PS4 crypto coprocessor exploit found, allows for dumping of console keys

ps4-slim-and-pro-image-block-01-en-23jul20 (1).png

Yet another PlayStation 4 exploit has been found. While it may not be one that lets you run CFW, this bug has its own intriguing uses. Scene hacker Flat_z managed to come up with a code that exploits the PS4's Crypto Coprocessor interface. This can lead to being able to bruteforce certain specific keys from the console, such as the AES/HMAC PFS, portability keys, and VTRM, which can then be dumped. This exploit can be used on any PS4 on firmwares below 7.55, as that's when Sony apparently patched the issue. While this doesn't have much use for the end-user right now, we'll be able to see what developers can do with them and if they can further the PlayStation 4 hacking scene.


:arrow: Source
 

Randqalan

The Wheel of Time Turns
Member
Joined
Jan 25, 2014
Messages
1,077
Trophies
1
Location
M00N Base quanto
XP
2,035
Country
United States
Nice to see this kind of development in the PS4 scene, even if it is only for 7.55 atm. It would be nice to see the PS4 scene start breaking more ground, given how slow things have been.
For once with 9.00 exploit not really. major web and fat and updates to bin files for almost everything from 5.05 great devs to update almost everything already.
 

Sphaa

Well-Known Member
Newcomer
Joined
Mar 4, 2007
Messages
75
Trophies
1
XP
647
Country
Norway
Will these keys make it possible to the swap out a broken Blu-ray drive with one from another concole?
 

Jayro

MediCat USB Dev
Developer
Joined
Jul 23, 2012
Messages
12,970
Trophies
4
Location
WA State
Website
ko-fi.com
XP
16,992
Country
United States
If you find a PS4 Slim/Pro with 9.00 it's well worth buying. If interested, better hurry it up before Sony releases yet another "stability" firmware.
I think my pro is on 8.xx firmware, haven't turned it on in months.
 
  • Like
Reactions: Sterophonick

Marc_LFD

Well-Known Member
Member
Joined
Nov 3, 2021
Messages
5,518
Trophies
1
Age
34
XP
8,924
Country
United States
I think my pro is on 8.xx firmware, haven't turned it on in months.
Don't let it automatically update, but since it wasn't turned on that long it should be safe.

Firsr thing I did to our PS4 Slim was disable internet so it wouldn't somehow update by itself.



Gonna follow this tutorial and hack it. I've got the USB prepared and games to install.

It's ridiculous Sony shipped PS4s only with 500GB to 1TB since games are a lot bigger these days. RDR2 is over 100GB+. Yikes.
 

cearp

瓜老外
Developer
Joined
May 26, 2008
Messages
8,725
Trophies
2
XP
8,506
Country
Tuvalu
Are any of the keys this dumps 'per console'? If so, probably best to dump them before I update to 9.0 right?
But this currently is just code, not a payload.
 

kid sampson

Well-Known Member
Member
Joined
Jul 20, 2006
Messages
329
Trophies
1
XP
886
Country
United States
I just want to be able to launch my already installed retail games without inserting a disc or dumping and installing them again.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Xdqwerty @ Xdqwerty:
    @Psionic Roshambo, game boys per song?
  • Psionic Roshambo @ Psionic Roshambo:
    I used to have a few of those with Direct Sound on XP and Audigy Platinum sound card with high end speakers was a glorious time for audio
  • Psionic Roshambo @ Psionic Roshambo:
    Lol no Gigabytes per song
  • K3Nv2 @ K3Nv2:
    Some websites have full studio rips of production kind of hard to find for obvious reasons
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Not sure current audio codec based sound built in to motherboards can handle the bit depth those used
  • Xdqwerty @ Xdqwerty:
    @Psionic Roshambo, I just use mp3 files of the best quality i can find
    +1
  • K3Nv2 @ K3Nv2:
    I say fuck it and open Spotify 80% of your musics already on it probably
    +1
  • Xdqwerty @ Xdqwerty:
    or just put in on yt
  • Psionic Roshambo @ Psionic Roshambo:
    Xdqwerty for most people hearing anything better than 256Kbps MP3 they cannot tell the difference
  • Xdqwerty @ Xdqwerty:
    play the songs video
  • K3Nv2 @ K3Nv2:
    Audiophiles mjs second allegation
  • Psionic Roshambo @ Psionic Roshambo:
    Pedo Audio what ever MJ was into he lost a glove
  • K3Nv2 @ K3Nv2:
    Mjs glove fit
  • Psionic Roshambo @ Psionic Roshambo:
    Billies Jeans did not
  • K3Nv2 @ K3Nv2:
    Mj you are the father
  • K3Nv2 @ K3Nv2:
    Wifi 7 routers are already out
    +1
  • The Real Jdbye @ The Real Jdbye:
    and i'm still here on wifi 5
  • The Real Jdbye @ The Real Jdbye:
    all my stuff is wired anyway
  • The Real Jdbye @ The Real Jdbye:
    what annoys me is my server has 2.5g but i have nothing else that does
  • K3Nv2 @ K3Nv2:
    No real point in 7 unless you have 5gb which no real point in it
  • Xdqwerty @ Xdqwerty:
    wdym with wifi number
  • K3Nv2 @ K3Nv2:
    It's just a radio frequency
  • Psionic Roshambo @ Psionic Roshambo:
    I think I have a WiFi 6e
    Psionic Roshambo @ Psionic Roshambo: I think I have a WiFi 6e