PS3 3.60 Keys Leaked

Published on 08-01-2012 05:18 AM

343 Comments

First it seemed as if it was just a rumor or perhaps fake. But euss has confirmed that they are indeed real. The day I'm sure all of you have been waiting for. The release of some PlayStation 3 keys (lv1ldr, lv2ldr, isoldr, appldr) have been leaked to the masses allowing you to patch 65 additional games. You will need a few tools in order to patch the SFO of your games. Or not. Word is Rogero says a new custom firmware will be made available. So those of you who don't want to decrypt and encrypt files should just wait a little longer.

eussNL Comments:

If you post keys in a random topic, you will fast enough be
marked as a troll. When posting keys, please do it in proper
format, so it can be easily debunked/proven

greetz, eussNL

KaKaRoTo Comments:

3.60 keys Update:

Q: recently 3.60 keys surfaced (lv1ldr, lv2ldr, isoldr, appldr), what does this mean for this release and the future?
A: That is actually a multiparted answer:

Now that several binairies (Iso module + CoreOS minus the loaders that are inside lv0) can be decrypted, more investigation can be done in them, which give a new boost in (unrelated to the HeN) other targets, like:

Hardwareless downgrades : Downgrading with PSgrade Dongle (lv1.self)
QA Flagging / systemtokens (spu_token_processor.self) and usertokens (spu_utoken_processor.self)
PS2 compatibility (mc_iso_spu_module.self , me_iso_for_ps2emu.self , sv_iso_for_ps2emu.self)
Getting per_console_root_key_1 / EID_root_key on 3.56+/slim3K (lv1.self , aim_spu_module.self)
Backsigning applications for <=3.55 and patch sys_proc_param_version (appldr.self , lv2_kernel.self)

Q: So does this mean a future release would be sooner?
A: Only God knows

But it can also be that because of the above, it would become meaningless/surpassed by better progress. So lets all hope for the best

I will be adding to this article as I learn more. Just wanted to rush this news to you asap.

UPDATE: Use Deank's EBOOT Fix Tool 0.5 to convert the EBOOTS for you. Just download the keys add them to EBOOT Fix Tool's ps3 folder. (Download below includes the keys, so no need to download them unless using other methods)

Originally Posted by deank

They also posted my ebootFIX/ebootMOD tools prepackaged with the keys in .ps3 folder, so it is ready to be used like in the old 3.41/3.55 days.

Have in mind that some games (like Sniper Ghost Warrior) have additional .self/.sprx files and it is better to use ebootFIX by dragging the PS3_GAME folder to it - it will find and fix all necessary files. If you use ebootMOD you'll have to search for these files yourself and 'fix' them one by one.

UPDATE 2: Another Method

Use SCETool to Decrypt a PS3 3.60 EBOOT.BIN File:
For those of you who want to decrypt a 3.60 EBOOT.BIN use scetool. Download scetool_0.2.7.zip unzip it to C:\scetool. Create a new folder inside scetool and name it data and download these files here:

keys: ps3devwiki.com/files/devtools/scetool/data/keys
ldr_curves: ps3devwiki.com/files/devtools/scetool/data/ldr_curves
vsh_curves: ps3devwiki.com/files/devtools/scetool/data/vsh_curves

Put them inside data folder. Put your EBOOT.BIN file in scetool folder. Go to start - run - cmd and cd to the folder were scetool is. For example "cd C:\scetool". Then type this command to decrypt the EBOOT.BIN: "scetool -d EBOOT.BIN EBOOT.ELF" and use this one to encrypt it to 3.41: C:\scetool>scetool -0=SELF -5=APP -6=0003004100000000 -e EBOOT.elf EBOOT.BIN

Download: Deank's EBOOT Fix Tool 0.5 - UPDATED LINK

Source: elotrolado via ps3crunch via ps3devwiki via ps3news

Thanks to deeptrap for the awesome news tip!

PSX-SCENE: The Pinnacle Scene Xenocracy

● Latest News ● Report News ● Search Forums ● Hall of Fame ●
● Facebook.com/PSXScene ● RSS ● Twitter.com/psx_scene ●

Share
- Share this post on
- Digg
- Del.icio.us
- Technorati
- Twitter

RUT Dark Ronin, SkyNet, bourat and 5 others like this.

Categories:

_{Tags :

euss,

kakaroto,

ps3,

ps3 3.60 keys,

ps3 custom firmware,

ps3 hacks,

ps3 keays,

ps3 keys leaked,

rogero}

343 Comments

Tranced - 08-01-2012, 07:09 AM
- Reply
@mossopinc try this oneand report back. I'm unable to test right now.

clide890 - 08-01-2012, 07:10 AM
- Reply
Yeah Senaxx link wokrs fine but the one that PSX has uploaded was not. Thanks to everyone who has worked hard on this. I know with alittle patience someone was bound to crack the newer games. I'm a TB user myself and it's kinda of annoying having the dongle.

Tranced - 08-01-2012, 07:11 AM
- Reply
@Senaxx I'm almost sure that linking is ok as long as the files are not hosted here.

grubby - 08-01-2012, 07:18 AM
- Reply
whoops.. i think i just came a little bit..

x3angel - 08-01-2012, 07:18 AM
- Reply
I knew this day would eventually come! & I'm so happy!!!! This is awesome!!!!! I'm going to wait for Rogero to hook us up!!!! Listen??? You hear that .... Japan? Some dudes @ Sony are getting Bitch Slapped by the Sony Pres. Hahaha

zikvirus - 08-01-2012, 07:20 AM
- Reply
didn't sony change the keys from 4 (example) to random?

mossopinc - 08-01-2012, 07:23 AM
- Reply
Tranced it says i dont have cygcrypto-1.0.0.dll installed, looking for it just now

juggalodebo - 08-01-2012, 07:28 AM
- Reply
I tried it wouldnt let me pm anyone lol... Im up all night so when i seen it i tried everyone and it kept coming up with an error about not being active or sumtin like that....idk exactly but ill try next time i have great news, like today

JohnnyCage2008 - 08-01-2012, 07:37 AM
- Reply
Does DIRT 3 work for anyone?
I successfully patched the game and installed it but at the title screen I get the message that there is no controller found. Same thing happened with F1 2010 when it was new.

Running Backup-Manager / MultiMan in Patched-Mode (R2) was the solution back then but unfortunately SELECT+X doesn't work on current version of MultiMan.

Any help?

yoshi314 - 08-01-2012, 07:45 AM
- Reply
hm, i don't think keys were ever leaked from sony. most of the time they were derived or extracted from hardware using various reversing techniques.

i am wondering how exactly did that happen now.

xfri123 - 08-01-2012, 07:51 AM
- Reply
Yes now i can play like a boss ^_^

RatAndDragon - 08-01-2012, 08:02 AM
- Reply
Originally Posted by yes159

I might be wrong, but i'm under the impression that it is no longer possible to install just a .pup file and you will have CFW. Sony fixed this bug in firmware 3.56. Maybe it is possible if you're already on firmware 3.55 and do some modifications, but i dont think that it is possible to install i.e CFW 3.60 if you're already on OFW 3.60 (without downgrading).

Actually you can install modified PUP files for firmware 3.56+ with one important caveat - you can only do it once.

There is a new checking mechanism present in those firmwares that does some extra validation on the files that are going to be installed, some sort of crypto checksum/hash/HMAC type thing most likely. So you can create a custom 3.60 PUP using the existing tools, and you can install it on top of 3.55, and then you can only install OFW after that because we don't know how to create these signatures, yet. These keys may help the effort to figure out what's going on in more modern OFW, and how to fool the new PUP installer.

(Note that when I say custom 3.60 PUP I don't mean in the sense of a CFW like kmeaw, because I don't think the firmware has been deciphered to that extent to enable the scene devs to run unsigned code, but you can do things like replace the SSL certificates and then get annoyed because you accidentally used a 3.60 based fw to make your mfw and ruined your hacked ps3...)

Wispa - 08-01-2012, 08:10 AM
- Reply
so if people start uploading these fixes to places... they would work? or is it per console,

ive had rebug for over a year now and had a trueblue(bricked)... so now i bought an jtag xbox to play some games... but now does this mean i can play?

yes159 - 08-01-2012, 08:11 AM
- Reply
Originally Posted by zikvirus

didn't sony change the keys from 4 (example) to random?

Yes, the private keys were changed in firmware 3.56, and the bug was fixed.

The keys werent 4 by the way, that is just a joke that Fail0verflow used in their presentation. I think that joke is from an old comic strip or something. I dont think that the keys were static either, but there was some bug that didnt make it random all the time, if i'm not mistaken.

Originally Posted by RatAndDragon

Actually you can install modified PUP files for firmware 3.56+ with one important caveat - you can only do it once.

There is a new checking mechanism present in those firmwares that does some extra validation on the files that are going to be installed, some sort of crypto checksum/hash/HMAC type thing most likely. So you can create a custom 3.60 PUP using the existing tools, and you can install it on top of 3.55, and then you can only install OFW after that because we don't know how to create these signatures, yet. These keys may help the effort to figure out what's going on in more modern OFW, and how to fool the new PUP installer.

(Note that when I say custom 3.60 PUP I don't mean in the sense of a CFW like kmeaw, because I don't think the firmware has been deciphered to that extent to enable the scene devs to run unsigned code, but you can do things like replace the SSL certificates and then get annoyed because you accidentally used a 3.60 based fw to make your mfw and ruined your hacked ps3...)

I see. I didnt know that, thanks

Originally Posted by Wispa

so if people start uploading these fixes to places... they would work? or is it per console,

ive had rebug for over a year now and had a trueblue(bricked)... so now i bought an jtag xbox to play some games... but now does this mean i can play?

It works on all consoles, so you can play.

Wispa - 08-01-2012, 08:20 AM
- Reply
well i guess ill just wait until someone somewhere uploads the eboots/fixes somewhere orrrrrrrrr

until rogero brings his new FW

ahou - 08-01-2012, 08:31 AM
- Reply
I dont think that the keys were static either, but there was some bug that didnt make it random all the time, if i'm not mistaken.

No, that doesn't make any sense. Keys are always static. If a random key could decrypt anything, you would have what is known as a broken lock.

sketchdesigner - 08-01-2012, 08:33 AM
- Reply
Originally Posted by Wispa

well i guess ill just wait until someone somewhere uploads the eboots/fixes somewhere

Someone is already one step ahead of you - in the last 2 hours I've seen someone upload fixed files for the following games...

Agarest War Zero (BLUS30686)
Bleach Soul Ignition (BCJS30077)
Call of Duty Modern Warfare 3
Captin America
Fear 3 (BLES00963) (External with BD-Emu option using multiMAN EBOOT fix tool)
Green Lantern
Kung Fu Panda 2
Lego Pirates of The Caribbean
NCAA 12 (Original and Decrypted EBOOT)
No More Heroes (BLES)
PES 12 (BLUS30805)
Shadows Of The Damned

They're already out there if you look about

gonzule - 08-01-2012, 08:37 AM
- Reply
from the initial comments, i can assume that these keys will not decrypt a 3.60+ game, so thanks anyways, i´ll stick to my other methods in the meantime.

lets see how this develops and what can be done with it. If not, all we have to do is wait for E3 to release the keys for higher FW and start modifying the eboots (if what they claim is real and there is no catch)

ahou - 08-01-2012, 08:51 AM
- Reply
Originally Posted by gonzule

from the initial comments, i can assume that these keys will not decrypt a 3.60+ game, so thanks anyways, i´ll stick to my other methods in the meantime.

You assume wrong. You can indeed decrypt 3.6 games.

JohnnyCage2008 - 08-01-2012, 08:52 AM
- Reply
Originally Posted by sketchdesigner

Someone is already one step ahead of you - in the last 2 hours I've seen someone upload fixed files for the following games...

Agarest War Zero (BLUS30686)
Bleach Soul Ignition (BCJS30077)
Captin America
Fear 3 (BLES00963) (External with BD-Emu option using multiMAN EBOOT fix tool)
Green Lantern
Kung Fu Panda 2
Lego Pirates of The Caribbean
NCAA 12 (Original and Decrypted EBOOT)
No More Heroes (BLES)
PES 12 (BLUS30805)
Shadows Of The Damned

They're already out there if you look about

Or you can also just patch them yourself ... that's what I did with more than half of the games you mentioned (plus some more)