PS3/PSP private keys released.

Discussion in 'GBAtemp & Scene News' started by Rydian, Jan 3, 2011.

  1. Rydian
    OP

    Rydian Resident Furvert™

    Member
    27,883
    8,128
    Feb 4, 2010
    United States
    Cave Entrance, Watching Cyan Write Letters
    The private keys for the PS3 (and PSP) have been found.

    Who did it?[/p]A hole in the encryption scheme of the PS3 was found by team fail0verflow. Geohot used the information to find and publicly post the keys. Mathieulh then did some digging in the PS3 and found the encryption keys for the PSP as well (the PS3 and PSP interchange content under certain situations).

    What are keys?[/p]The reason game systems will only run official content is because the company in question (e.g. Sony, Nintendo, or Microsoft) builds the system so that it will only accept digitally "signed" content. This "signature" basically takes the form of a key used to encrypt/lock the game/program. If the system is presented with a program that doesn't have the key incorporated into it, it refuses to run it.

    This is how game companies keep people from running pirated games (when copied, part of the signature/lock is destroyed, so to speak), and it's also how they keep a tight control over what content their system plays. If you're a game designer and you want to make a pornographic game for the Wii, you can't unless Nintendo specifically allows you to by signing your content, which of course they won't. This makes sure that the system isn't ruined by an influx of crappy games, as happened with systems before the NES's age. A game company uses this to make sure only "quality" games make it through... and it's a way of making sure they get a cut of the profits of each game, of course.

    How does this relate to current hacks?[/p]This content authentication I described is present in every modern game system.
    All the hacks/mods we're used to target these protection systems in order to disable them.

    Softmodding a Wii?
    A flash cart for the DS/i?
    FreeMCBoot for the PS2?
    A jailbreak dongle for the PS3?
    Custom firmware for the PSP?

    The purpose of each of those mods is to stop the system from checking for the signature.

    What can we do with the keys?[/p]With the keys, we can sign our own programs. We no longer have to hack the PS3 in order to run custom content, because our programs will have the signature that the system checks for. This means that now, somebody can make a program that will run on ANY PS3, regardless of it's firmware version or whether it's been modded or not. This opens the doors for anybody with a PS3 to develop content (not just hackers), and you don't need a hacked PS3 to run anything they make. This blows the PS3 wide open.

    Some of you may ask about the Wii's key we have. That is the common key, which is not the key used to sign content (that's the private key). Yes, this means that the PS3 is even more open than the Wii now.


    How can Sony stop this?[/p]Unfortunately, their options are extremely limited, for the following reasons.[*]Everything for the PS3 is signed with the keys.
    If Sony was to release a firmware update to simply block things signed with these keys, it would block every PS3 game that currently exists.

    [*]Sony has no legal way to force people to not develop for their system in the first place.
    There are various laws in place allowing interoperability and compatibility. This is part of the reason that game systems use this type of security. Since game companies have no way to sue people or prevent them from developing for the system through laws, they require that the system only run things signed with a key, and then they simply refuse to give the key to anybody else. Unfortunately for them, the keys have been found by outsiders.

    [*]Sony could attempt to claim that possession or use of the keys are illegal, but that's on shaky ground.
    A "key" is really just a number (a really big one). Sony would have to convince the courts that knowledge of a certain number is illegal. While something like that might happen when it deals with national security or protecting citizens during a war, Sony's going to have a hard time convincing the courts to do it for a video game system. [​IMG]For some background on the legal aspects... this same sort of thing happened with the encryption key for the HD DVD format, and while companies sent out many threat letters, no site was actually sued or taken to court over posting the key (even those like digg that did so defiantly). I'm not sure Sony has a legal way to stop people from using the key, at least in the US.


    UPDATE: Sony's managed to pull some tricks that were previously unknown to developers, it seems they anticipated something like this. Newer firmwares cannot be hacked, but at the cost of usable recovery mode (the PS3 will not exit recovery mode on newer firmwares). In addition Sony's attempting to sue over this, but it seems to be going oddly...
     
  2. xakota

    xakota GBAtemp Fan

    Member
    340
    2
    Mar 18, 2010
    United States
    So this is true for the PSPGo as well? If homebrew is signed properly any unhacked PSPGo will be able to run custom content like the ISO loader?

    And speaking of ISOs, is it possible to sign those too so that any unhacked PSP can read them off a memory stick?
     
  3. nintendoom

    nintendoom Nintendoom

    Member
    1,116
    28
    Sep 12, 2009
    Viridian City
    does that mean

    Wii
    ----
    PS3

    ???
    [​IMG]
     
  4. Rydian
    OP

    Rydian Resident Furvert™

    Member
    27,883
    8,128
    Feb 4, 2010
    United States
    Cave Entrance, Watching Cyan Write Letters
    It's actually the binaries in the ISO that are signed/encrypted, but you need to be able to load the ISO first before you get to the binaries, that's where the trouble is.
     
  5. leeday100196

    leeday100196 GBAtemp's Official Infernape™

    Member
    621
    2
    Sep 24, 2010
    My computer in Sharpedo Bluff
    omg i just GOT a PS3 and now we can FREELY hack it? WAHOO! when i think of keys, the first thing that comes to mind is the time-travel binary number from futurama :010011....
     
  6. gifi4

    gifi4 How am I a 'New Member'?

    Member
    2,352
    143
    Apr 21, 2010
    Melbourne
    Wow, correct me if I'm wrong but now piracy for the ps3 is going to be so much simpler? The only problem I see with this is people will have to 'input' the key into the game data then re-release the dump of the game for people to download...That's why I think I'm wrong with my theory lol.
     
  7. Rydian
    OP

    Rydian Resident Furvert™

    Member
    27,883
    8,128
    Feb 4, 2010
    United States
    Cave Entrance, Watching Cyan Write Letters
    If you're asking if the PS3's security is now below the Wii's, I'd say yes. Team fail0verflow contains members from team Twiizers, who themselves labeled the PS3's signature security "epic fail" in their presentation on it.

    It's still to be seen how Sony will respond to this. Other users have brought up interesting options on hashing and black/white lists for newer firmwares to block off homebrew while allowing all the official games to run, but it's certainly not going to be nearly as simple as it has in the past.
     
  8. 8BitWalugi

    8BitWalugi Taiyohhhhhh!

    Member
    3,431
    276
    Mar 22, 2008
    Australia
    Side 7
    I got a PS3 last September. What a great time for me to buy one. [​IMG]
     
  9. Sportsmaniac1322

    Sportsmaniac1322 GBAtemp Maniac

    Member
    1,183
    0
    Jun 26, 2008
    United States
    Forman's Basement
    This blows doors wide open! Almost anything is possible now, even more so than Wii, which is pretty much 100% hacked at this point. I really don't see how Sony is going to stop this...
     
  10. RupeeClock

    RupeeClock Colors 3D Snivy!

    Member
    6,389
    861
    May 15, 2008
    There's all kinds of ways to go about this.
    One of the simplest would be this: Make a signed program for installing a custom firmware or a backup loader, which then ignores the need for signed software.
     
  11. ShinyLatios

    ShinyLatios Local "That Guy"

    Member
    1,055
    417
    Nov 17, 2009
    Netherlands
    or just make a program converting PS3 ISO to PSN content and signing it afterwards. you wouldn't need anything but an USB stick!
     
  12. xakota

    xakota GBAtemp Fan

    Member
    340
    2
    Mar 18, 2010
    United States
    I see. Well what about burning signed ISOs to a blank UMD? Wouldn't that have to work?

    And does this mean there could be a signed program to install custom firmware or downgrade without the need for a pandora battery or MMS?

    (Because I just bought one of each >.>)
     
  13. RupeeClock

    RupeeClock Colors 3D Snivy!

    Member
    6,389
    861
    May 15, 2008
    ...Who on earth has the means to burn their own UMDs? Where do you even GET a blank UMD?

    But yeah, you could easily make a custom firmware installer, signed as though Sony published it themselves.
    No pandora battery necessary or anything, you could even install something to the PSP Go.
     
  14. DigitalDeviant

    DigitalDeviant GBAtemp Addict

    Member
    2,012
    63
    Feb 14, 2010
    United States
    Solar Federation
     
  15. Terenigma

    Terenigma Terenigma everywhere

    Member
    1,624
    451
    Nov 10, 2008
    Earth
    I read about this before but now i finally understand what all those tech nerds were on about and all i can say is LOL
     
  16. TwinRetro

    TwinRetro Global Moderator

    Global Moderator
    6,246
    5,070
    Aug 29, 2008
    Djibouti
    Hiatus Hell

    Blank UMD's do not exist in any form, and neither do UMD "burners" except for in Sony's factories. That's the point of the UMD. It's a proprietary format.
     
  17. FireValk01

    FireValk01 Advanced Member

    Member
    81
    3
    Apr 21, 2007
    United States
    so as far as the ps3 is concerned does this mean that you could have your homebrew on your ps3 and still play you're games online and use psn?
     
  18. iFish

    iFish Slower than a 90s modem

    Member
    4,223
    159
    Jul 11, 2009
    Canada
    Montreal, QC
    Nice way to one-up my thread [​IMG]

    This one is better I guess.
     
  19. xakota

    xakota GBAtemp Fan

    Member
    340
    2
    Mar 18, 2010
    United States
    Oh, really? Huh, I could have sworn I remember seeing some kind of blank UMD kit at Walmart or something but that was a long time ago...
    Sorry >.
     
  20. FireValk01

    FireValk01 Advanced Member

    Member
    81
    3
    Apr 21, 2007
    United States
    those were probably just mini dvd's