PUP file HMAC key?

Now we can decrypt SPRX/SELF files, can't we get the HMAC key used to verify PUPs?

The patched 3.41 PUP uses different HMAC-SHA1 hashes, so the PSJB team must of found the HMAC key in order to make those hashes. That means those hashes must be important for custom PUP files.

AFAIK PUP files are handled by software_updater_plugin.sprx, surely the key would be inside there?

(looking for somebody more knowledgeable about this to pitch in here and tell me if i'm heading the right way :))

Yep, you are...key and algo are in one of those sprx, can't remember which one it was.

EDIT: Just did a quick check again.....the sprx which holds the HMAC Key to resign PUPs is in "software_update_plugin.sprx" ... good luck ;)

Quote:

---

Originally Posted by iCEQB

Yep, you are...key and algo are in one of those sprx, can't remember which one it was.

EDIT: Just did a quick check again.....the sprx which holds the HMAC Key to resign PUPs is in "software_update_plugin.sprx" ... good luck ;)

---

Nice, thanks for the confirmation :)

Unfortunately DeLiGhT's decrypter dies on that sprx... Does anyone know if graf's decrypter works with sprx's?

I don't think you need it with the JIG/service mode.
Wanted to try a simple repack using g_85_g method but thought it would be a better idea to first start playing around with these tar.aa files missing header.

Quote:

---

Originally Posted by stoker25

Nice, thanks for the confirmation :)

Unfortunately DeLiGhT's decrypter dies on that sprx... Does anyone know if graf's decrypter works with sprx's?

---

It should work fine with graf's payload, I didn't tested it though.
Afaik Team DeLiGhT said in their readme, that there are some problems with specific files.

Well... managed to compile the payload.bin and bootstrap.bin, having a problem with compiling sendfile though:

Quote:

---

root@evil-Box:/home/evilsperm/Desktop/graf/payload/tools# make
gcc -O2 -Wall -c sendfile.c
sendfile.c:20: fatal error: libnet.h: No such file or directory
compilation terminated.
make: *** [sendfile.o] Error 1
root@evil-Box:/home/evilsperm/Desktop/graf/payload/tools#

---

Using evilsperm's Multi SDK. Tried using "apt-get install libnet" but it still doesn't compile :(

I've spent quite some time trying to get bootstrap running and payloads executed, but eventually I managed to do it.

Is there actually interest, from more people, in this thing (even when you get it running, it's anything but intuitive or easy ;))?

I was thinking about posting a small HOWTO on how to get bootstrap/payload up and running, but I am kind of waiting for graf's answer to see if he will mind me posting working HEX. Hmm, don't see why he'd mind, if he publicly made the code available...

Quote:

---

Originally Posted by stoker25

Well... managed to compile the payload.bin and bootstrap.bin, having a problem with compiling sendfile though:

Using evilsperm's Multi SDK. Tried using "apt-get install libnet" but it still doesn't compile :(

---

apt-get install libnet-dev

Quote:

---

Originally Posted by chocobo

apt-get install libnet-dev

---

THANKS! Could not figure out how to fix that, seriously, thank you :)

Another problem now...

Quote:

---

root@evil-Box:/home/evilsperm/Desktop/graf/payload/tools# make
gcc -O2 -Wall -c sendfile.c
sendfile.c:21: fatal error: pcap.h: No such file or directory
compilation terminated.
make: *** [sendfile.o] Error 1

---

Managed to fix with "apt-get install libpcap-dev", and sendfile compiled :) sadly, other tools didn't:

Quote:

---

root@evil-Box:/home/evilsperm/Desktop/graf/payload/tools# make
gcc -O2 -Wall -c sendfile.c
gcc sendfile.o -o sendfile -lnet -lpcap
gcc -O2 -Wall -c inflate.c
inflate.c:20: fatal error: zlib.h: No such file or directory
compilation terminated.
make: *** [inflate.o] Error 1

---

Fixed with "apt-get install zlib1g-dev".

EDIT: Damn, I thought my debug-update-bricked ps3 would still run payloads. Now I have to wait until new USB stick arrives so that I can unbrick before I continue :/ Maybe somebody who can run it (like chocobo ;)) could try decrypting the software_update_plugin.sprx and then PM me the decrypted segments?

Quote:

---

EDIT: Damn, I thought my debug-update-bricked ps3 would still run payloads. Now I have to wait until new USB stick arrives so that I can unbrick before I continue :/ Maybe somebody who can run it (like chocobo ;)) could try decrypting the software_update_plugin.sprx and then PM me the decrypted segments?

---

1) I've posted a small howto, that should/could help people get this up and running: http://psx-scene.com/forums/f149/[wi...d-howto-72715/

2) I can not decrypt anything, since I've just got to the point where I am able to run payloads, I yet have to figure out if my flash dump is correct, then to extract data needed to be able to decrypt stuff (will require reading sources I guess).

I also don't have much free time, and that's the reason why I posted the howto - it's better that people take over where I stopped and hopefully they'll make progress, than everyone trying same thing all over again