Talk:ReDRM / Piracy dongles: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
mNo edit summary
No edit summary
Line 1: Line 1:
----
----
I kinda figured how it works already<br />
they patched lv1 and lv2<br />
and they have lv2 to check if the self keyset is 0x10 or higher<br />
if so it's sent to lv1 through a separate hypercall than hvsc99<br />
which sends the self or part of it to the usb hw<br />
which performs some crypto<br />
and returns a decrypted result to lv1<br />
at least that's what I got out of a few minutes of debugging<br />
I am pretty sure the keys are on the dongle<br />
the ones you play games with<br />
<pre>
<pre>
   // do crypt
   // do crypt

Revision as of 19:39, 24 October 2011


   // do crypt
   unsigned char sector_key[16];
   memset(sector_key, 0, 16);
   sector_key[12] = (sector_num & 0xFF000000)>>24;
   sector_key[13] = (sector_num & 0x00FF0000)>>16;
   sector_key[14] = (sector_num & 0x0000FF00)>> 8;
   sector_key[15] = (sector_num & 0x000000FF)>> 0;
   
   // encrypt sector
   aes_context aes_ctx;
   aes_setkey_enc(&aes_ctx, G_DEBUG_KEY, 128);
   aes_crypt_cbc(&aes_ctx, AES_ENCRYPT, aligned_size, sector_key, buff, buff);
   
   // decrypt
   aes_context aes_ctx;
   aes_setkey_dec(&aes_ctx, G_DEBUG_KEY, 128);
   aes_crypt_cbc(&aes_ctx, AES_DECRYPT, aligned_size, sector_key, buff, buff);

that's the algo for masterdiscs
ps3gen dll has the static keys for masterdiscs
you can also get it from sv_iso
the crappy sdk tool that generates masterdisc images for dex