PSX-SCENE Forum Discussion for Sony PlayStation/PsOne/PS2/PS3/PSP/PS VITA
  • KaKaRoTo Speaks of ECDSA Algorithm - CFW Impossible

    I have always wanted an explanation of the ECDSA algorithm due to it's mathematical complexity. Anyone who knows anything about PS3 encryption and the hidden keys used to calculate the ECDSA know that it isn't an easy feat. PlayStation 3 developer KaKaRoTo has tried to simplify the subject for us in order to gain some knowledge on the subject. Below is an extract, you can read the full article linked at the source below.


    To Quote:
    To popular demand, I have decided to try and explain how the ECDSA algorithm works. I’ve been struggling a bit to understand it properly and while I found a lot of documentation about it, I haven’t really found any “ECDSA for newbies” anywhere. So I thought it would be good to explain in simple terms how it works so others can learn from my research. I have found some websites that explain the basic principles but nowhere near enough to actually understand it, others that explains things without any basics, making it incomprehensible, and others that go way too deep into the the mathematics behind it.
    Please continue to read the bottom of his article if you are feeling to lazy to read.

    Source: kakaroto.homelinux.net

    Proudly brought to you by psx-scene's Tranced.

    Have news? Post it in the Member News SubmissionsThread
    SupDor likes this.
    Comments 64 Comments
    1. Zangetsu21's Avatar
      Zangetsu21 -
      I flunked math in school so all I see is something that looks like and old arcade game (forgot the name).

      Good luck Kakaroto, you're gonna own the PS3!!
    1. dualshock1992's Avatar
      dualshock1992 -
      KaKaRoTo is so much win)
    1. Mrox2's Avatar
      Mrox2 -
      Hope u the best !
    1. Shrek's Avatar
      Shrek -
      This is the sort of developer that excites me. One that is actually really clever, one that shares his knowledge and gives to the scene. Some of the latest news we have had in regards to these simply rubbish updates and crap firmwares that are no use to man nor beast are put to shame by Kaka. It's a bit like the difference between night and day.
    1. Darkman-PSG's Avatar
      Darkman-PSG -
      You guys need to read what the mods of this site didnt put in what he said pertaining to the ECDSA Algorithm saying its IMPOSSIBLE TO FIND THE KEYS AND ITS IMPOSSIBLE TO HAVE A CFW OVER 3.56

      Once you know the private key dA, you can now sign your files and the PS3 will recognize it as an authentic file signed by Sony. This is why it’s important to make sure that the random number used for generating the signature is actually “cryptographically random”. This is also the reason why it is impossible to have a custom firmware above 3.56, simply because since the 3.56 version, Sony have fixed their ECDSA algorithm implementation and used new keys for which it is impossible to find the private key.. if there was a way to find that key, then the security of every computer, website, system may be compromised since a lot of systems are relying on ECDSA for their security, and it is impossible to crack.
    1. Tranced's Avatar
      Tranced -
      LOL @ P=k*G.

      @Darkman-PSG, not hiding anything. I just didn't want a great wall of China (Text). I expect readers to read. I will update the article before everyone starts complaining.
    1. floeti's Avatar
      floeti -
      Quote Originally Posted by Darkman-PSG View Post
      You guys need to read what the mods of this site didnt put in what he said pertaining to the ECDSA Algorithm saying its IMPOSSIBLE TO FIND THE KEYS AND ITS IMPOSSIBLE TO HAVE A CFW OVER 3.56

      Once you know the private key dA, you can now sign your files and the PS3 will recognize it as an authentic file signed by Sony. This is why it’s important to make sure that the random number used for generating the signature is actually “cryptographically random”. This is also the reason why it is impossible to have a custom firmware above 3.56, simply because since the 3.56 version, Sony have fixed their ECDSA algorithm implementation and used new keys for which it is impossible to find the private key.. if there was a way to find that key, then the security of every computer, website, system may be compromised since a lot of systems are relying on ECDSA for their security, and it is impossible to crack.
      This does not imply, that a CFW above 3.56 is impossible. It may be impossible in the near term future to break ECDSA. BUT there is the possibility to CHANGE the public key in the PS3 (e.g. by an exploit) and then a KNOWN private key can be used. I don't understand why everybody is so keen on breaking ECDSA. In my opinion it is far more efficient to just hack the authentication code.
    1. Arsehel's Avatar
      Arsehel -
      For real? What does this mean? No CFW anymore, not even in the future? Guess I'm going to go play some backupped games and after that go ofw!:P Is that a good idea?
    1. phyrex711's Avatar
      phyrex711 -
      Quote Originally Posted by Darkman-PSG View Post
      You guys need to read what the mods of this site didnt put in what he said pertaining to the ECDSA Algorithm saying its IMPOSSIBLE TO FIND THE KEYS AND ITS IMPOSSIBLE TO HAVE A CFW OVER 3.56

      I honestly don't care if it's CFW, a Dongle or a special Rock you connect via USB, I just want to play newer games... period..

      Hmmm, looks like TrueBlue wins..
    1. Darkman-PSG's Avatar
      Darkman-PSG -
      @Tranced
      No worry's dude you know how most users don't really read all of what Kakaroto said about the EDSA Algorithm about the 3.56 cfw part and many users would think they are once step closer to a 4.00cfw when we are far far away from it

      EDIT: Eh that's kinda tricky I wouldn't say that TB has won anything there are very good titles coming out in the future and the biggest concern is that can they crack 4.00 games without the need of the keys if So why haven't they cracked Final Fantasy XIII-2 nobody really knows their method of cracking games and I was going to buy a TB but like I said in a last thread of mines I just bought the games off of friends and etc..etc.. lets not forget they havent cracked Batman Arkham city yet... TB is reliable in some points but TB isnt all that cracked up to be and for those who are thinking about buying one dont go on Lightake.com I seen many complaints about users not getting theirs or still waiting which is why I changed my mind about buying a TB.

      On topic: Like Kakarato said Sony fixed their mistake from their previous error
    1. xdslx's Avatar
      xdslx -
      it is not impossible to break ECDSA , if something is made for not to be broken , then be sure it will be broken.
    1. Unpirata's Avatar
      Unpirata -
      everyone raise the palms of your hands to the sky and GIVE HIM YOUR ENERGY!!!
    1. Shrek's Avatar
      Shrek -
      CFW Impossible ? Anything is possible, I'd edit that, as you run the risk of looking foolish.
    1. Tranced's Avatar
      Tranced -
      Quote Originally Posted by Darkman-PSG View Post
      No worry's dude you know how most users don't really read all of what Kakaroto said
      @Darkman-PSG You would think that by now I would have thought of that LOL. Thanks for pointing it out early had a hectic day at work.

      OT: I think that the future would be getting everything we want working on custom firmware 3.55, not a new custom firmware above 3.55. Unless another way is found. I think...
    1. dualshock1992's Avatar
      dualshock1992 -
      I don't need new CFW then, just do some patcher for new games, that's all I need. Don't give a **** about PSN, a thousand homebrew programs and other things.
    1. jman123's Avatar
      jman123 -
      Quote Originally Posted by dualshock1992 View Post
      I don't need new CFW then, just do some patcher for new games, that's all I need. Don't give a **** about PSN, a thousand homebrew programs and other things.
      Good luck with waiting for that.
    1. Rubyduck's Avatar
      Rubyduck -
      So we are F*cked, no CFW, homebrew, nor games after 3.55->

      That algo is insane, something else than E=mc2. I think the TB dongle-way is only way to run stuff on PS3, if no Sony employee leaks the keys to the public. Anyone know any office clerk there? =)

      Damn, I think now my 360 has to come out from the closet.

      Thank you Kaka for the hard work you have put in to this, I think you will still try to figure out how to run stuff on 3.56+ without signing it .
      All that reading made my head hurt, and maybe about 10% got registered in to my brain. hehe, I go get me a Duff beer now.
    1. buggerlugz's Avatar
      buggerlugz -
      Okay, so lets just accept CFW is impossible without cracking ECDSA, then lets just find another way in, that abuses the chain of trust so that it don't need to be cracked. Surely this new 4.00 HEN (that already has the v4.00 keys) can be exploited in some way?

      You see this is where the true-blue fails on an epic scale, we don't want to have to go changing to modded eboot's, we just want to be able to put an original disc in and play the game!
    1. tthousand's Avatar
      tthousand -
      I can say that I was not expecting another CFW anytime soon... but that is not to say I am not hopeful for an exploit and an implantation
    1. xtrem3x's Avatar
      xtrem3x -
      Just because ECDSA can't be cracked does not mean someone can't find a different exploit in the PS3 & take advantage of it.