Obtaining per console root key - method posted!

In case someone is not stalking the ps3devwiki:

Per console keys - PS3DevWiki - got updated with a way of obtaining the root key.

Shameless c&p for the lazy ones:

---

per_console_root_key_0
metldr is decrypted with this key
bootldr is decrypted with this key
might be obtained with per_console_root_key_1?

per_console_root_key_1 / EID_root_key
derived from per_console_key_0
stored inside metldr
copied to sector 0 by metldr
cleared by isoldr
Used to decrypt part of the EID
Used to derive further keys
can be obtained with a modifyed isoldr that dumps it
can be obtained with a derivation of this key going backwards

obtaining it
launch the patched isoldr with your prefered method
modified kernel module
payload
(both can be found on this wiki)
patched isoldr to dump it
DO NOT CREATE AN MFW USING THIS IT WOULD BRICK
Multiupload.com - upload your files to multiple file hosting sites!

per_console_root_key_2 / EID_root_key
EID can be partially decrypted by setting this key in anergistics and fireing aim_spu_module.self

per_console_root_key_n
these are further derivations of the per_console_key_1/EID_root_key

and root key allow as to do what ?:)

All is written above; metldr and bootldr are decrypted with this key.

Check the old boot order diagram to get an idea on what this will give us.

This as far as I understand it is the key that can derive all other keys, and as it can't be changed apart from a hardware revision it means that any new firmware or anything released can be patched-out as we would control over the boot process ?

Yeah, that's how it was described somewhere in the past.

So....get to work then?

Devs owes us everything.

.....and then news comes from other devs that this has been known about for ages, and is incredibly hard to actually do anything constructive with it...

Per Console Keys - PS3 Development Wiki updated again.

Am I right in thinking this is the PS3 Master key? which is individual for each console? which can basically decrypt Lvl0 and thus bypass all other checks? Surely if this is the case, all one would need to do is run a PKG on the KMEAW firmware, extract their own key, put this into Deank's eboot fix, and bobs your uncle????

Not quite, there's the 'parent' to this key to find, then another static key to find in order to decrypt lv0.

Apart from decrypting everything, which could be very very difficult as there are so many keys, this could be useful in turning retail consoles into debug ones.... apparently ;)