Hacking Wii nand boot C

bushing

Well-Known Member
Newcomer
Joined
Feb 27, 2008
Messages
50
Trophies
0
XP
52
Country
United States
Can anyone tell me where this crap came from, originally? This is probably the fourth time I've seen this ("Team Twiizers has Nintendo's private key but they won't use it to because they're against piracy"). Last time, someone came on IRC and started spamming everyone about how sven was the "Hitler of optical media" and that our refusal to use Nintendo's private key was the only thing keeping some random USB loader from running on "LU64+ Wiis" -- now we're holding bricked Wiis hostage? Sheesh. Why do people think we have this key? The only case where someone hacked a device by getting ahold of a private RSA(-like) key was the Atari 7800, and that only happened 15 years after the console was released.

I'm fairly sure there will never be a hard drive with the Wii's private keys lying around in some dumpster for 2021's console hackers to find, and I don't think anyone could leak a key if they wanted to -- DRM keys these days are locked up in tamper-proof Hardware Security Modules.

wes11ph said:
TT can make the installation of bootmii on boot2 even if it has a fixed boot1.
if they want to?!
but
they will violate the "TT No to "PIRACY""
No, really, we can't. Nobody can, unless they get access to Nintendo's 2048-bit private RSA key, or they find an exploit in boot1 or boot2 that we've missed (and I fully hope that somebody will -- but I'm not going to hold my breath.)

I've alluded to the theory that there is some factory boot2 version that is used as part of the manufacturing process on my blog several times, but nobody's ever seen any proof of that. Even if someone found it, it would probably be boot2v0, and it would be impossible to install it on a normal Wii because you can't downgrade boot2 without running your own ARM code.

QUOTE(wes11ph @ Sep 27 2010, 08:11 AM) yes they have listed wii keys in their blog, but.
did they say that "we use ninty keys to make our app run like official"

don't you wonder why they always run application under an exploit?
what do you think? "cboot2"
does it have a ninty's code on it?
Huh? Can someone translate this for me?
unsure.gif
 

mike333

Well-Known Member
Member
Joined
Aug 30, 2010
Messages
718
Trophies
0
XP
258
Country
Poland
bushing said:
wes11ph said:
TT can make the installation of bootmii on boot2 even if it has a fixed boot1.
if they want to?!
but
they will violate the "TT No to "PIRACY""
No, really, we can't. Nobody can, unless they get access to Nintendo's 2048-bit private RSA key, or they find an exploit in boot1 or boot2 that we've missed (and I fully hope that somebody will -- but I'm not going to hold my breath.)
sha1sum collision made easy... maybe someday...
 

bushing

Well-Known Member
Newcomer
Joined
Feb 27, 2008
Messages
50
Trophies
0
XP
52
Country
United States
mike333 said:
bushing said:
No, really, we can't. Nobody can, unless they get access to Nintendo's 2048-bit private RSA key, or they find an exploit in boot1 or boot2 that we've missed (and I fully hope that somebody will -- but I'm not going to hold my breath.)
sha1sum collision made easy... maybe someday...
Perhaps, just make sure it's a first preimage attack and not merely a random hash collision attack!
 

Jacobeian

Well-Known Member
Member
Joined
May 15, 2008
Messages
1,893
Trophies
0
XP
387
Country
Cuba
QUOTE said:
Can anyone tell me where this crap came from, originally?

paranoia and stupidity often come in pairs, the less they know, the more they speculate
... and it's also very contagious
 

KleinesSinchen

GBAtemp's Backup Reminder + Fearless Testing Sina
Member
GBAtemp Patron
Joined
Mar 28, 2018
Messages
4,498
Trophies
2
XP
15,136
Country
Germany

KleinesSinchen

GBAtemp's Backup Reminder + Fearless Testing Sina
Member
GBAtemp Patron
Joined
Mar 28, 2018
Messages
4,498
Trophies
2
XP
15,136
Country
Germany
Does boot1 and boot2 use SHA1 encryption for something?
As I understand this, a SHA1 hash collision would allow modifying boot1… Modifying boot1 into something that accepts a modified boot2 which would ultimately allow BootMii@boot2 for all Wii consoles. Could be wrong though.

https://wiibrew.org/wiki/Boot1
wiibrew.org/wiki/Boot1 said:
Boot1
Jump to navigation Jump to search
boot1 is the second stage loader for the Wii. It is loaded by boot0, which is stored inside a Mask ROM inside the Hollywood. boot1 is contained inside the first block of NAND flash and encrypted with a key stored in the Mask ROM as part of boot0. As part of the boot process, boot0 will decrypt and hash boot1, and then compare it to a SHA1 hash stored in on-die OTP memory; if they do not match, then boot1 will not be executed. This means that any attempt to modify boot1 on a Wii will cause it to fail to boot.
 
  • Like
Reactions: Alexander1970

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Xdqwerty @ Xdqwerty:
    @salazarcosplay, kind of like mugen or rivals of aether?
  • S @ salazarcosplay:
    and also ahve the option to play as a human
  • S @ salazarcosplay:
    or set it up that when you get injured past a certain point they have to replace your human parts with cybernetics
  • Xdqwerty @ Xdqwerty:
    i have a placeholder enemy sprite i made
  • S @ salazarcosplay:
    or have it that you don't know you are a cyborg, robot, and you find out and have a existential crisis
  • S @ salazarcosplay:
    or have it start in the virtual world and you are an ai that gained sentience
  • Xdqwerty @ Xdqwerty:
    btw gonna wash my face in a bit, my eyes feel tired
  • S @ salazarcosplay:
    and you convince your owner to help you break out of the virtual world to real world
  • BigOnYa @ BigOnYa:
    Eyes - "yawn"
    +1
  • S @ salazarcosplay:
    you bleack in to goverment computer systems to get cyborg schematics so you can get a robot body constructed
  • Xdqwerty @ Xdqwerty:
    btw @BigOnYa the health bar doesnt decrease when i take damage (and yes i put the "at the beggining of the scene change value of greenflatbar: set to Protagonistcopmode.Health::Health())
  • S @ salazarcosplay:
    i the protagonist
  • S @ salazarcosplay:
    human, robot, cyborg
  • S @ salazarcosplay:
    human with cyborg enhancements
  • S @ salazarcosplay:
    or like terminatior
  • S @ salazarcosplay:
    with living tissue
  • BigOnYa @ BigOnYa:
    @Xdqwerty there is health behaviour you can add to your character, then to use a health bar is lil more complicated, google n watch a few tutorial video on it, be too hard to explain here.
  • Xdqwerty @ Xdqwerty:
    @BigOnYa, the character has the health behavior
  • BigOnYa @ BigOnYa:
    I know you have to create a health and health max variable. Then there is a calculation you use in code to subtract width size of the health bar. Google few vids.
  • Xdqwerty @ Xdqwerty:
    @BigOnYa, the "greenflatbar" is one of the preset health bars btw
  • BigOnYa @ BigOnYa:
    Yea you can use any bar/sprite. It will just change the width. Ok good luck and have fun. I'm off to go shoot some pool at the bar. Talk to you later.
    +1
  • Xdqwerty @ Xdqwerty:
    @BigOnYa, why does the health behavior exist if you can just use a variable?
    Xdqwerty @ Xdqwerty: @BigOnYa, why does the health behavior exist if you can just use a variable?