Hacking Discussion TSEC is broken

[DPyro]

I'll now try to provide a brief overview for all this.
TSEC is a controller used in most Tegra devices, including the Switch. Like many other controllers found in Tegra devices, it is powered by a Falcon microprocessor, but with additional crypto capabilities (via the SCP).

— Mike Heskin (@hexkyz) March 2, 2019

 

[zoogie]

Those tweets don't say anything about it being broken.

 

[Kubas_inko]

This says absolutely nothing about breaking the TSEC.

 

[zoogie]

This says absolutely nothing breaking the TSEC.

OP fail.
Here's the tweet that says that.

Due to this, it was uncertain if keys in future updates could be extracted or not... Until now.
Third time's the charm. I found a critical design flaw a few weeks ago and after a short brainstorm session with @SciresM, we were able to obliterate the TSEC's crypto scheme forever.

— Mike Heskin (@hexkyz) March 2, 2019

 

[Kubas_inko]

OP fail.
Here's the tweet that says that.
https://twitter.com/hexkyz/status/1101940127474032641

Then it should be: "TSEC is dead"

 

[V-Temp]

Indeed it is, and this will likely be reported to everyone (ie. bug bounty submission) and never released aside from Sept obfuscated delivery, because this has ramifications far and beyond the Switch. As discussed in the discord, this is by nVidia's own bragging, compromising 3 billion devices.

Oops.

 

[b17bomber]

Does this mean if TX knew what this is they could get around scires sept crypto thingy

 

[KirovAir]

Does this mean if TX knew what this is they could get around scires sept crypto thingy

Yes. But I'm sure TX is the last person on hexkyz' list to share this with.

 

[DPyro]

OP fail.
Here's the tweet that says that.

I posted the entire twitter thread.

 

[b17bomber]

Yes. But I'm sure TX is the last person on hexkyz' list to share this with.

Right, but then what was the purpose of posting that hash on twitter?

 

[KirovAir]

Right, but then what was the purpose of posting that hash on twitter?

Proof/showing off the 'crack' I suppose. When TSEC is eventually wide open for the rest of the world (which is inevitable after some time) you can validate that hexkyz indeed had pwned TSEC first.

 

[b17bomber]

Proof/showing off the 'crack' I suppose. When TSEC is eventually wide open for the rest of the world (which is inevitable after some time) you can validate that hexkyz indeed had pwned TSEC first.

Yea, he tweeted an explanation.

 

[proffk]

Its great to see a dedicated dev who is actively exploiting the nsw simillar as the flow for vita. Unlike the ps4 scene which is dead on 5.05.

 

[Snomannen_kalle]

Its great to see a dedicated dev who is actively exploiting the nsw simillar as the flow for vita. Unlike the ps4 scene which is dead on 5.05.

If I recall correctly, there is an exploit that works on even the latest FW, but it's the last one they have, so they don't want to release it either before Sony patches it or EOL, whichever comes first

 

[smf]

Proof/showing off the 'crack' I suppose. When TSEC is eventually wide open for the rest of the world (which is inevitable after some time) you can validate that hexkyz indeed had pwned TSEC first.

Or maybe he was just the first to talk about it?

 

[kkcheong]

Posting in legendary thread

 

[Phenj]

What does this mean for us?

 

[aos10]

What does this mean for us?

A new way to hack the switch for all non patched switch, you still need to push the payload.

 

[smf]

What does this mean for us?

It means that a method to get hold of some information that was hoarded by nintendo is now hoarded by a few people outside nintendo.

I'm not sure what practical difference it makes. If nobody wants to release the keys or the exploit, then we're still no better off.

We'll see what happens when the next atmosphere comes out.

 

[Dungeonseeker]

What does this mean for us?

Absolutely nothing for a long ass time yet.

 

[josete2k]

What does this mean for us?

Nintendo can't use the TSEC against CFW.

 

[bodefuceta]

I hope SX gets stuck in 6.2 forever.

 

[gizmomelb]

and derailed..

 

[SapphireExile]

Interesting. I wonder how Nvidia will address this, considering it impacts more than just the Switch.