Talk:ReDRM / Piracy dongles

I kinda figured how it works already
they patched lv1 and lv2
and they have lv2 to check if the self keyset is 0x10 or higher
if so it's sent to lv1 through a separate hypercall than hvsc99
which sends the self or part of it to the usb hw
which performs some crypto
I could do me to send their dongle
and returns a decrypted result to lv1
at least that's what I got out of a few minutes of debugging
I am pretty sure the keys are on the dongle
3.60+ app keys
the ones you play games with

<> // do crypt
<> unsigned char sector_key[16];
<> memset(sector_key, 0, 16);
<> sector_key[12] = (sector_num & 0xFF000000)>>24;
<> sector_key[13] = (sector_num & 0x00FF0000)>>16;
<> sector_key[14] = (sector_num & 0x0000FF00)>> 8;
<> sector_key[15] = (sector_num & 0x000000FF)>> 0;
<> <> // encrypt sector
<> aes_context aes_ctx;
<> aes_setkey_enc(&aes_ctx, G_DEBUG_KEY, 128);
<> aes_crypt_cbc(&aes_ctx, AES_ENCRYPT, aligned_size, sector_key, buff, buff);
<> <> // decrypt
<> aes_context aes_ctx;
<> aes_setkey_dec(&aes_ctx, G_DEBUG_KEY, 128);
<> aes_crypt_cbc(&aes_ctx, AES_DECRYPT, aligned_size, sector_key, buff, buff);

that's the algo for masterdiscs
ps3gen dll has the static keys for masterdiscs
you can also get it from sv_iso
the crappy sdk tool that generates masterdisc images for dex