ROM Hack [Release] 3DS_CTR_Decryptor-VOiD

[piratesephiroth]

I'll be sitting, waiting, wishing in the meantime

 

[Mikecrowfone]

Could someone explain why we need to launch it on the 3DS to decrypt it? Couldn't someone with a 4.5 3DS just extract the key or replicate the operation going on in the 3DS that generates the xor pads? If our goal is simply to extract the contents of the ROM file?

You have no idea what this tool does do you?

You can't replicate it outside of the 3ds. The 3ds has a hardware AES encryption engine, that's why it has to go through the 3ds.

 

[bobmcjr]

It froze at 17% (0x11400000 bytes out of 0x63F00000 bytes), but I XOR'd what I got and I now have IVFC magic, and extracted some files. Note that the 3dshax ctrtool should be used, not neimod's.

 

[gudenau]

Running now...

 

[Kakkoii]

You have no idea what this tool does do you?

You can't replicate it outside of the 3ds. The 3ds has a hardware AES encryption engine, that's why it has to go through the 3ds.

That's why I was asking... If it's hardware AES, then ok, yeah, no way to do that then. I thought perhaps a plain-text attack would be sufficient here given we can decrypt and thus have our cypher and plain text.

Does that mean we'll never be able to do a totally PC based decryption since we have no viable way of obtaining the hardware AES keys? Or is there another potential way to get around that at some point...

edit: guess not, judging by the situation on the iPhone still
http://theiphonewiki.com/wiki/AES_Keys
though..
http://www.securitylearn.net/2012/04/22/extracting-aes-keys-from-iphone/

 

[Megashaymin]

Is it suppose to get stuck on creating pad 03? Im using it on Pokemon X.

 

[Mikecrowfone]

That's why I was asking... If it's hardware AES, then ok, yeah, no way to do that then. I thought perhaps a plain-text attack would be sufficient here given we can decrypt and thus have our cypher and plain text.

Does that mean we'll never be able to do a totally PC based decryption since we have no viable way of obtaining the hardware AES keys? Or is there another potential way to get around that at some point...

edit: guess not, judging by the situation on the iPhone still
http://theiphonewiki.com/wiki/AES_Keys
though..
http://www.securitylearn.net/2012/04/22/extracting-aes-keys-from-iphone/

Glad I helped clarifying a bit.

Chances for PC based decryption isn't high. Since the main purposes of rom decryption is to for translations, mods, map packs etc, it would be a large undertaking to do so. Decrypting on a 3ds isn't really a bother

 

[Kakkoii]

Decrypting on a 3ds isn't really a bother

It is when so many people don't have a 4.5 3DS... Guess I just have to hope for people to upload some decrypted/unpacked ROMs then =/

 

[aliak11]

How do I use ctrtool?

 

[Nic333]

Is it suppose to get stuck on creating pad 03? Im using it on Pokemon X.

The RomFS (Pad03) from Pokemon X/Y are too big and will crash after a some time, this is everything what i got when trying to create the Pad03:

 

[kyogre123]

Hmmm I need some help here... I'm completely new to the xoring process... I think I xored the right file that contains what I want to extract, what should I do with the .XOR file to "uncompress" it?

 

[Snailface]

Hmmm I need some help here... I'm completely new to the xoring process... I think I xored the right file that contains what I want to extract, what should I do with the .XOR file to "uncompress" it?

use 3dsexplorer's 'xor tool'. Input the xorpad and the file you wish to decrypt as 'first file' and 'second file' respectively and then save the output.

 

[bobmcjr]

I tried a different SD card and got to 0x2c000000 instead of 0x11400000, but I noticed it seems to time out after about an hour. Could someone modify the Launcher.dat to either continue where it left off, or chop up the pads into 100-300MB chunks?


Edit: got to 0x39D00000, and again it stopped after about an hour. Regardless of how fast the sd card is, it seems like the 1 hour max can't be avoided.

 

[kyogre123]

use 3dsexplorer's 'xor tool'. Input the xorpad and the file you wish to decrypt as 'first file' and 'second file' respectively and then save the output.

Thank you, but what can I do with that output to extract the files? 3dsexplorer just says that the file is unsupported when I try to open it.

 

[cracker]

Great job guys! I'll be checking this out as soon as it can to see what fun I can have.

Could someone explain why we need to launch it on the 3DS to decrypt it? Couldn't someone with a 4.5 3DS just extract the key or replicate the operation going on in the 3DS that generates the xor pads? If our goal is simply to extract the contents of the ROM file?

The method used to produce the XOR key is buried inside the CPU. It would require decapping and analyzing the chip.

 

[Mikecrowfone]

It is when so many people don't have a 4.5 3DS... Guess I just have to hope for people to upload some decrypted/unpacked ROMs then =/

I guess that's true in a way. But if you do not have a 4.5 3ds, how on earth can you test your project?

 

[longxa762]

As a noob what is this for?

 

[Vappy]

As a noob what is this for?

Part of the process for decrypting ROMs. If you don't understand it in terms that have already been posted, this isn't for you.

I guess that's true in a way. But if you do not have a 4.5 3ds, how on earth can you test your project?

Buy one. Or get other people to test it for you.

 

[Nic333]

Ok, how to i use the Xorpad created by the padgen?

 

[andibad]

interesting ...

i will try it later (right now, my 3DS at home ).