Keys

Usefull information

PSVita uses F00D and KIRK for high security of keys.

F00D keys have not be shared publicly yet but have certainly been found by a F00D hack.

KIRK have been hacked on PSP and almost fully reversed in 2008.

The KIRK keys are mainly the same than on PSP but some have been changed past 3.60 (before 3.67).

KIRK10 (used in IDStorage) explanation: [1]

Save Data Source: [2]

Kirk Engine source (there exists other version of kirk-engine): [3]

Location

keyfiles should be placed in ~/.vita or %userprofile%\vitakeys

Naming

naming:

• file prefix: pkg
• file suffix: 092 103 105 106 150 151... etc.
• key file (erk): %s-key-%s
• iv file (riv): %s-iv-%s
• ctype file (curvetype): %s-ctype-%s
• pub file (public): %s-pub-%s
• priv file (private): %s-priv-%s

Vita Game PKG Keys

These AES-CTR 128-bit keys are used in Game/App PKG file decryption. Vita keys use a different algorithm, you first encrypt the IV with the correct type of key, then use the result as the actual key for the CTR. Every pkg will use a different key as a result of this.

Type	Version	ERK
PSP	1.00+	07F2C68290B50D2C33818D709B60E62B
Vita	1.00+ Type 2	E31A70C9CE1DD72BF3C0622963F2ECCB
Vita	1.00+ Type 3	423ACA3A2BD5649F9686ABAD6FD8801F
Vita	1.00+ Type 4	AF07FD59652527BAF13389668B17D9EA

• Type 4 is (exclusively?) for PSM packages

index.dat keysets

These AES-CBC 256-bit keys are used in index.dat file decryption.

Type	Version	RIV	ERK
index.dat	1.00-1.691	37FA4ED2B6618B59B34F770FBB92947B	06CC2E8FD40805A736F17CF2C13D58A6C8CF107E9E4A66AE25D39CA21C2531CC
index.dat	1.80+	37FA4ED2B6618B59B34F770FBB92947B	272AE4378CB06BF3F658F51C77ACA2769BE87FB19BBF3D4D6B1B0ED226E39CC6

Title Update Download Link keyset

This HMAC key is for downloading game title updates. See link here for details.

Compiled GUI App: Vita Tools

Type	Version	HMAC
Title Update	1.00+	E5E278AA1EE34082A088279C83F9BBC806821C52F2AB5D2B4ABD995450355114

PFS Keys

Type	Version	ERK	Usage
PFS EncKey	1.00+	00298CDF4428E72C8785DAE0923C60BD
PFS Secret	1.00+	8C5D3A4B9D9BF4B453BCE6CDC34331D8	Check HMAC at position 0x30 of file sealedkey, from the first 0x30 bytes of the file
Keystone HMAC Key	1.00+	310C2F2D70A62226F4582B4FF03E24196EEF01EF73A8981F2504BD50549A478F
Passcode HMAC Key	1.00+	543E368DF6629D682CD5A43644B1B2D733F0F2964DCD2CE8E9CB95D76C9DD928

RSA Rif Keys

Type	Version	Modulus	Usage	Notes
0 and 1	1.00+	9CCCE3A536FA641B2D1354EE98F093C2 68470F722C024B86CD60274E08E0067A 3CB0DBA3D33DB2ACE44AA070B10B612A C4546E51B5EDFA23F5ED507F23365F9A 0A09C1807D43E6172225AEB81630AC59 79C4A534460A41A6207E6B426F3DF8CA A0FBA7ED2B6A474C2AAB50A92DC743F2 232228FAC48FED218A8190F0423AD00C 595DCB410D18845DA90CCF2FDFD6B90E 23074B52B57C4866B93DD6A7C7336D74 D26D9E30D8A1B1C94459F34312AB0A46 B1B281D22B38809352A487C00D60340F EAC1834BCF88DA25D980B37847087574 27D40948493D2F5A8FEEB5B74B2961FF B4E7F3832207CE6481F07E88164E3208 1801B68F8D141541CED6D7D966A08DCB	PS3 Rifs	Inside SceNpDrm
2	1.00+	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		Inside SceNpDrm
3	1.00+	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		Inside SceNpDrm
4 and 5	1.80?+	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		Inside SceNpDrm

• RSA Exponent is 0x10001

RSA PKG Keys

Type	Version	Modulus	Usage	Notes
PSP	1.00+	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		Inside SceNpDrm
PSV	1.00+	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		Inside SceNpDrm
Live Area	1.00+	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		Inside SceNpDrm

• Exponent is 65537

Registry.db0 XOR Key

 89FA9548CB6D779DA22534FDA935596E