4u2 · Mar 19, 2018

ehnoah said:
When they got leaked?

"package1_key_00" was leaked at the beginning of January.
"header_key" was leaked sometime mid-January.
"master_key_00" was leaked at the beginning of February.
Others came after these.

ehnoah · Mar 25, 2018

I found 9 Keys. Not sure how you can proof them?

SocraticBliss · Mar 25, 2018

ehnoah said:
I found 9 Keys. Not sure how you can proof them?

Basically by verifying that the hash is correct.

ehnoah · Mar 25, 2018

SocraticBliss said:
Basically by verifying that the hash is correct.

Any way to generate thoose hashes? I tried a few SHA256 sites, but seems the hashes not match, but the keys I have are posted on like 20 sites.

PabloMK7 · Mar 25, 2018

ehnoah said:
Any way to generate thoose hashes? I tried a few SHA256 sites, but seems the hashes not match, but the keys I have are posted on like 20 sites.

the gist posted above said:
Q: The hashes are wrong !

A: You are calculating it wrong. Hex is only a representation. Binary is truth. Because I'm such a nice guy, I'll tell you this :

SHA256(00FF00FF) = 7a7bf454c5f3cb1b9d9a20f81417f98d976fe3b3dd52c1b9968f02e89e7e8a2f

SimonMKWii · Mar 25, 2018

There are currently 20 known Switch keys.
14 were leaked, while 6 are derivable from the key_source keys.

TheExpertNoob · Mar 25, 2018

14 you say? I only have 13. I seem to be missing one.
Anyway, I know Im missing
~~master_key_03 (4.1.0)~~
master_key_04 (5.0.0)
package1_key_01
package1_key_02
~~package1_key_03~~
package1_key_04

peteruk · Mar 25, 2018

TheExpertNoob said:
14 you say? I only have 13. I seem to be missing one.
Anyway, I know Im missing
master_key_03 (4.1.0)
master_key_04 (5.0.0)
package1_key_01
package1_key_02
package1_key_03
package1_key_04

I have managed to collect 18

TR_mahmutpek · Mar 25, 2018

I wish we cand decrypt ps4 keys too..

AzizR · Mar 26, 2018

SimonMKWii said:
There are currently 20 known Switch keys.
14 were leaked, while 6 are derivable from the key_source keys.

I have 18 key, what am I missing ?
here the keys a got:

master_key_00 = C2CXXXXXXXXXXXXXXXXXXXX
master_key_01 = 54EXXXXXXXXXXXXXXXXXXXX
master_key_02 = 4F6XXXXXXXXXXXXXXXXXXXX

package1_key_00 = F4EXXXXXXXXXXXXXXXXXXXX
package2_key_00 = A35XXXXXXXXXXXXXXXXXXXX
package2_key_01= A0DXXXXXXXXXXXXXXXXXXXX
package2_key_02 = 7E5XXXXXXXXXXXXXXXXXXXX

titlekek_source = 1EDXXXXXXXXXXXXXXXXXXXX
header_kek_source = 1F1XXXXXXXXXXXXXXXXXXXX
header_key_source = 5A3XXXXXXXXXXXXXXXXXXXX
package2_key_source = FB6XXXXXXXXXXXXXXXXXXXX
aes_kek_generation_source = 4D8XXXXXXXXXXXXXXXXXXXX
aes_key_generation_source = 874XXXXXXXXXXXXXXXXXXXX
key_area_key_application_source = 7F5XXXXXXXXXXXXXXXXXXXX
key_area_key_ocean_source = 327XXXXXXXXXXXXXXXXXXXX
key_area_key_system_source = 874XXXXXXXXXXXXXXXXXXXX

XCI Header Key = 01CXXXXXXXXXXXXXXXXXXXX
NCA Header Encryption Key = AEAXXXXXXXXXXXXXXXXXXXX

Are you talking about 20 keys including the master key 03 and 04 ?

SimonMKWii · Mar 26, 2018

AzizR said:
I have 18 key, what am I missing ?
here the keys a got:

master_key_00 = C2CXXXXXXXXXXXXXXXXXXXX
master_key_01 = 54EXXXXXXXXXXXXXXXXXXXX
master_key_02 = 4F6XXXXXXXXXXXXXXXXXXXX

package1_key_00 = F4EXXXXXXXXXXXXXXXXXXXX
package2_key_00 = A35XXXXXXXXXXXXXXXXXXXX
package2_key_01= A0DXXXXXXXXXXXXXXXXXXXX
package2_key_02 = 7E5XXXXXXXXXXXXXXXXXXXX

titlekek_source = 1EDXXXXXXXXXXXXXXXXXXXX
header_kek_source = 1F1XXXXXXXXXXXXXXXXXXXX
header_key_source = 5A3XXXXXXXXXXXXXXXXXXXX
package2_key_source = FB6XXXXXXXXXXXXXXXXXXXX
aes_kek_generation_source = 4D8XXXXXXXXXXXXXXXXXXXX
aes_key_generation_source = 874XXXXXXXXXXXXXXXXXXXX
key_area_key_application_source = 7F5XXXXXXXXXXXXXXXXXXXX
key_area_key_ocean_source = 327XXXXXXXXXXXXXXXXXXXX
key_area_key_system_source = 874XXXXXXXXXXXXXXXXXXXX

XCI Header Key = 01CXXXXXXXXXXXXXXXXXXXX
NCA Header Encryption Key = AEAXXXXXXXXXXXXXXXXXXXX

Are you talking about 20 keys including the master key 03 and 04 ?

Edit 1: i found what keys that i'm missing, i'm missing those keys:
header_kek_source
header_key_source

Edit 2:
(NCA Header Encryption Key = header_key_source) = AEAXXXXXXXXXXXXXXXXXXXX
header_kek_source = D68XXXXXXXXXXXXXXXXXXXX

i'm missing only 1 key

Edit 3: i'm missing "titlekek_##"

You're also missing:
master_key_03 = A7XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
master_key_04 = 8FXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

AzizR · Mar 26, 2018

SimonMKWii said:
You're also missing:
master_key_03 = A7XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
master_key_04 = 8FXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

you said "14 were leaked, while 6 are derivable"
the master_key_03 and master_key_04 are not leaked or derivable

--------------------- MERGED ---------------------------

SimonMKWii said:
You're also missing:
master_key_03 = A7XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
master_key_04 = 8FXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

so do i have all the keys except of the master_key_03 and master_key_04 ?

SimonMKWii · Mar 26, 2018

AzizR said:
you said "14 were leaked, while 6 are derivable"
the master_key_03 and master_key_04 are not leaked or derivable

They haven't leaked in full yet, but those are supposedly (unconfirmed) the first byte of each key.

AzizR · Mar 26, 2018

SimonMKWii said:
They haven't leaked in full yet, but those are supposedly (unconfirmed) the first byte of each key.

ok thank you for your reply, so do i have all the keys?

SimonMKWii · Mar 26, 2018

AzizR said:
ok thank you for your reply, so do i have all the keys?

Yep, those are all the publically leaked and derivable keys!

Hacking Number of Switch Keys (Don't Ask For Them)

Well-Known Member

Well-Known Member

medic

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Red Yoshi! ^ω^

Professional Idiot

Member

Well-Known Member

medic

Well-Known Member

Professional Idiot

Well-Known Member

Professional Idiot

Well-Known Member

Professional Idiot

Similar threads

Popular threads in this forum