Hacking [Release] Python script to generate the rsa_kek!

[EclipseSin]

I can probably publish it here, as it's in the exosphere source code.
See "smc_user.c"

that works. Thanks.

 

[SimonMKWii]

XOR kek seed 3 (E54D...) as input 1 with kek mask 0 (4D87...) as input 2 using http://xor.pw
That's the rsa_oaep_kek_generation_source.

 

[DogParty]

Nice work dude, I have been looking into finding this info whenever I saw your posts on romSh and HCS, spent most of the night without any luck, glad you managed to find what you were looking for

Well do we know that the eShop functions the same? It would be ridiculous for Nintendo to use the same client-side verification for the downloads. Are we certain the the title keys are always the same and that the server always returns a bit-for-bit equivalent copy of the game? They could be encrypting the games server-side with your account-specific decryption key. That way it wouldn't decrypt if you use someone else's key. They also could (and should) have gated the download based on your oauth token. So rather than having a static URL for the file you have to make a request to the API with your token to return a temporary link to the account-encrypted game. If the server determines you don't have rights to that game it would return an error code.

tl;dr: why in the fuck would Nintendo still use their fundamentally broken eShop delivery model after it was blown wide open? Just because we are able to get title keys doesn't necessarily mean the eShop functions the same way as it does on the 3ds.

 

[EclipseSin]

DBD7....?

 

[SimonMKWii]

DBD7....?

I seriously don't know how you managed to get that.
http://xor.pw/
Put this in input 1: E54DXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Put this in input 2: 4D87XXXXXXXXXXXXXXXXXXXXXXXXXXXX
The output is the key. It's not hard.

--------------------- MERGED ---------------------------

a8ca... etc

 

[EclipseSin]

I seriously don't know how you managed to get that.
http://xor.pw/
Put this in input 1: E54DXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Put this in input 2: 4D87XXXXXXXXXXXXXXXXXXXXXXXXXXXX
The output is the key. It's not hard.

--------------------- MERGED ---------------------------

a8ca... etc

Yea no. I got that key. Lol. I used the others you posted elsewhere.

--------------------- MERGED ---------------------------

I was trying to verify the generated one. Its fine.

 

[TheMCNerd2017]

Are the keys we have to provide console-unique?

EDIT: Also tried running the script, gives an error on the last line.

 

[ehnoah]

So just in case, could I just buy Odysee, dump it, get Key Data and sell it? And then Download it from E-Shop?

 

[torekiki]

Are the keys we have to provide console-unique?

EDIT: Also tried running the script, gives an error on the last line.

where I can find that script?
thanks

 

[SimonMKWii]

where I can find that script?
thanks

 

[TiMeBoMb4u2]

Are the keys we have to provide console-unique?
EDIT: Also tried running the script, gives an error on the last line.

Script worked fine, for me.

where I can find that script?
thanks

It's literally attached to the OP.

Yep; going to be one of those days.

 

[torekiki]

Script worked fine, for me.


It's literally attached to the OP.


Yep; going to be one of those days.

sorry, my fault.
I thought you needed a script (not the one in op! ) to generate eticket_rsa_kek_source and
eticket_rsa_kekek_source. How to find them?

 

[SimonMKWii]

You can find them both in the es sysmodule.
Open the "main" file from its ExeFS in a hex editor, and search for the leading bytes, which are provided in the python script.

 

[TiMeBoMb4u2]

You can find them both in the es sysmodule.
Open the "main" file from its ExeFS in a hex editor, and search for the leading bytes, which are provided in the python script.

...or Google.

 

[TheMCNerd2017]

Script worked fine, for me.

Well then I have no idea what is wrong on my end. I downloaded the script again(into my Downloads folder) and inputted the required information into the script. Still gave me an error on line 21 when I executed it.

 

[TiMeBoMb4u2]

Well then I have no idea what is wrong on my end. I downloaded the script again(into my Downloads folder) and inputted the required information into the script. Still gave me an error on line 21 when I executed it.
View attachment 122158

What version of Python do you have installed?

 

[TheMCNerd2017]

What version of Python do you have installed?

Version 3.6.

 

[Hephaestus]

 

[TiMeBoMb4u2]

Version 3.6.

You need v2.x

 

[TheMCNerd2017]

You need v2.x

Yeah, I already figured that out when I remembered that most developers still use 2.x for some reason. Anyways, it finally worked and I got a key in return. How do I know if it's correct?