Talk:IDPS

IDPS Examples

IDPS	TargetID	Mobo Rev.
00 00 00 01 00 81 00 01 03 FF FF FF 18 43 C1 4D	Reference Tool / DECR	COK-001	Static Dummy IDPS
00 00 00 01 00 85 00 0A 14 05 67 A0 79 37 DC 17	Retail Europe	SUR-001
00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C	Retail Australia/New Zealand	VER-001
00 00 00 01 00 84 00 08 14 0B 80 7A 2E 4F AA C7	Retail USA	VER-001
00 00 00 01 00 84 00 01 04 00 F3 44 AC 4F 8D 2F	Retail USA	COK-001
00 00 00 01 00 84 00 09 10 1C B0 13 5F 2C 17 AF	Retail USA	DYN-001
00 00 00 01 00 89 00 0B 14 00 EF DD CA 25 52 66	Retail Australia/New Zealand	JTP-001/JSD-001
00 00 00 01 00 89 00 0B 14 05 18 95 D3 EE D0 76	Retail Australia/New Zealand	JTP-001/JSD-001
00 00 00 01 00 87 00 08 14 00 EF DD CA 25 52 66	Retail United Kingdom	VER-001
00 00 00 01 00 85 00 08 10 05 52 88 e8 af 75 0d	Retail Europe	VER-001
00 00 00 01 00 85 00 08 f4 01 aa 02 51 ee 33 7b	Retail Europe	VER-001
00 00 00 01 00 85 00 09 10 1b 69 bd ca cc be 85	Retail Europe	DYN-001
00 00 00 01 00 85 00 0b 10 18 ec 96 e4 a8 be ef	Retail Europe	JTP-001/JSD-001
00 00 00 01 00 87 00 08 14 01 b7 a7 1f c8 3a ea	Retail United Kingdom	VER-001
00 00 00 01 00 87 00 07 10 00 a3 15 8f 61 36 85	Retail United Kingdom	DIA-002
00 00 00 01 00 87 00 0b 14 0c 84 81 81 33 fa 68	Retail United Kingdom	JTP-001/JSD-001
00 00 00 01 00 87 00 0B 14 0E 71 DF 87 E5 A2 4D	Retail United Kingdom	JTP-001
00 00 00 01 00 8C 00 0C 14 0E 7D FA F1 5F 9F 3F	Retail Russia	KTE-001

Note: for KTE-001 there are postings of both 0B and 0C as revision @ IDPS offsetin flashdumps for CECH3000 series :/

IDPS rms blogtext

You’re probably wondering: “What the hell is this sequence of bytes?”. This is the IDPS, a sequence of bytes which determine console type. This structure is relatively undocumented until now, anyway. The IDPS is contained in EID0. EID0 is on the console internal flash as the file eEID and has multiple sections. I had made a splitter application to make your life easier a long time ago. Now, EID is decrypted by metldr, and is passed over to the isolated loader, which may pass it to a self. We can see this in graf_chokolo’s original payload. The IDPS is also used in various other parts of the system which could be of interest to you, but I will not discuss those right now. The IDPS itself, isn’t decrypted.

The IDPS contains your target ID, motherboard? and BD? revision. The IDPS shown at the beginning of this article is the dummy IDPS, the one that’s used when your IDPS fails to be decrypted. That IDPS belongs to a DECR-1000A. The one below belongs to a European PS3, and the one below that belongs to a Australian/NZ PS3.

Source: http://rmscrypt.wordpress.com/2011/05/16/idps-what-the-hell-is-that-thing/

Note: The Reference Tool IDPS from above is static. aim_iso uses it. Retail/3.55 doesn't have it.

Change HWID

Theory: If you give a slim console a fat IDPS, would that console have 3.15 OtherOS functionality?

I would say it would, because most likely the check is done in firmware to either en/disable that option. However, it would still require a console that can be downgraded to that version (only CECH-20../DYN-001, because CECH-21../SUR-001 are known to have a lowvercheck of 3.20). So classic OtherOS on a CellBE 45nm/RSX 40nm would be impossible (ofcourse you can use OtherOS++).