Hacking Virtual console and eshop Roms

  • Thread starter Thread starter da1e85
  • Start date Start date
  • Views Views 5,500
  • Replies Replies 11
I'm not fussed for eshop games really just wasn't sure if they played or not thanks though.
 
Has anyone tried to run one of BBB's eshop dumps? They're packed using retail encryption. Could work on Sky3DS...

No, they are not. These dumps are decrypted (signed with 00 key). If they were encrypted using retail encryption it would be possible to sign homebrew code and run it on Sky3DS.
 
I'm pretty sure the bbb dumps use retail encryption, since eshop copies are encrypted twice (once with retail encryption and once with movable.sed), all bbb did was remove the movable.sed encryption and throw the cxis into a rom. It's not hard to use retail encryption (since you can generate the keys with the VOiD Decryptor), the problem is the rsa signatures aren't properly signed. Retail copies all have proper rsa signatures.
 
The used signature process uses asymmetric keys, so even if you can decrypt it, you cannot re-encrypt it back if you modified the content. If that was that simple it would be pretty easy to decrypt 3DS ROMs from your PC... Unfortunately it's not.
 
The used signature process uses asymmetric keys, so even if you can decrypt it, you cannot re-encrypt it back if you modified the content. If that was that simple it would be pretty easy to decrypt 3DS ROMs from your PC... Unfortunately it's not.

Rom encryption uses symmetric 128bit AES CTR keys, thus the XORpads. As I said; the problem is the rsa signatures aren't properly signed.
 
Rom encryption uses symmetric 128bit AES CTR keys, thus the XORpads. As I said; the problem is the rsa signatures aren't properly signed.

Ah, you may be right. But still, Sky3DS cannot play eshop dumps. I guess they do not use the same file format as retail games...
 
No, they are not. These dumps are decrypted (signed with 00 key). If they were encrypted using retail encryption it would be possible to sign homebrew code and run it on Sky3DS.
RcvRZRd.png

00 key, eh? You might be talking about some of their VC pokemon games.

I'm talking about their latest releases, like this one, 3D Sonic
They all use retail encryption on the CCI.
 

Site & Scene News

Popular threads in this forum