Hacking [stupid idea] Homebrew Game Carts?

gudenau

Largely ignored
OP
Member
Joined
Jul 7, 2010
Messages
3,841
Trophies
2
Location
/dev/random
Website
www.gudenau.net
XP
4,344
Country
United States
I came up with a stupid idea today, take the 3DS ROM format of some homebrew and shove it into a DIY game cart.

I know this is impracticle and stupid, I'm just kinda curious about how hard it would be to make a normal looking and feeling 3DS cart for homebrew on modded consoles.

I understand this wouldn't work without a CFW.

This is not intended as a piracy discussion.

This is for civil discussion and learning purposes.
 

Navonod

Luigi from Luigi's Mansion
Member
Joined
Sep 14, 2016
Messages
601
Trophies
0
Age
32
XP
1,429
Country
United States
Would be interesting. I always thought of cubic ninja as a homebrew game cart because that's all it's good for.

Edit: Would be nice to have all homebrew apps and cfw on a game cart with out having to modify the system in any way. Kinda how R4i flash carts work. But I don't see that happening honestly.
 
Last edited by Navonod,

zoogie

playing around in the dsiware
Developer
Joined
Nov 30, 2014
Messages
8,468
Trophies
2
XP
14,181
Country
Micronesia, Federated States of
You should, in theory, be able to run homebrew on sky3ds carts.
I've edited commercial dumps with a byte here and there and they will still run with cfw sig patches.
The sky3ds will reject homebrew cci's built with makerom though.

Should be able to work with modifications, however.
 
  • Like
Reactions: gnmmarechal

gudenau

Largely ignored
OP
Member
Joined
Jul 7, 2010
Messages
3,841
Trophies
2
Location
/dev/random
Website
www.gudenau.net
XP
4,344
Country
United States
You should, in theory, be able to run homebrew on sky3ds carts.
I've edited commercial dumps with a byte here and there and they will still run with cfw sig patches.
The sky3ds will reject homebrew cci's built with makerom though.

Should be able to work with modifications, however.

Any idea what hardware is in there?

I should probably read the wiki too.

Edit:
Not much use.
 
Last edited by gudenau,

ThisIsDaAccount

Well-Known Member
Member
Joined
Apr 8, 2016
Messages
1,159
Trophies
0
XP
931
Country
United States
Sciresm has said on r/3dshacks that there's a key we need to make custom carts. Unfortunately, that key is not actually on the 3DS, it's on the carts themselves, so it won't be easy to dump. Gateway and Sky3DS have done it, but they obviously won't share it.

Edit: here's the source
 
Last edited by ThisIsDaAccount,
  • Like
Reactions: gnmmarechal

gudenau

Largely ignored
OP
Member
Joined
Jul 7, 2010
Messages
3,841
Trophies
2
Location
/dev/random
Website
www.gudenau.net
XP
4,344
Country
United States
Sciresm has said on r/3dshacks that there's a key we need to make custom carts. Unfortunately, that key is not actually on the 3DS, it's on the carts themselves, so it won't be easy to dump. Gateway and Sky3DS have done it, but they obviously won't share it.

Edit: here's the source

Interesting...

Guess I'll look into the sky thing, see if I can't find hardware pictures.

Edit:
Couldn't find any.
 
Last edited by gudenau,
D

Deleted User

Guest
Sciresm has said on r/3dshacks that there's a key we need to make custom carts. Unfortunately, that key is not actually on the 3DS, it's on the carts themselves, so it won't be easy to dump. Gateway and Sky3DS have done it, but they obviously won't share it.

Edit: here's the source
I wonder if this is what is preventing us from launching games from the SD card...
Well, one of the things at least

--------------------- MERGED ---------------------------

Sorry for double post, but I would just like to say that if we could write to our own gamecards, it would be amazing to have a cartridge with a custom sticker that has a ROM hack on it.
 

gudenau

Largely ignored
OP
Member
Joined
Jul 7, 2010
Messages
3,841
Trophies
2
Location
/dev/random
Website
www.gudenau.net
XP
4,344
Country
United States
I wonder if this is what is preventing us from launching games from the SD card...
Well, one of the things at least

--------------------- MERGED ---------------------------

Sorry for double post, but I would just like to say that if we could write to our own gamecards, it would be amazing to have a cartridge with a custom sticker that has a ROM hack on it.

I mean, launching stuff off of a SD card is fairly easy. Just install as a CIA.

The Sky3DS is one I would like to own, but it is extremely expensive. I wouldn't mind having an EZ-Flash Redux either.

I kinda want one right now just to take apart. :-P
 
D

Deleted User

Guest
Well, IIRC, the Gamecard controller is what receives the key and then sends the decrypted data to the system to read. The firmware for this is completely separate from ARM9 and probably won't be accessible without external hardwdare. I am not quite sure how you would take over this and get the key, but it is possible.

And theoretically, if we had this key, couldn't we encrypt what goes on the cartridge so that we could load it on stock? Probably wrong here, but just an idea.
 

gnmmarechal

Well-Known Member
Member
GBAtemp Patron
Joined
Jul 13, 2014
Messages
5,985
Trophies
2
Age
24
Location
https://gs2012.xyz
Website
gs2012.xyz
XP
5,588
Country
Portugal
Well, IIRC, the Gamecard controller is what receives the key and then sends the decrypted data to the system to read. The firmware for this is completely separate from ARM9 and probably won't be accessible without external hardwdare. I am not quite sure how you would take over this and get the key, but it is possible.

And theoretically, if we had this key, couldn't we encrypt what goes on the cartridge so that we could load it on stock? Probably wrong here, but just an idea.
Sigchecks are still a thing. Don't think it is the same key.
 

gudenau

Largely ignored
OP
Member
Joined
Jul 7, 2010
Messages
3,841
Trophies
2
Location
/dev/random
Website
www.gudenau.net
XP
4,344
Country
United States
Well, IIRC, the Gamecard controller is what receives the key and then sends the decrypted data to the system to read. The firmware for this is completely separate from ARM9 and probably won't be accessible without external hardwdare. I am not quite sure how you would take over this and get the key, but it is possible.

And theoretically, if we had this key, couldn't we encrypt what goes on the cartridge so that we could load it on stock? Probably wrong here, but just an idea.

The 3DS carts are basically one chip, can't MITM it.
 
D

Deleted User

Guest
The 3DS carts are basically one chip, can't MITM it.
What you just said went right over my head. Can you explain what you mean? What I am saying is that the gamecard has the special key that gets sent to the Cart controller, which then decrypts the game, and then the decrypted data gets sent to the console.
 

gudenau

Largely ignored
OP
Member
Joined
Jul 7, 2010
Messages
3,841
Trophies
2
Location
/dev/random
Website
www.gudenau.net
XP
4,344
Country
United States
What you just said went right over my head. Can you explain what you mean? What I am saying is that the gamecard has the special key that gets sent to the Cart controller, which then decrypts the game, and then the decrypted data gets sent to the console.

Uhm, your off the mark a bit.

So you know what HTTPS is right? That's basically what we are dealing with here. The communications between the console and the game cart are encrypted. On top of this there is the other encryption that also exists on CIA files and 3DS ROMs. I'll make a diagram when I get home.

--------------------- MERGED ---------------------------

Retail cartridges are signed? I didn't know that.

Everything is signed, more or less.
 

gudenau

Largely ignored
OP
Member
Joined
Jul 7, 2010
Messages
3,841
Trophies
2
Location
/dev/random
Website
www.gudenau.net
XP
4,344
Country
United States
jE8zbO7.png

I hope this is helpful. All the points where there is crypto on the top left block there are also signature checks, plus a couple that I did not put on there.

@blujay
 
Last edited by gudenau,
D

Deleted User

Guest
So, what are the checkmarks for? And why isn't there one next to Crypto on the Gamecart one?
 

You may also like...

General chit-chat
Help Users
    DinohScene @ DinohScene: yes, do continue in feeding the google botnet, get more RAM for chrome!