Geohot Releases dePKG - Firmware Package Decrypter

[tuxguy]

pkg_riv[] = {0x4A,0xCE,0xF0,0x12,0x24,0xFB,0xEE,0xDF,0x82,0x45 ,0xF8,0xFF,0x10
,0x21,0x1E,0x6E};


Since pkg_erk appears to be the decryption key, is the above (pkg_riv) the infamous "M" from the equation ... the non random (supposed to be random) number used over and over with their keys??

[DiscipleEX]

I just read and I can not believe that the leave so much spam and nonsense that is written.

I want to read how people collaborate and share their thoughts on the current topic.

A lot of things myself and learn from these geniuses!
But no, a bunch of idiots write about some nonsense ...
And if you do not say something that can help and has nothing to do with the topic.
**** off!
Go to Facebook and like it!

My thoughts exactly but internet is serious business and some people just won't think.

Hmmm... maybe its time for a DEVELOPERS/CODERS ONLY forum... with a warning that off topic posts will be immediately deleted and ignored...?

Yes,seems its long overdue especially with influx of people everyday posting silly questions after every "breaking news" and flaming over 10+ pages ex. failoverflow thread. Exactly why I hardly bother posting anymore.

how long's a piece of string ?

That should keep em at bay for bit... or until they learn how to use google
On topic
I'd imagine Geo had the ability to sign update PUPs from his 3.21OO but thats just my guess, hopefully alot will come from these tools.

[Haku-men]

I KNOW WHY I WANT A PS2 EMULATOR ON A PS3 BECAUSE THEN WE DON'T HAVE TO USE THE EMOTION ENGINE ON THE PS3 WHICH CAUSED COUNTLESS OVERHEATING.

[FarenHeit]

I'd imagine Geo had the ability to sign update PUPs from his 3.21OO but thats just my guess, hopefully alot will come from these tools.

Well i personally think that he maybe the shadow behind PSJailbreak
They somehow managed to sign a pup file for their downgrade and suddenly after fail0verflows presenation he releases "depkg." as the games over for PSJailbreak now...

[jcrr]

I KNOW WHY I WANT A PS2 EMULATOR ON A PS3 BECAUSE THEN WE DON'T HAVE TO USE THE EMOTION ENGINE ON THE PS3 WHICH CAUSED COUNTLESS OVERHEATING.

seriously this forum needs to stop new users from posting for a couple of weeks and monitor every single post.

REAL developers are getting pissed off and that is going to be very detrimental to the scene. In this and the loooonng thread we've had Geohot flamed to hell and evilsperm seriously pissed off. Admins please do something...

[Mack702]

This is gonna be so awesome for us PS3 users Thanks Geo and PSX-Scene I will just keep refreshing for the next month to see what new can come from all of this

[HyperPuma]

pkg_riv[] = {0x4A,0xCE,0xF0,0x12,0x24,0xFB,0xEE,0xDF,0x82,0x45 ,0xF8,0xFF,0x10
,0x21,0x1E,0x6E};


Since pkg_erk appears to be the decryption key, is the above (pkg_riv) the infamous "M" from the equation ... the non random (supposed to be random) number used over and over with their keys??

I've been wondering about this too, but the more I think about it the more I feel like these keys were obtained by something other than the fail0verflow method.

In the talk about discovering the signing keys, fail0verflow was analyzing the ECDSA signature to produce a key. This decryption, however, is decrypting the AES algorithm rather than ECDSA. Take a look at this slide from the conference

It seems to me that the key in this program is the SELF key from that image. Using that self key we are then able to dump the contents of the self, presumably because the key to get access to metadata is the same as that which decodes from metadata to the ELF contents (again referring to the picture).

Perhaps the signing key used to generate the ECDSA signature and the AES SELF key used to decrypt the data are one and the same? Or maybe the SELF key is the signing key, and the key in the decryptor is taken from the metadata after decrypting it using that key? I feel so close to understanding... yet so far.

[Wutangrza]

lol, 3 pages of worthless spam followed by 7 pages of people condemning the spam only further cluttering the thread.

[thoughtspeak]

seriously this forum needs to stop new users from posting for a couple of weeks and monitor every single post.

REAL developers are getting pissed off and that is going to be very detrimental to the scene. In this and the loooonng thread we've had Geohot flamed to hell and evilsperm seriously pissed off. Admins please do something...

I'm probably the exact type of member your talking about (although I do have genuine interest out side of just getting free stuff) so I do apologise.


It human nature to want to comment, and because I'm not a dev, I can only talk about what I know..it can be a bit off topic at times though.

I'll personally try not to as much in future.


That said, this forum is built on vbulltin right?

Easy solution. Create a developer user group. To gain access, you have to answer several dev related questions and be refered by another dev.

Then just create a private dev area.


The only problem I see would be the fact that you would have to post the lastest news twice.

[jcrr]

I'm probably the exact type of member your talking about (although I do have genuine interest out side of just getting free stuff) so I do apologise.


It human nature to want to comment, and because I'm not a dev, I can only talk about what I know..it can be a bit off topic at times though.

I'll personally try not to as much in future.


That said, this forum is built on vbulltin right?

Easy solution. Create a developer user group. To gain access, you have to answer several dev related questions and be refered by another dev.

Then just create a private dev area.


The only problem I see would be the fact that you would have to post the lastest news twice.

I hope i didn't offend anyone. this was not personal and not intended to any particular user. But still please admins do what thoughtspeak suggests. create a restricted thread/channel for real developers to discuss their ideas and allow n00bs like me to read but NOT post. that would be a late christmas present.