Tutorial  Updated

OTP Guide

Full Guide Release!

https://plailect.github.io/OTP/

All regions now supported!

If you appreciate this guide and the work I put into maintaining it, I accept donations through both Bitcoin and PayPal.

If you felt like the guide helped you out then I'd really appreciate it! If I get enough I may buy a 2DS for testing hardware stuff so I don't break another N3DS.

If the guide didn't help you out then I'm really sorry about that :(
 
Last edited by Plailect,
  • Like
Reactions: Woxinum, NoNAND, Arkansaw and 63 others
Click to expand...
Chuu

Chuu

Well-Known Member
Newcomer
Level 1
Joined
Dec 29, 2015
Messages
91
Trophies
0
Age
25
XP
99
Country
United States
Just a reminder, when you're restoring your sysnand backup, rename it to NAND.bin
just got my otp after using the "updated" guide with @Urbanshadow 's Windows.py
Thanks for the great work guys!
 
  • Like
Reactions: Urbanshadow
jackb994

jackb994

Self-Proclaimed Gamer
Member
Level 4
Joined
Oct 29, 2015
Messages
544
Trophies
0
XP
401
Country
United States
So, what is the success rate then for old 3ds. I'm thinking about doing this on my brother's so I don't want to brick it
 
Chuu

Chuu

Well-Known Member
Newcomer
Level 1
Joined
Dec 29, 2015
Messages
91
Trophies
0
Age
25
XP
99
Country
United States
jackb994 said:
So, what is the success rate then for old 3ds. I'm thinking about doing this on my brother's so I don't want to brick it
Click to expand...
Apparently its high. You can wait till a release with more stability or you can yolo it and risk the brick. Besides, worst case scenario you get a hardmod
 
ShadowOne333

ShadowOne333

QVID PRO QVO
Editorial Team
Level 29
Joined
Jan 17, 2013
Messages
11,553
Trophies
2
XP
21,715
Country
Mexico
I was reading the arm9loaderhax page

  • otp.bin : A dump of your console OTP data from region 0x10012000-0x10012100; in order to dump it you must downgrade to a system version below 3.0, or exploit the New3DS-only vulnerability (This will just give you the hash of it, so you'll need to change the python script). it is console unique, and as such it cannot be shared from other people, because it will cause a brick!
Click to expand...

What about the second option?
Can we dump our OTP file from a N3DS without the need of a downgrade in a N3DS console?
 
Svaethier

Svaethier

Well-Known Member
Member
Level 3
Joined
Dec 2, 2013
Messages
1,303
Trophies
0
Age
29
Location
Sault Ste. Marie, Michigan
Website
s6.zetaboards.com
XP
374
Country
United States
ShadowOne333 said:
I was reading the arm9loaderhax page



What about the second option?
Can we dump our OTP file from a N3DS without the need of a downgrade in a N3DS console?
Click to expand...
right now you have to downgrade, maybe in the future you can somehow extract it from the N3ds without downgrading (doubt this can happen though!).
 
Mrrraou

Mrrraou

Well-Known Member
Member
Level 11
Joined
Oct 17, 2015
Messages
1,873
Trophies
0
XP
2,364
Country
France
ShadowOne333 said:
I was reading the arm9loaderhax page



What about the second option?
Can we dump our OTP file from a N3DS without the need of a downgrade in a N3DS console?
Click to expand...
Kernel9Loader does not clear the SHA_HASH register after use. As a result, the data stored here as K9L hands over to Kernel9 is the hash of OTP data used to seed the console-unique NAND keystore decryption key set on keyslot 0x11.
Click to expand...
It could allow installing arm9loaderhax, yes, as only the SHA hash is needed IIRC.
But this here totally requires an hardmod, or to already have a sort of "arm9loaderhax".
 
Last edited by Mrrraou,
General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: Seasons in the abyss lol