Naehrwert released ps3hdd: PS3 HDD Encryption

furtsiv
08-16-2012
09:40 AM

1

i hope we can connect our ps3 hdd to laptop

DEFAULTDNB
08-16-2012
09:45 AM

2

Originally Posted by furtsiv

i hope we can connect our ps3 hdd to laptop

No, But you could swap HDD's between PS3's

gingerbread
08-16-2012
10:18 AM

3

Originally Posted by DEFAULTDNB

No, But you could swap HDD's between PS3's

This will be awesome. Say by some Doctor Strange Magic we manage to read the HDD on windows/mac. I think it will be a challenging task to achieve "swap HDD between PS3". I think you would have to rewrite the entire PS3 Core OS to do that, as every part of PS3 OS checks for encryption.

Longshot
08-16-2012
10:35 AM

4

If you had read a bit more carefully you would have known that there is no tool.

Its a POC ... proof of concept...
It looks like naehrwert has managed to decrypt a ps3hdd on his pc

DEFAULTDNB
08-16-2012
10:38 AM

5

Naehrwert is clever, maybe too clever....

I want his unicorns...

Pingoo
08-16-2012
10:45 AM

6

Another twit from naehrwert:

glevand did a great job here:http://www.ps3devwiki.com/wiki/HDD_Encryption

Looks like everything is done, just needs someone to implement in a nice app :D

DEFAULTDNB
08-16-2012
10:52 AM

7

I think you guys were right, I was wrong, Naehrwert managed to mount a PS3 hdd on his PC! Thats amazing

JonahUK
08-16-2012
10:59 AM

8

I don't mean to be disrespectful to naehrwert or glevand but what is the difference between this and what Graf did in the middle of last year?

Am I missing something?

TheEvolution_PT
08-16-2012
11:04 AM

9

Originally Posted by Gonzakpo

Using twitter naehrwert released a tool called PS3HDD.

https://twitter.com/naehrwert/status/236106107620306944

Since there isn't any readme or official description I personally don't know exactly what this does. But from seeing the code itself this is related to the PS3 HDD decryption.

Here's the download link and a mirror.

http://www.sendspace.com/file/t0di2z

http://uploadmirrors.com/download/0E.../ps3hdd_poc.7z

I already created a thread about this dude, next time loose 10 seconds of your life reading the name of the new threads, just sayin

snowydew
08-16-2012
11:06 AM

10

Originally Posted by JonahUK

I don't mean to be disrespectful to naehrwert or glevand but what is the difference between this and what Graf did in the middle of last year?

Am I missing something?

graf originally started work on it. After the raid, glevand finished the beta for graf but had no flasher to properly test it. After a single brick he decided to not go any further till later. Other things came up and well you see where this is going

Congrats Naehrwert for finishing it!

JonahUK
08-16-2012
11:09 AM

11

[MENTION=190503]snowydew[/MENTION]

Thanks for the update.

Gonzakpo
08-16-2012
11:09 AM

12

Originally Posted by TheEvolution_PT

I already created a thread about this dude, next time loose 10 seconds of your life reading the name of the new threads, just sayin

Well, actually, when I posted it, I didn't see yours. Maybe we posted about it at the same time?

I really don't care who was first. People will decide which thread goes up and which goes down. Anyway, both will go down sooner or later. So...next time don't loose 10 seconds of your life posting that you posted it first, just sayin

deank
08-16-2012
11:10 AM

13

Originally Posted by JonahUK

I don't mean to be disrespectful to naehrwert or glevand but what is the difference between this and what Graf did in the middle of last year?

Am I missing something?

Graf's approach allowed for disabling the HDD encryption, which would require that you format your HDD and start clean (with unencrypted HDD). Glevand's approach allows you to obtain your ps3 specific key to decrypt your ps3 hdd without formatting/erasing it.

DEFAULTDNB
08-16-2012
11:11 AM

14

Awesome news

JonahUK
08-16-2012
11:11 AM

15

[MENTION=114607]deank[/MENTION]

Thanks for expanding on it

Gonzakpo
08-16-2012
11:12 AM

16

I'm updating the first post!

deank
08-16-2012
11:15 AM

17

Originally Posted by Longshot

If you had read a bit more carefully you would have known that there is no tool.

Its a POC ... proof of concept...

If you read more carefully you will see that it is a tool (if you compile it by using your PS3 keys as explained on the wiki).

capostef
08-16-2012
11:17 AM

18

Hi deank, have you tried it? What can we do with this?

BILAL97
08-16-2012
11:17 AM

19

would you still need cfw for this ? :|

deank
08-16-2012
11:22 AM

20

Originally Posted by capostef

Hi deank, have you tried it? What can we do with this?

You can enjoy the fact that another PS3 layer of protection was defeated by smart folks. Each time something like this happens it later leads to other useful stuff.

harryoke
08-16-2012
12:01 PM

21

Originally Posted by deank

You can enjoy the fact that another PS3 layer of protection was defeated by smart folks. Each time something like this happens it later leads to other useful stuff.

am i right in that if we get our own console key....we can decrypt anything we want on our own ps3??

denero1
08-16-2012
12:06 PM

22

now thats cool dev's helping finish another dev's work after he has left the scene this is the positive side i like to see

jennys
08-16-2012
12:17 PM

23

I can foresee shops selling a bunch of eSATA encloses for 2.5" HDD's I've always wanted to use my eSATA ports. I've been considering purchasing a new HDD for my PS3 since I found out about this like late last night; both you two arguing about who was first are both late. Tsk.. Tsk..

sandungas
08-16-2012
12:18 PM

24

Originally Posted by harryoke

am i right in that if we get our own console key....we can decrypt anything we want on our own ps3??

Noes, this means we have the hability to decrypt a ps3 hdd in our pc.... modify files... then encrypt again

But for this is needed to know your ATA hey (i think this is how they called this key)
And if you want to see a "final user" utility we will need to wait for some apps that uses it

Edit: well... in fact there are more things that can be done while playing with this hack, because this keys can be "regenerated" (a new ones), filled with zeroes, etc...

--------------
What glevand has been doing this last days in ps3devwiki is based in the encdec (a chip that encodes/decodes).. this affects several components of the motherboard, HDD, BD & SB
All the keys used or generated by encdec has a direct relationship with the eEID (and libeeid)

I dont doubt this became with graf, but glevand is a a machine he has documented all the encdec in 24 hours (today and yesterday)... now we can say that "encdec has been pwned"

Ohh, btw... and i love to see you 3 (or 4 if we include graf "moral support") working in the same line

Elegant
08-16-2012
01:09 PM

25

Does this improve the speed of the PS3 in anyway? I mean, we don't have to spend time decrypting the drive if we completely disabled it (which is doable) and left the drive unencrypted. I'm not sure how much time it takes to decrypt the drive.

hellsing9
08-16-2012
03:20 PM

26

Frontpaged, mirror link is down. Will update that.

MysterySword
08-16-2012
03:31 PM

27

So if this is full decryption, this will be interesting. It'll allow you to put files on the HDD and retrieve files, which can be useful for modding games (like Skyrim) or getting savedata that you can't get otherwise.

It'll allow installing homebrew on ofw (like on 4.21), but so much for running it. Hopefully new exploits will be found with the help of this.

RickDangerous
08-16-2012
03:47 PM

28

Originally Posted by MysterySword

It'll allow installing homebrew on ofw (like on 4.21), but so much for running it. Hopefully new exploits will be found with the help of this.

Did'nt Naehrwert create an exploit that could run pkgs on ofw 4.21 but lacked a way to install them?
If so, we can install AND run homebrew.
Well, if Naehrwert releases his exploit that is.

TheEvolution_PT
08-16-2012
03:50 PM

29

Originally Posted by Gonzakpo

Well, actually, when I posted it, I didn't see yours. Maybe we posted about it at the same time?

I really don't care who was first. People will decide which thread goes up and which goes down. Anyway, both will go down sooner or later. So...next time don't loose 10 seconds of your life posting that you posted it first, just sayin

I really don't care about efame, i just think that we don't need to open more and more threads about the same thing, it helps to clean the forum imo.

lewy20041
08-16-2012
03:50 PM

30

it was kakarotto whu created 'hen'.
************* [ - Post Merged - ] *************
it was kakarotto who created 'hen'

Cheesethief
08-16-2012
04:06 PM

31

Couldn't this potentially be used to inject files onto the HDD? NOR consoles have a part of their firmware on the HDD, so perhaps we could modify it and make a CFW? Though that probably would not work...

pois0n
08-16-2012
04:06 PM

32

I know somebody said this before but it hasn't been confirmed. Could we do this on a 4.21 PS3?

capostef
08-16-2012
04:07 PM

33

lets wait what the devs can do with it
************* [ - Post Merged - ] *************
I beleave deank is working on it

Cheesethief
08-16-2012
04:09 PM

34

Originally Posted by pois0n

I know somebody said this before but it hasn't been confirmed. Could we do this on a 4.21 PS3?

No, or at least not yet. This requires consoles keys and you can those pretty much solely through first being on CFW.

Encdec, the chip that encrypts the HDD among other things on the PS3 was pwned by glevland, so 4.21 consoles may become susceptible to this too.

Invi
08-16-2012
04:30 PM

35

Originally Posted by deank

You can enjoy the fact that another PS3 layer of protection was defeated by smart folks. Each time something like this happens it later leads to other useful stuff.

just a quick question here if we obtain our hdd keys and then update to a newer fw would we still with the keys we extracted have access to our hdd?

NF7
08-16-2012
04:34 PM

36

Correct me if I am wrong, but isn't the PCK0 the one key that decrypts and encrypts the HDD, as it is different for every PS3 ?

Cheesethief
08-16-2012
05:01 PM

37

Originally Posted by NF7

Correct me if I am wrong, but isn't the PCK0 the one key that decrypts and encrypts the HDD, as it is different for every PS3 ?

This is what it sounds like. You need the per console key to decrypt the HDD. This is also why it might be a tad difficult to do it, if not impossible, on console above 3.55. Well, for average Joe Blow.

MysterySword
08-16-2012
05:02 PM

38

Originally Posted by Cheesethief

This is what it sounds like. You need the per console key to decrypt the HDD. This is also why it might be a tad difficult to do it, if not impossible, on console above 3.55. Well, for average Joe Blow.

If you were on cfw, then you get that key, would it still work if you upgraded to 4.21 from there, or will the upgrade change the HDD keys?

Cheesethief
08-16-2012
05:05 PM

39

Originally Posted by MysterySword

If you were on cfw, then you get that key, would it still work if you upgraded to 4.21 from there, or will the upgrade change the HDD keys?

Per console key. It is constant and unchanging, just like the name implies. Once you have it, you have it no matter what the firmware is. PCK cannot be updated by sony.

JustThatDude
08-16-2012
05:15 PM

40

Originally Posted by Cheesethief

Per console key. It is constant and unchanging, just like the name implies. Once you have it, you have it no matter what the firmware is. PCK cannot be updated by sony.

Precisely. It's impossible to change it. Kinda like a mac address.

hellsing9
08-16-2012
05:23 PM

41

Originally Posted by JustThatDude

Precisely. It's impossible to change it. Kinda like a mac address.

You can clone a mac address

popman
08-16-2012
05:50 PM

42

how was this not done sooner?
it's just AES encryption based on the drive's serial number.

you can even see it by looking at the xreg.sys from your console.

itskamel
08-16-2012
06:02 PM

43

Originally Posted by hellsing9

You can clone a mac address

you can spoof them also!

Twinkeltoe
08-16-2012
06:19 PM

44

Originally Posted by popman

how was this not done sooner?
it's just AES encryption based on the drive's serial number.

you can even see it by looking at the xreg.sys from your console.

Everybody was expecting you to do it since it's so simple for you.

They waited and waited but in the end they decided to do it for you......

JustThatDude
08-16-2012
06:59 PM

45

Originally Posted by hellsing9

You can clone a mac address

But you can't change it

it will still be there if your spoofing it

oPolo
08-16-2012
07:21 PM

46

Originally Posted by JustThatDude

But you can't change it it will still be there if your spoofing it

Wat, MAC addresses can be changed as well with a bit fiddling, can't they? It's just illegal changing them or something, isn't that more like how it is?

itskamel
08-16-2012
07:23 PM

47

Originally Posted by oPolo

Wat, MAC addresses can be changed as well with a bit fiddling, can't they? It's just illegal changing them or something, isn't that more like how it is?

thats what i thought. i thought you could spoof your mac address to change it.

JustThatDude
08-16-2012
07:57 PM

48

Originally Posted by oPolo

Wat, MAC addresses can be changed as well with a bit fiddling, can't they? It's just illegal changing them or something, isn't that more like how it is?

After you restart your computer your mac address is reverted back to your original. It can't be done PERMANENTLY

gingerbread
08-16-2012
10:18 PM

49

Originally Posted by JustThatDude

After you restart your computer your mac address is reverted back to your original. It can't be done PERMANENTLY

Sorry about a slight off-topic.

There are millions of network device on this planet. I wonder if the unique MAC address could run out someday?

Thanks.

itskamel
08-16-2012
10:20 PM

50

Originally Posted by JustThatDude

After you restart your computer your mac address is reverted back to your original. It can't be done PERMANENTLY

Right but a simple click of a app can change it on the fly, then what more do you need?

hellsing9
08-16-2012
10:25 PM

51

You can clone/spoof the hell you want with the mac address.
************* [ - Post Merged - ] *************

Originally Posted by JustThatDude

After you restart your computer your mac address is reverted back to your original. It can't be done PERMANENTLY

Wrong. If you are using an integrated ethernet, you can change the values of it, even if you are behind a router. Now if the DHCP of your ISP keeps forcing the pron you cannot do anything, hence everytime you change your mac address (if you are behind a router) you will got offline cloning it, etc.
Man...you can even while the whole realteak info and convert it to any brand you want.
If it's legal?, i don't know depends on the laws on each country.

bobross
08-17-2012
01:45 AM

52

I need this sooo bad. HD got corrupted from a multiman upgrade. I lost so much. Please make a windows app someone!

DEFAULTDNB
08-17-2012
02:15 AM

53

Originally Posted by gingerbread

Sorry about a slight off-topic.

There are millions of network device on this planet. I wonder if the unique MAC address could run out someday?

Thanks.

MAC = 48bit (correct me if I'm wrong) 2^48 combinations.

Firstly and most important, a MAC address consists of two major parts - The manufacturer's ID (first 3 bytes/24 bits) and the unique serial number (second 3 bytes/24 bits) (for more info on this check www.firewall.cx/mac_addresses.php ).

So, for each manufacture, we have a possible 16777216 MAC addresses, and you might now ask ... so what happens when the manufacture reaches MAC Address number 16777216? Simple ... he starts from number 1, re-using the same numbers because it's highly unlikely you will ever buy two or more network cards with the same MAC Address!

The 2nd part of the answer has obviously got to do with the manufacturer's ID, where the 3 bytes/24 bits will give us 16777216 possible combinations. Here we will find a number of restrictions but be aware that there aren't that many manufactures or even close to half of them, around the world. The IEEE group is responsible to assigning the first 3 bytes to the applicant vendor and you can obtain a full list of them if you look for RFC1700.

Its obviously different for PCK0, probably way more than 48bit.

oPolo
08-17-2012
02:26 AM

54

Originally Posted by JustThatDude

After you restart your computer your mac address is reverted back to your original. It can't be done PERMANENTLY

Ah yea, that was how it is. You had to use a proxy layer to mask it as something else. Forgot that, but true MAC address's is by design impossible to permanently change.

Originally Posted by gingerbread

Sorry about a slight off-topic.

There are millions of network device on this planet. I wonder if the unique MAC address could run out someday?

Thanks.

Well it could, the mac address is stored in an 48bit key (2^48= 281474976710656 unique addresses). Although, if I remember right, some of the hex numbers in the key describes what company that produced the NIC with that MAC address and some others describes at what factory it was produced. Perhaps some describes some sort of time stamp. Anyway, that reduces the amount of free MAC addresses alot(in a similar way IPv4 was limited in addresses, due to reserved IP ranges). Its unlikely it will run out soon though. I don't see a giant problem with it either. Yes, some problems will undoubtly happen, but imho MACaddresses is only REALLY used as a identifier on LAN, which are extremely extremely extremely small compared to the devices on the whole net... MAC sucks as authentication also, due to attacks such as ARP spoofing and mac address spoofing, so that would not be a big issue either... If anyone uses MAC for authentication on anything bigger than a LAN, they are imho retards. Ofc something would still had to be done, to ensure everyone can still have a unique identifier in LAN's though...

gingerbread
08-17-2012
05:15 AM

55

Originally Posted by DEFAULTDNB

MAC = 48bit (correct me if I'm wrong) 2^48 combinations.

Originally Posted by oPolo

Well it could, the mac address is stored in an 48bit key (2^48= 281474976710656 unique addresses). Although, if I remember right, some of the hex numbers in the key describes what company that produced the NIC with that MAC address and some others describes at what factory it was produced. Perhaps some describes some sort of time stamp. Anyway, that reduces the amount of free MAC addresses alot(in a similar way IPv4 was limited in addresses, due to reserved IP ranges). Its unlikely it will run out soon though. I don't see a giant problem with it either. Yes, some problems will undoubtly happen, but imho MACaddresses is only REALLY used as a identifier on LAN, which are extremely extremely extremely small compared to the devices on the whole net... MAC sucks as authentication also, due to attacks such as ARP spoofing and mac address spoofing, so that would not be a big issue either... If anyone uses MAC for authentication on anything bigger than a LAN, they are imho retards. Ofc something would still had to be done, to ensure everyone can still have a unique identifier in LAN's though...

OMG! Thanks for the detail explanation! It makes sense!
************* [ - Post Merged - ] *************

Originally Posted by Cheesethief

Couldn't this potentially be used to inject files onto the HDD? NOR consoles have a part of their firmware on the HDD, so perhaps we could modify it and make a CFW? Though that probably would not work...

You mention that "NOR consoles have a part of their firmware on the HDD".

Could you explain more about it? Is there a link where I can read on it.

Thank you.

DEFAULTDNB
08-17-2012
05:18 AM

56

Boom baby.

Anyway I wonder what this could lead to? It's just nice to see another part of the PS3 blown wide open.

Rautz
08-17-2012
05:33 AM

57

Originally Posted by Twinkeltoe

Everybody was expecting you to do it since it's so simple for you.

They waited and waited but in the end they decided to do it for you......

Haha this made me laugh my ass off

SifJar
08-17-2012
08:26 AM

58

Originally Posted by bobross

I need this sooo bad. HD got corrupted from a multiman upgrade. I lost so much. Please make a windows app someone!

The release is source code. Feel free to compile it. (No one else can do it for you, you need to include YOUR console's keys and a list of HDD sectors [I think] to be able to compile it, otherwise it won't work).

JustThatDude
08-17-2012
09:53 AM

59

Originally Posted by SifJar

The release is source code. Feel free to compile it. (No one else can do it for you, you need to include YOUR console's keys and a list of HDD sectors [I think] to be able to compile it, otherwise it won't work).

You could conpile it and have a option to put in your PCK0. I'm not sure but it's highly plausible

DEFAULTDNB
08-17-2012
09:54 AM

60

Originally Posted by SifJar

The release is source code. Feel free to compile it. (No one else can do it for you, you need to include YOUR console's keys and a list of HDD sectors [I think] to be able to compile it, otherwise it won't work).

:O sifjar from gbatemp?

JustThatDude
08-17-2012
10:14 AM

61

Originally Posted by hellsing9

You can clone/spoof the hell you want with the mac address.
************* [ - Post Merged - ] *************

Wrong. If you are using an integrated ethernet, you can change the values of it, even if you are behind a router. Now if the DHCP of your ISP keeps forcing the pron you cannot do anything, hence everytime you change your mac address (if you are behind a router) you will got offline cloning it, etc.
Man...you can even while the whole realteak info and convert it to any brand you want.
If it's legal?, i don't know depends on the laws on each country.

You may be able to do it behind your internet but like you said you go offline(so whats the point?) Also your mac address is physical on you computer and is IMPOSSIBLE to change PERMANENTLY you might be able to do it TEMPORARILY but If I'm right you can't physically change it. Once I am only 15 and a amateur in networking and software. So if you got a link where I can look more into changing it PERMANENTLY then let me know so I can learn from it cause that's what I like to do best

bobross
08-17-2012
11:56 AM

62

Originally Posted by SifJar

The release is source code. Feel free to compile it. (No one else can do it for you, you need to include YOUR console's keys and a list of HDD sectors [I think] to be able to compile it, otherwise it won't work).

Hi,

I would love too but I know nothing about that. Only if there was some step-by-step tutorial for a dummy like me. That would be great.

Someone else mentioned "an option to put in your PCK0" sounds like it would be much easier. Although I don't even know what a PCK0 is. <-- see dummy.

Cheesethief
08-17-2012
03:22 PM

63

Originally Posted by gingerbread

You mention that "NOR consoles have a part of their firmware on the HDD".

Could you explain more about it? Is there a link where I can read on it.

Thank you.

NAND consoles have 256MB of flash storage. That is enough to house the whole of the firmware. NOR consoles only have 16MB of flash storage and the average FW update pup is around 170MB. This is the reason why on a NAND console when you exchange HDD's, it only prompts for a format of the new HDD. On a NOR console it also prompts you for a firmware update equal to or higher than the firmware the console had prior to the HDD change. This means that some of the firmware is stored on the HDD and if decrypted, perhaps it could be modified.

This should all be documented on the PS3devwiki.

baargle
08-17-2012
03:47 PM

64

Originally Posted by Cheesethief

NAND consoles have 256MB of flash storage. That is enough to house the whole of the firmware. NOR consoles only have 16MB of flash storage and the average FW update pup is around 170MB. This is the reason why on a NAND console when you exchange HDD's, it only prompts for a format of the new HDD. On a NOR console it also prompts you for a firmware update equal to or higher than the firmware the console had prior to the HDD change. This means that some of the firmware is stored on the HDD and if decrypted, perhaps it could be modified.

This should all be documented on the PS3devwiki.

Doesn't mean that at all.

We can already access the PS3 file system, by making an FTP connection to your PS3 for example you are already bypassing the PS3 hard drive encryption.
.
There's far more layers than that to get through.

CaptainCPS-X
08-17-2012
04:04 PM

65

Originally Posted by baargle

Doesn't mean that at all.

We can already access the PS3 file system, by making an FTP connection to your PS3 for example you are already bypassing the PS3 hard drive encryption.
.
There's far more layers than that to get through.

You are talking about what the PS3 lets you see and access. I will not go into details because I have not researched anything of this, but I bet there is a partition of some kind to store the FW files, at least this theory could apply to NOR consoles.

Having access to the RAW hard drive from the PC give us more advantage than accessing it from the PS3 via FTP.

When you access a CD on a system (for example), the contents you see are not all, there is the ISO9660 RAW format that you can access and see many more data, there are variations that specify if it is a BOOT disc, Regular Disc, if it have extra headers, etc...

Anyway, I think [MENTION=200937]Cheesethief[/MENTION] theory may be right.

SeeYa!

spectlze
08-17-2012
04:23 PM

66

PS3 dev wiki has been updated with links to compiled programs for linux. Im going to wait for a tutorial before trying this.

http://www.ps3devwiki.com/wiki/HDD_Encryption

Cheesethief
08-17-2012
04:33 PM

67

Originally Posted by baargle

Doesn't mean that at all.

We can already access the PS3 file system, by making an FTP connection to your PS3 for example you are already bypassing the PS3 hard drive encryption.
.
There's far more layers than that to get through.

Notice I used the word perhaps. Maybe we can, maybe we can't.

You are allowed to see the dev_flash files on all consoles, nor and nand. I have never seen anyone being able to access actual firmware files of a nor. Heck, you might not even be able to access them from a PS3 using FTP.

advocatusdiaboli
08-17-2012
04:38 PM

68

Originally Posted by DEFAULTDNB

I think you guys were right, I was wrong, Naehrwert managed to mount a PS3 hdd on his PC! Thats amazing

I hope this will allow us to make 4TB "internal" drives using PS3HDXT, or maybe even SAN volumes for the PS3.

ryant001
08-17-2012
04:45 PM

69

Very interesting.
If we do get access to the firmware files partition we could use this to inject some modded files into 3.60+ firmwares.

bobross
08-17-2012
09:39 PM

70

Originally Posted by spectlze

PS3 dev wiki has been updated with links to compiled programs for linux. Im going to wait for a tutorial before trying this.

http://www.ps3devwiki.comwiki/HDD_Encryption

Link broken?

spectlze
08-17-2012
09:52 PM

71

Originally Posted by bobross

Link broken?

http://www.ps3devwiki.com/wiki/HDD_Encryption fixed

Wolfterro
08-17-2012
09:52 PM

72

Originally Posted by bobross

Link broken?

http://www.ps3devwiki.com/wiki/HDD_Encryption

LOL [MENTION=205101]spectlze[/MENTION], you're fast.

bobross
08-17-2012
09:58 PM

73

Originally Posted by spectlze

http://www.ps3devwiki.com/wiki/HDD_Encryption fixed

LOl damn fast!

thanks!

So is it possible to compile on Ubuntu x64 via virtual machine? Is there a crash-course tutorial on getting started?

<-- obviously knows nothing about all this

gingerbread
08-18-2012
01:46 AM

74

Originally Posted by Cheesethief

NAND consoles have 256MB of flash storage. That is enough to house the whole of the firmware. NOR consoles only have 16MB of flash storage and the average FW update pup is around 170MB. This is the reason why on a NAND console when you exchange HDD's, it only prompts for a format of the new HDD. On a NOR console it also prompts you for a firmware update equal to or higher than the firmware the console had prior to the HDD change. This means that some of the firmware is stored on the HDD and if decrypted, perhaps it could be modified.

This should all be documented on the PS3devwiki.

Thanks for the info!

atupac
08-19-2012
05:29 PM

75

Just hope this will lead to the NTFS native support on ps3

KDSBest
08-20-2012
05:47 PM

76

glevand@debian:~$ hexdump -C data1.bin
00000000 e2 d0 5d 40 71 94 5b 01 c3 6d 51 51 e8 8c b8 33 |..]@q.[..mQQ...3|
00000010 4a aa 29 80 81 d8 c4 4f 18 5d c6 60 ed 57 56 86 |J.)....O.].`.WV.|
00000020
glevand@debian:~$ hexdump -C data2.bin
00000000 02 08 32 92 c3 05 d5 38 bc 50 e6 99 71 0c 0a 3e |..2....8.P..q..>|
00000010 55 f5 1c ba a5 35 a3 80 30 b6 7f 79 c9 05 bd a3 |U....5..0..y....|
00000020

D9 2D 65 DB 05 7D 49 E1 A6 6F 22 74 B8 BA C5 08
83 84 4E D7 56 CA 79 51 63 62 EA 8A DA C6 03 26
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
C3 B3 B5 AA CC 74 CD 6A 48 EF AB F4 4D CD F1 6E
37 9F 55 F5 77 7D 09 FB EE DE 07 05 8E 94 BE 08
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

the keys are on wiki why not expose them in your source code @naehrwert.

I really don't get it.

The key generation algo is nearly the same as the eid0 key generation algo. Seed AES Encrypt with EID Root key.

Cheesethief
08-21-2012
01:53 AM

77

Originally Posted by atupac

Just hope this will lead to the NTFS native support on ps3

No, it won't. This has nothing to do with file systems.

Commonsense via Tapatalk 2

Elegant
08-21-2012
12:41 PM

78

The PS3 is more linux based than anything so you'd want a linux partition which it already has internally. (UFS/UFS2, EXT3/EXT4) You would need to add extra libraries to support NTFS natively and that would be quite a bit of work with no real benefit since you could just read the other file systems which already support files greater than 4GB.

bobross
09-13-2012
01:40 PM

79

Seriously can a kind soul spoon feed me on how to compile and decrypt my internal HD? I loss a massive amount of data on a simple MultiMan upgrade.

I have Oracal VirtualBox install so I can install Lunix. I don't know what the best version to install is.

I never compiled a program either but am a quick learner.

Cheers,
bob

bobross
09-14-2012
12:13 PM

80

Better yet if someone has a pre-compiled version, I can just then install the correct Lunix distro and run?

bobross
10-14-2012
10:36 PM

81

Is anything happening with this? Can someone per-compile this? Getting desperate here

bobross
12-30-2012
10:54 PM

82

Ok, well since research or implementation of this exploit seems to be dead I'm going to take a stab at it. What would be the best flavor of Linux to install under virtual machine for this?

advocatusdiaboli
12-30-2012
11:08 PM

83

Best flavour of linux? I prefer Ben & Jerry w/ Cherries aka Cherry Garcia.

But when it comes to giving homebrew a try, I would start with debian base install, and apt-get from there.

http://psl1ght.net/wiki/TutorialInstall:Debian

I see no point in running it as a virtual machine, unless you already run ESXi as base for your system;
install it on a 16GB memory stick, and dual boot.

bobross
12-30-2012
11:40 PM

84

Originally Posted by advocatusdiaboli

Best flavour of linux? I prefer Ben & Jerry w/ Cherries aka Cherry Garcia.

But when it comes to giving homebrew a try, I would start with debian base install, and apt-get from there.

http://psl1ght.net/wiki/TutorialInstall:Debian

I see no point in running it as a virtual machine, unless you already run ESXi as base for your system;
install it on a 16GB memory stick, and dual boot.

I'm using VM Virtial box because its easy and I can install Ubuntu very quickly and easily and its not like 8 DVD's worth of download. and I really don't want to get into dual boot hell at this point. They'll work right?

advocatusdiaboli
12-30-2012
11:46 PM

85

Originally Posted by bobross

I'm using VM Virtial box because its easy and I can install Ubuntu very quickly and easily and its not like 8 DVD's worth of download. and I really don't want to get into dual boot hell at this point. They'll work right?

Debian mini ISO ( 64 bit )

or

Ubuntu mini ISO

should do the trick. The idea of 8 DVDs sounds like Red Hat or SuSe to me.

I usually install debian base install and apt-get from there it fits nicely on a 2GB USB Stick, alternatively you can do the base install on a VM and ssh to the virtual machine from Terminal.app or putty.

bobross
01-01-2013
12:37 PM

86

Well, I gave it good long try, and failed. I just don't know enough about Linux to do this. First Ubuntu would not even run Make for some reason, so I had to install Debian.

Right off the bat I was able to compile dump_ata_keys and I was kind of stoked. That was short lived. Then I tried compiling ps3linux-dm-bswap16-master and got a console full of errors. No clue what to do there.

And then there are all these .patch files (ps3linux-kernel-patches-35-master) that I can't figure out how to install.

Its a shame. All this info is there, but nobody has seemed to make this work. Hell if someone could just compile all this stuff for me I would be glad to continue from there..

Anyone? Bueller, Bueller?

atlask
01-04-2013
09:49 PM

87

your problem = gcc compiler

advocatusdiaboli
01-05-2013
02:35 AM

88

Originally Posted by bobross

Well, I gave it good long try, and failed. I just don't know enough about Linux to do this. First Ubuntu would not even run Make for some reason, so I had to install Debian.

Right off the bat I was able to compile dump_ata_keys and I was kind of stoked. That was short lived. Then I tried compiling ps3linux-dm-bswap16-master and got a console full of errors. No clue what to do there.

Did any of the packages not install?

bobross
01-06-2013
09:19 PM

89

Originally Posted by atlask

your problem = gcc compiler

Suggest an alternative/fix?

Originally Posted by advocatusdiaboli

Did any of the packages not install?

I don't know how to install packages on Linux.

Can anyone who is familiar with Linux give this a try?

advocatusdiaboli
01-06-2013
10:50 PM

90

Originally Posted by bobross

I don't know how to install packages on Linux.

On this page: http://psl1ght.net/wiki/TutorialInstall:Debian

Code:

$ su
# apt-get install autoconf automake bison flex texinfo libncurses5-dev gcc g++ make wget libelf-dev python2.6-dev python-dev zlib1g-dev libtool git-core libgmp3-dev libssl-dev pkg-config bzip2

install without errors?

bobross
01-08-2013
08:13 PM

91

Originally Posted by advocatusdiaboli

On this page: http://psl1ght.net/wiki/TutorialInstall:Debian
Code:
$ su
# apt-get install autoconf automake bison flex texinfo libncurses5-dev gcc g++ make wget libelf-dev python2.6-dev python-dev zlib1g-dev libtool git-core libgmp3-dev libssl-dev pkg-config bzip2
install without errors?

Yes everything installed fine. But the major problem here is my lack of Linux basic understanding. I've only used windows. I have no concept of the Linux file structure and very limited understanding of terminal commands.

If it isn't spoon fed like the page you listed I'm basically lost. When I run make and it just "doesn't work" and spits out a console full of errors I'm completely lost on how to resolve the problem.

So I have given up.

advocatusdiaboli
01-08-2013
10:41 PM

92

Originally Posted by bobross

If it isn't spoon fed like the page you listed I'm basically lost. When I run make and it just "doesn't work" and spits out a console full of errors I'm completely lost on how to resolve the problem.

Just paste the errors here.

atlask
01-09-2013
09:45 PM

93

simply install gcc lib
go on ubuntu forum ,u'll have more chance to find a howto than here

g126
01-31-2013
08:25 AM

94

First of all kudus to the author of Mounting_HDD_on_PC, (Naehrwert) but I'm wondering if anybody has had any luck mounting their PS3 HDD on a PC?

I'm an experienced Linux user (sys admin) and have been unable to follow his work myself as the steps are a tad confusing to me...

Anyone found a nicely put how-to on how to do this?

I've too lost all my saves recently (when my HD died on me) and, since I'm running OFW 4.31 I've been frantically trying to access the HD to recover some of my saved game data.

zecoxao
01-31-2013
08:31 AM

95

Originally Posted by g126

First of all kudus to the author of Mounting_HDD_on_PC, (Naehrwert) but I'm wondering if anybody has had any luck mounting their PS3 HDD on a PC?

I'm an experienced Linux user (sys admin) and have been unable to follow his work myself as the steps are a tad confusing to me...

Anyone found a nicely put how-to on how to do this?

I've too lost all my saves recently (when my HD died on me) and, since I'm running OFW 4.31 I've been frantically trying to access the HD to recover some of my saved game data.

try the program i've made on my repo. you can decrypt HDD and reencrypt it back. you need eid_root_key and sectors (hdd_image). instructions should be clear. it's based of his code btw

then you can mount the decrypted hdd with kpartx-ps3

http://www.ps3devwiki.com/wiki/Mount...artition_Table

edit: slight note. sectors size should be multiple of 0x200 and >=0x1000

furtsiv
05-13-2013
06:14 PM

96

hi
is it normal that i can access to my ps3 hdd0 from linux (red ribbon) ?
because i was triying to put a dvd into drive and then the ps3 gamesos partition showed up on linux and i was able to see all ps3 games installed on my hdd under hdd0/GAMES

tjhooker73
05-14-2013
09:42 AM

97

Originally Posted by furtsiv

hi
is it normal that i can access to my ps3 hdd0 from linux (red ribbon) ?
because i was triying to put a dvd into drive and then the ps3 gamesos partition showed up on linux and i was able to see all ps3 games installed on my hdd under hdd0/GAMES

Yes.. that's one of the reasons Sony removed it.. it's exploitable. Not enough security.

Sent from my HTC One X using Tapatalk 2

Naehrwert released ps3hdd: PS3 HDD Encryption

97 Comments

Visit Sponsored Links

Categories

Archives

Tags