PS3/PSP private keys released.

Discussion in 'GBAtemp & Scene News' started by Rydian, Jan 3, 2011.

Jan 3, 2011

PS3/PSP private keys released. by Rydian at 6:55 AM (53,334 Views / 0 Likes) 313 replies

  1. Rydian
    OP

    Member Rydian Resident Furvert™

    Joined:
    Feb 4, 2010
    Messages:
    27,883
    Location:
    Cave Entrance, Watching Cyan Write Letters
    Country:
    United States
    The private keys for the PS3 (and PSP) have been found.

    Who did it?[/p]A hole in the encryption scheme of the PS3 was found by team fail0verflow. Geohot used the information to find and publicly post the keys. Mathieulh then did some digging in the PS3 and found the encryption keys for the PSP as well (the PS3 and PSP interchange content under certain situations).

    What are keys?[/p]The reason game systems will only run official content is because the company in question (e.g. Sony, Nintendo, or Microsoft) builds the system so that it will only accept digitally "signed" content. This "signature" basically takes the form of a key used to encrypt/lock the game/program. If the system is presented with a program that doesn't have the key incorporated into it, it refuses to run it.

    This is how game companies keep people from running pirated games (when copied, part of the signature/lock is destroyed, so to speak), and it's also how they keep a tight control over what content their system plays. If you're a game designer and you want to make a pornographic game for the Wii, you can't unless Nintendo specifically allows you to by signing your content, which of course they won't. This makes sure that the system isn't ruined by an influx of crappy games, as happened with systems before the NES's age. A game company uses this to make sure only "quality" games make it through... and it's a way of making sure they get a cut of the profits of each game, of course.

    How does this relate to current hacks?[/p]This content authentication I described is present in every modern game system.
    All the hacks/mods we're used to target these protection systems in order to disable them.

    Softmodding a Wii?
    A flash cart for the DS/i?
    FreeMCBoot for the PS2?
    A jailbreak dongle for the PS3?
    Custom firmware for the PSP?

    The purpose of each of those mods is to stop the system from checking for the signature.

    What can we do with the keys?[/p]With the keys, we can sign our own programs. We no longer have to hack the PS3 in order to run custom content, because our programs will have the signature that the system checks for. This means that now, somebody can make a program that will run on ANY PS3, regardless of it's firmware version or whether it's been modded or not. This opens the doors for anybody with a PS3 to develop content (not just hackers), and you don't need a hacked PS3 to run anything they make. This blows the PS3 wide open.

    Some of you may ask about the Wii's key we have. That is the common key, which is not the key used to sign content (that's the private key). Yes, this means that the PS3 is even more open than the Wii now.


    How can Sony stop this?[/p]Unfortunately, their options are extremely limited, for the following reasons.[*]Everything for the PS3 is signed with the keys.
    If Sony was to release a firmware update to simply block things signed with these keys, it would block every PS3 game that currently exists.

    [*]Sony has no legal way to force people to not develop for their system in the first place.
    There are various laws in place allowing interoperability and compatibility. This is part of the reason that game systems use this type of security. Since game companies have no way to sue people or prevent them from developing for the system through laws, they require that the system only run things signed with a key, and then they simply refuse to give the key to anybody else. Unfortunately for them, the keys have been found by outsiders.

    [*]Sony could attempt to claim that possession or use of the keys are illegal, but that's on shaky ground.
    A "key" is really just a number (a really big one). Sony would have to convince the courts that knowledge of a certain number is illegal. While something like that might happen when it deals with national security or protecting citizens during a war, Sony's going to have a hard time convincing the courts to do it for a video game system. [​IMG]For some background on the legal aspects... this same sort of thing happened with the encryption key for the HD DVD format, and while companies sent out many threat letters, no site was actually sued or taken to court over posting the key (even those like digg that did so defiantly). I'm not sure Sony has a legal way to stop people from using the key, at least in the US.


    UPDATE: Sony's managed to pull some tricks that were previously unknown to developers, it seems they anticipated something like this. Newer firmwares cannot be hacked, but at the cost of usable recovery mode (the PS3 will not exit recovery mode on newer firmwares). In addition Sony's attempting to sue over this, but it seems to be going oddly...
     


  2. xakota

    Member xakota GBAtemp Fan

    Joined:
    Mar 18, 2010
    Messages:
    340
    Country:
    United States
    So this is true for the PSPGo as well? If homebrew is signed properly any unhacked PSPGo will be able to run custom content like the ISO loader?

    And speaking of ISOs, is it possible to sign those too so that any unhacked PSP can read them off a memory stick?
     
  3. nintendoom

    Member nintendoom Nintendoom

    Joined:
    Sep 12, 2009
    Messages:
    1,101
    Location:
    Viridian City
    Country:
    Antarctica
    does that mean

    Wii
    ----
    PS3

    ???
    [​IMG]
     
  4. Rydian
    OP

    Member Rydian Resident Furvert™

    Joined:
    Feb 4, 2010
    Messages:
    27,883
    Location:
    Cave Entrance, Watching Cyan Write Letters
    Country:
    United States
    It's actually the binaries in the ISO that are signed/encrypted, but you need to be able to load the ISO first before you get to the binaries, that's where the trouble is.
     
  5. leeday100196

    Member leeday100196 GBAtemp's Official Infernape™

    Joined:
    Sep 24, 2010
    Messages:
    621
    Location:
    My computer in Sharpedo Bluff
    Country:
    Australia
    omg i just GOT a PS3 and now we can FREELY hack it? WAHOO! when i think of keys, the first thing that comes to mind is the time-travel binary number from futurama :010011....
     
  6. gifi4

    Member gifi4 How am I a 'New Member'?

    Joined:
    Apr 21, 2010
    Messages:
    2,352
    Location:
    Melbourne
    Country:
    Australia
    Wow, correct me if I'm wrong but now piracy for the ps3 is going to be so much simpler? The only problem I see with this is people will have to 'input' the key into the game data then re-release the dump of the game for people to download...That's why I think I'm wrong with my theory lol.
     
  7. Rydian
    OP

    Member Rydian Resident Furvert™

    Joined:
    Feb 4, 2010
    Messages:
    27,883
    Location:
    Cave Entrance, Watching Cyan Write Letters
    Country:
    United States
    If you're asking if the PS3's security is now below the Wii's, I'd say yes. Team fail0verflow contains members from team Twiizers, who themselves labeled the PS3's signature security "epic fail" in their presentation on it.

    It's still to be seen how Sony will respond to this. Other users have brought up interesting options on hashing and black/white lists for newer firmwares to block off homebrew while allowing all the official games to run, but it's certainly not going to be nearly as simple as it has in the past.
     
  8. 8BitWalugi

    Member 8BitWalugi Taiyohhhhhh!

    Joined:
    Mar 22, 2008
    Messages:
    3,271
    Location:
    Side 7
    Country:
    Australia
    I got a PS3 last September. What a great time for me to buy one. [​IMG]
     
  9. Sportsmaniac1322

    Member Sportsmaniac1322 GBAtemp Maniac

    Joined:
    Jun 26, 2008
    Messages:
    1,183
    Location:
    Forman's Basement
    Country:
    United States
    This blows doors wide open! Almost anything is possible now, even more so than Wii, which is pretty much 100% hacked at this point. I really don't see how Sony is going to stop this...
     
  10. RupeeClock

    Member RupeeClock Colors 3D Snivy!

    Joined:
    May 15, 2008
    Messages:
    6,307
    Country:
    United Kingdom
    There's all kinds of ways to go about this.
    One of the simplest would be this: Make a signed program for installing a custom firmware or a backup loader, which then ignores the need for signed software.
     
  11. ShinyLatios

    Member ShinyLatios Local "That Guy"

    Joined:
    Nov 17, 2009
    Messages:
    1,051
    Country:
    Netherlands
    or just make a program converting PS3 ISO to PSN content and signing it afterwards. you wouldn't need anything but an USB stick!
     
  12. xakota

    Member xakota GBAtemp Fan

    Joined:
    Mar 18, 2010
    Messages:
    340
    Country:
    United States
    I see. Well what about burning signed ISOs to a blank UMD? Wouldn't that have to work?

    And does this mean there could be a signed program to install custom firmware or downgrade without the need for a pandora battery or MMS?

    (Because I just bought one of each >.>)
     
  13. RupeeClock

    Member RupeeClock Colors 3D Snivy!

    Joined:
    May 15, 2008
    Messages:
    6,307
    Country:
    United Kingdom
    ...Who on earth has the means to burn their own UMDs? Where do you even GET a blank UMD?

    But yeah, you could easily make a custom firmware installer, signed as though Sony published it themselves.
    No pandora battery necessary or anything, you could even install something to the PSP Go.
     
  14. DigitalDeviant

    Member DigitalDeviant GBAtemp Addict

    Joined:
    Feb 14, 2010
    Messages:
    2,002
    Location:
    Solar Federation
    Country:
    United States
     
  15. Terenigma

    Member Terenigma Terenigma everywhere

    Joined:
    Nov 10, 2008
    Messages:
    1,619
    Location:
    Earth
    Country:
    United Kingdom
    I read about this before but now i finally understand what all those tech nerds were on about and all i can say is LOL
     
  16. TwinRetro

    Global Moderator TwinRetro Don't start nothin', Won't be nothin'

    Joined:
    Aug 29, 2008
    Messages:
    6,181
    Location:
    Las Vegas, NV
    Country:
    United States

    Blank UMD's do not exist in any form, and neither do UMD "burners" except for in Sony's factories. That's the point of the UMD. It's a proprietary format.
     
  17. FireValk01

    Member FireValk01 Advanced Member

    Joined:
    Apr 21, 2007
    Messages:
    81
    Country:
    United States
    so as far as the ps3 is concerned does this mean that you could have your homebrew on your ps3 and still play you're games online and use psn?
     
  18. iFish

    Member iFish Slower than a 90s modem

    Joined:
    Jul 11, 2009
    Messages:
    4,222
    Location:
    Montreal, QC
    Country:
    Canada
    Nice way to one-up my thread [​IMG]

    This one is better I guess.
     
  19. xakota

    Member xakota GBAtemp Fan

    Joined:
    Mar 18, 2010
    Messages:
    340
    Country:
    United States
    Oh, really? Huh, I could have sworn I remember seeing some kind of blank UMD kit at Walmart or something but that was a long time ago...
    Sorry >.
     
  20. FireValk01

    Member FireValk01 Advanced Member

    Joined:
    Apr 21, 2007
    Messages:
    81
    Country:
    United States
    those were probably just mini dvd's
     

Share This Page