Repository For Decryption Tools

advocatusdiaboli
01-28-2013
09:58 PM

1

I love this stuff.

GregoryRasputin
01-29-2013
02:54 AM

2

Front Paged and thanks [MENTION=202826]zecoxao[/MENTION]

DEFAULTDNB
01-29-2013
03:00 AM

3

Awesome work [MENTION=202826]zecoxao[/MENTION]

zecoxao
01-29-2013
03:18 AM

4

[MENTION=7773]GregoryRasputin[/MENTION] [MENTION=224021]DEFAULTDNB[/MENTION] glad that i could help. remember to give thanks to graf and glevand for the HUGE work they have done in the past and present (glevand, you're a boss, keep going like that ), also naehrwert for the awesome hints he has given in his tweets (it's very cool to figure out hints ) and fail0verflow, which left us with this open road ahead for us to pave.

MRDOTB
01-29-2013
04:21 AM

5

How to (EID)

Get your eid_root_key and split it into two parts, the erk (key) and riv (iv) and put them under data
Get your eEID, rename it to eid(no extension) and put it into eid folder
Make
Run main

How to (HDD)

Get a binary image from the ps3 hdd. you can use HxD, but linux is preferable
Get your eid_root_key
Place them both under the data folder
Make
Run main

To decrypt my HDD img I need only my EID0 and eEID? Am I understand correctly?

For getting "eid_root_key" (EID0 ?) I must "extract it" from met loader (via i.e mathieulh exploit)?

I was thinked that for decryption I need ata/endec keys and they are per console keys. Or they are calculate from my EIDs?

Sorry for stupid questions but still I don't understand everything.

digiprog
01-29-2013
04:32 AM

6

man .. thats a great job ! .. first anaria and now this i feel good ! $ony take this slap again !

Zarh
01-29-2013
04:37 AM

7

thank you for this

zeeks
01-29-2013
08:39 AM

8

Originally Posted by MRDOTB

To decrypt my HDD img I need only my EID0 and eEID? Am I understand correctly?

For getting "eid_root_key" (EID0 ?) I must "extract it" from met loader (via i.e mathieulh exploit)?

I was thinked that for decryption I need ata/endec keys and they are per console keys. Or they are calculate from my EIDs?

Sorry for stupid questions but still I don't understand everything.

I understand none of this but if we are able to decrypt our hard drives now then this is amazing. No more worrying about ps3 dieing and all my data being lost soon!!

anaria
01-29-2013
10:01 AM

9

Mouahahhhh, more opensource more! give me more!!!

Awesome man.
I love folks who love open... source!

MRDOTB
01-29-2013
11:54 AM

10

Originally Posted by zeeks

I understand none of this but if we are able to decrypt our hard drives now then this is amazing. No more worrying about ps3 dieing and all my data being lost soon!!

Encryption is only one side of medal. You need also a magic program (which actually not exist)

for reading PS3 file system. Anyway, you need ata key. After getting it, you can update fw for newest OFW and still having access to your data (Sony cannot change this key, of course in business meaning they cannot). And yes, you could still have access to your data after console dead.

For me it's one of the most important discovery on the scene.

zecoxao
01-29-2013
12:31 PM

11

Originally Posted by MRDOTB

To decrypt my HDD img I need only my EID0 and eEID? Am I understand correctly?

For getting "eid_root_key" (EID0 ?) I must "extract it" from met loader (via i.e mathieulh exploit)?

I was thinked that for decryption I need ata/endec keys and they are per console keys. Or they are calculate from my EIDs?

Sorry for stupid questions but still I don't understand everything.

To decrypt HDD, you need a binary image of the HDD. you can get it with dd or any hex editor that supports binary disk copying.

For the root_key, just use flatz's package. works perfectly fine with it (outputs eid_root_key to /dev_hdd0/temp folder)

ata/encdec are calculated from keyseeds, which are available on the wiki, or in that program.

for mounting the hdd, use kpartx-ps3, glevand has done the work on the wiki on how to mount it on linux.

edit: "magic program" would be kpartx-ps3 xD

edit2: http://www.ps3devwiki.com/wiki/Mount...artition_Table here you go. i successfully have done this a long time ago, so i know it works

Abcdf
01-29-2013
12:47 PM

12

thanks zecoxao

bobross
01-29-2013
01:46 PM

13

Anyone want to post a spoon-feed step-by-step tutorial on how to get all this working?

(including how to download all the required Linux stuff)

MRDOTB
01-29-2013
02:15 PM

14

Originally Posted by zecoxao

For the root_key, just use flatz's package. works perfectly fine with it (outputs eid_root_key to /dev_hdd0/temp folder)

eEID RKDumper [?]

One more thing. You said in readme that I need also an eEID. Can I dump it via Memdump?

for mounting the hdd, use kpartx-ps3, glevand has done the work on the wiki on how to mount it on linux.

edit: "magic program" would be kpartx-ps3 xD

Wow, i didn't expected this so fast. This guy is amazing.

Thanks for links. This weekend will by my most beautiful than ever before with PS3. :D

zecoxao
01-29-2013
03:12 PM

15

Originally Posted by MRDOTB

eEID RKDumper [?]

One more thing. You said in readme that I need also an eEID. Can I dump it via Memdump?

Wow, i didn't expected this so fast. This guy is amazing.

Thanks for links. This weekend will by my most beautiful than ever before with PS3. :D

if you want to decrypt the eEID, yes, you need it. you need to rename the name and extension though, if you're planning on using memdump.

edit: also, if anyone's interested into making a gui to do it automatically without command line, that'd be much appreciated from me. i suck terribly at C++ xD

sguerrini97
01-30-2013
09:16 AM

16

I will try to decrypt my HDD, but is there any way to re-encrypt it? As far as I know this tool doesn't have an option to encrypt

zecoxao
01-30-2013
10:09 AM

17

Originally Posted by sguerrini97

I will try to decrypt my HDD, but is there any way to re-encrypt it? As far as I know this tool doesn't have an option to encrypt

it's possible yes. it's just doing the decryption backwards. i'll try to do it then

haz367
01-30-2013
10:28 AM

18

while ur at it...can u make a full-noob proof guide for us s*ckers? the wiki is just to short in proper explain for noobs, or atleast for those parts..btldr etc

sguerrini97
01-30-2013
10:49 AM

19

Originally Posted by zecoxao

it's possible yes. it's just doing the decryption backwards. i'll try to do it then

So from "sectors" file I will get the "sectors_decrypted" file, then I need to remove "sectors" an do the process again, so the tool will encrypt "sectors_decrypted" to "sectors"?

zecoxao
01-30-2013
12:12 PM

20

Originally Posted by sguerrini97

So from "sectors" file I will get the "sectors_decrypted" file, then I need to remove "sectors" an do the process again, so the tool will encrypt "sectors_decrypted" to "sectors"?

nah, you need to encrypt it back. hold on a sec, i'll upload my newest commit to github, i've just added hdd encryption. MAKE SURE YOU TEST IT! (i've tested with a zeroed sample but i need testers to see if it actually works).

To test:

compare md5sum(or sha1) hash of sectors to sectors_encrypted. if it matches, you can use it safely

.

edit: ok , just added, feel free to test it.

sguerrini97
01-30-2013
01:02 PM

21

Originally Posted by zecoxao

nah, you need to encrypt it back. hold on a sec, i'll upload my newest commit to github, i've just added hdd encryption. MAKE SURE YOU TEST IT! (i've tested with a zeroed sample but i need testers to see if it actually works).

To test:

compare md5sum(or sha1) hash of sectors to sectors_encrypted. if it matches, you can use it safely .

edit: ok , just added, feel free to test it.

Thank you, I'm going to try this as soon as possible (I'm making a raw copy of my hdd with dd right now

)

Edit: [MENTION=202826]zecoxao[/MENTION]
When I select option 1 (decrypt HDD) the tool give me my keys (ATA DATA, ATA TWEAK, ENCDEC DATA, ENCDEC TWEAK) but generates a null (0 byte) sectors_decrypted file.

My "sectors" file is the full HDD dump (80GB) from a slim ps3, should I split it in sectors (512 byte)?
However the eid decryption is working fine.
Thank you again

Edit 2: with a single sector (512 byte) as "sectors" file, I got "Segmentation fault (core dump created).".
The tool compiles fine so I don't think I miss some dependences.. And I'm on Ubuntu 12.10.

zecoxao
01-30-2013
04:34 PM

22

Originally Posted by sguerrini97

Thank you, I'm going to try this as soon as possible (I'm making a raw copy of my hdd with dd right now )

Edit: [MENTION=202826]zecoxao[/MENTION]
When I select option 1 (decrypt HDD) the tool give me my keys (ATA DATA, ATA TWEAK, ENCDEC DATA, ENCDEC TWEAK) but generates a null (0 byte) sectors_decrypted file.

My "sectors" file is the full HDD dump (80GB) from a slim ps3, should I split it in sectors (512 byte)?
However the eid decryption is working fine.
Thank you again

Edit 2: with a single sector (512 byte) as "sectors" file, I got "Segmentation fault (core dump created).".
The tool compiles fine so I don't think I miss some dependences.. And I'm on Ubuntu 12.10.

it does that error again? weird... i thought i have fixed it... let me test it here

edit: ok, here's what i want you to do (here it works fine):

-delete the repository you cloned and clone it again;
-recompile and retest again;
-if that doesn't work, MAKE SURE the image size is multiple of 0x200 bytes, or else it'll give you an error

sguerrini97
01-31-2013
01:50 AM

23

Originally Posted by zecoxao

it does that error again? weird... i thought i have fixed it... let me test it here

edit: ok, here's what i want you to do (here it works fine):

-delete the repository you cloned and clone it again;
-recompile and retest again;
-if that doesn't work, MAKE SURE the image size is multiple of 0x200 bytes, or else it'll give you an error

Tried with 1kb file (firsts 1000 bytes should be the partition table) and it seems to work but I didn't get the decrypted file..
[SPOILER]

[/SPOILER]

zecoxao
01-31-2013
05:53 AM

24

Originally Posted by sguerrini97

Tried with 1kb file (firsts 1000 bytes should be the partition table) and it seems to work but I didn't get the decrypted file..
[SPOILER][/SPOILER]

decrypted file is sectors_decrypted. next you need to mount it with kpartx-ps3 :D

sguerrini97
01-31-2013
06:19 AM

25

Originally Posted by zecoxao

decrypted file is sectors_decrypted. next you need to mount it with kpartx-ps3 :D

Yes but it didn't decrypt the file, check the md5 hashes, they are the same.

sguerrini97
01-31-2013
11:00 AM

26

Hdd decrypted and mounted on Linux virtual machine!

As root is fully readable so we can backup everything from a broken PS3 (with eid_root_key)

Big thanks to zecoxao for his help!

zecoxao
01-31-2013
11:06 AM

27

just a warning for those testing HDD decryption with my app: it DOES work, BUT you need a fast pc for this (and with lots of RAM too) to decrypt small/medium sized disks

bobross
02-01-2013
01:09 PM

28

Originally Posted by sguerrini97

Hdd decrypted and mounted on Linux virtual machine!

As root is fully readable so we can backup everything from a broken PS3 (with eid_root_key)

Big thanks to zecoxao for his help!

Noob tutorial please!

sguerrini97
02-02-2013
10:41 AM

29

Originally Posted by bobross

Noob tutorial please!

When you have your eid_root_key, put it in the data folder and run the tool with option one (1) to decrypt the hdd (don't remove the sectors file from data). The tool will give you your HDD keys on the screen.

Then you can follow this.
http://www.ps3devwiki.com/wiki/Mount...artition_Table

To write on the GameOS partition you have to recompile your kernel with ufs write support, this may be dangerous and cause data loss, so first you should try with a raw image of the decrypted hdd.

This is a kernel with ufs write support ready for Ubuntu 12.10 x86

linux-image-3.5.7.2-ufs-write_3.5.7.2-ufs-write-10.00.Custom_i386.deb (41.8 MB)
https://mega.co.nz/#!2ANnGaRC!PW1x3w...hxfdwFbKcbj0gA
MD5: 8fa77a333feb65eeb12c04426f429c1d

Edit: I've got problems restoring an HDD image to my HDD from PC:

Code:

dd if=./dec_ps3hdd.img of=/dev/mapper/dec_ps3hdd

A few seconds after execute the command the whole system get blocked.
Actually I'm restoring the image from glevand's debianlive distro, that mount the hdd decrypted.

MRDOTB
02-02-2013
01:52 PM

30

OK, I'm mentally ready.

1. ERK is the first 16b and the RIV are rest 32b from EID0 (EID Root Key). Right?
2. My eEID (dumped via Memdump v0.1) have 64KB but "placeholder" in your package is ~7KB. Why?

These key's are static and never changed through firmwares? I ask because i have read them long time ago on CEX 3.55 and actually I'm on DEX 4.21 and I cannot read them again. I thinking they are not, because this will affect ata key and CellOS would force me to format, but it's better to ask, so I asking. Sorry for my English. I hope you understand what I delirious.

zecoxao
02-02-2013
02:04 PM

31

Originally Posted by MRDOTB

OK, I'm mentally ready.

1. ERK is the first 16b and the RIV are rest 32b from EID0 (EID Root Key). Right?
2. My eEID (dumped via Memdump v0.1) have 64KB but "placeholder" in your package is ~7KB. Why?

These key's are static and never changed through firmwares? I ask because i have read them long time ago on CEX 3.55 and actually I'm on DEX 4.21 and I cannot read them again. I thinking they are not, because this will affect ata key and CellOS would force me to format, but it's better to ask, so I asking. Sorry for my English. I hope you understand what I delirious.

1. erk is 32 riv is 16. you can use that eEID, don't worry about the size of mine.
eid_root_key is NOT static, eid keys are NOT static eid keyseeds ARE static.

MRDOTB
02-02-2013
02:10 PM

32

When I said static I have in mind that they are never changing through one console on different fw's. I know they are different on different PS3's.

Thanks for answer. Wish me luck. :D

zecoxao
02-02-2013
02:24 PM

33

Originally Posted by MRDOTB

When I said static I have in mind that they are never changing through one console on different fw's. I know they are different on different PS3's.

Thanks for answer. Wish me luck. :D

http://dictionary.reference.com/browse/static

showing little or no change

when you don't know the meaning of the word just search

and yes, you're right.

bobross
02-04-2013
06:26 PM

34

Originally Posted by sguerrini97

When you have your eid_root_key, put it in the data folder and run the tool with option one (1) to decrypt the hdd (don't remove the sectors file from data). The tool will give you your HDD keys on the screen.

Then you can follow this.
http://www.ps3devwiki.com/wiki/Mount...artition_Table

To write on the GameOS partition you have to recompile your kernel with ufs write support, this may be dangerous and cause data loss, so first you should try with a raw image of the decrypted hdd.

This is a kernel with ufs write support ready for Ubuntu 12.10 x86

linux-image-3.5.7.2-ufs-write_3.5.7.2-ufs-write-10.00.Custom_i386.deb (41.8 MB)
https://mega.co.nz/#!2ANnGaRC!PW1x3w...hxfdwFbKcbj0gA
MD5: 8fa77a333feb65eeb12c04426f429c1d

Edit: I've got problems restoring an HDD image to my HDD from PC:
Code:
dd if=./dec_ps3hdd.img of=/dev/mapper/dec_ps3hdd
A few seconds after execute the command the whole system get blocked.
Actually I'm restoring the image from glevand's debianlive distro, that mount the hdd decrypted.

Thanks for the pre compiled Ubuntu program. I installed it but am still kinda lost.. Can you do the same for the Decrypt tool? How do I get the eid_root_key? I seriously need a step by step. I'm trying to understand all of this but can't seem to grasp it.

haz367
02-04-2013
06:41 PM

35

Originally Posted by bobross

How do I get the eid_root_key?

grab the 3k3y dumper and run it, it includes the rootkey..easy and fast

zecoxao
02-04-2013
07:38 PM

36

it's better if he uses the dumper by flatz, so he'll JUST get the root key

MRDOTB
02-05-2013
04:52 AM

37

Originally Posted by sguerrini97

To write on the GameOS partition you have to recompile your kernel with ufs write support, this may be dangerous and cause data loss, so first you should try with a raw image of the decrypted hdd.

This is a kernel with ufs write support ready for Ubuntu 12.10 x86

linux-image-3.5.7.2-ufs-write_3.5.7.2-ufs-write-10.00.Custom_i386.deb

I appreciate your effort making ready for install deb pkg but I just want do it myself.

Could you say from what branch you compile this? As I know there's no official kernel 3.5.x.x for Ubuntu 12.xx, and "clean kernels" from i.e kernel.org are not compatible (many Ubuntu patches)?

bobross
02-05-2013
10:44 AM

38

Ok so from what I understand grab the eEID_RKDumper.pkg Get my Root key

Then attach my PS3 HD to my Ubuntu box and... something something something?

EDIT: Ok I tried both eEID Dumper and 3k3y dumper and get a (80010017) error for both? I'm on Rogero.....

haz367
02-05-2013
03:14 PM

39

best to put it here, i like to think that zecoxao is a beautifull japanese girl anyways..
i like to thank zecoxao for putting up with the linux noob of all time today.. and we managed to to pull whatever we pulled thx for taking the time there :cheers:
************* [ - Post Merged - ] *************

Originally Posted by bobross

EDIT: Ok I tried both eEID Dumper and 3k3y dumper and get a (80010017) error for both? I'm on Rogero.....

the 4.xx release?
try these pkg's they made.. for the rootkey dumper/3k3y dumper
http://rghost.net/43577016
http://rghost.net/43577040

bobross
02-05-2013
09:56 PM

40

Originally Posted by haz367

best to put it here, i like to think that zecoxao is a beautifull japanese girl anyways..
i like to thank zecoxao for putting up with the linux noob of all time today.. and we managed to to pull whatever we pulled thx for taking the time there :cheers:
************* [ - Post Merged - ] *************

the 4.xx release?
try these pkg's they made.. for the rootkey dumper/3k3y dumper
http://rghost.net/43577016
http://rghost.net/43577040

Yeah I'm on the 4.xx release, still getting the error with theses files. Any ideas? Do I need to boot in some special mode or from multiman?

Well I unplugged the USB stick and removed disc, now its just hanging on a black screen with both programs

Edit: I flashed to Rogero_CEX_4.30_v2.05 just to be sure (think I was on 4.30 v2.03) and still black screen for both programs.. I'm stumped

MD Krie
02-05-2013
10:25 PM

41

How to do using cygwin?

Sent from my GT-I8150 using Tapatalk 2

hellsing9
02-05-2013
10:40 PM

42

[MENTION=202826]zecoxao[/MENTION] always there.

haz367
02-06-2013
04:43 AM

43

http://www.mediafire.com/?4l27o19ockqlg6l
credits to [MENTION=177818]jarmster[/MENTION]

run the app
triple beep + red flashing led...power down with front button = no good but it dumps the key

to get ur root_key u must go back to 3.55, funny fact...when using the "3k3y dumper" on 3.55 it includes the eid_root_key

sguerrini97
02-06-2013
12:46 PM

44

Originally Posted by MRDOTB

I appreciate your effort making ready for install deb pkg but I just want do it myself.

Could you say from what branch you compile this? As I know there's no official kernel 3.5.x.x for Ubuntu 12.xx, and "clean kernels" from i.e kernel.org are not compatible (many Ubuntu patches)?

I've just installed the last linux-source package available on synaptic package manager, and then I rebuilt the kernel from it.
There are many tutorials on the web, like this. At the "make menuconfig" step you must go on file system, misc file systems and enable UFS write support, or you can manually edit the ".config" file.

For the eid_root_key, I got it much time ago from with metldrpwn.. Anyway downgrade to 3.55 it's easy

bobross
02-06-2013
01:33 PM

45

Ok so going back to 3.55 and back via the Rogero tutorial is safe these days? Have not been on 3.55 in ages.

You know I just thought of something. The HD I'm trying to get data off of was originally in this PS3, but it got corrupt and the PS3 could not restore it. So I assume this is just some header corruption. But now there is a new HD in that PS3. Is this root key tied to the current HD now? Is the old HD somehow invalid now?

Basically is it even possible to decrypt the old HD at all?

sguerrini97
02-06-2013
02:15 PM

46

Originally Posted by bobross

Ok so going back to 3.55 and back via the Rogero tutorial is safe these days? Have not been on 3.55 in ages.

You know I just thought of something. The HD I'm trying to get data off of was originally in this PS3, but it got corrupt and the PS3 could not restore it. So I assume this is just some header corruption. But now there is a new HD in that PS3. Is this root key tied to the current HD now? Is the old HD somehow invalid now?

Basically is it even possible to decrypt the old HD at all?

The eid_root_key can't be changed, and the hdd encryption keys are based over the eid_root_key so I think that there's no difference and you can decrypt also your old HDD.
If the HDD was corrupted can be a problem but you should explore your hdd to backup your data.

Anyway I came back to 3.55 just 3-4 days ago with rebug 9.99 downgrader to reinstall otheros++ and I got no problem

Snake_Plissken_PMW
02-06-2013
02:22 PM

47

with linux is there a way tho to dycrypt whole harddrive. place in mods/data into a gamez cache then enycrpt back so when i plug in my hd back into ps3 it works?

bobross
02-06-2013
05:20 PM

48

Ok so finally got 3Dump.bin after downgrading back to 3.55 using 3K3Y (Leave a USB stick installed when you run the app, it puts a 1kb file called 3dump.bin on the stick containing the decrypted drive keys)

PSLIGHT eEID dumper just rebooted my machine unless it wrote some file somewhere I don't know?

Ok got 3K3Y ripper, loaded 3Dump.bin. I see key1 and key2

Dumped HD image with HxD. (BTW those that are thinking of doing this I have a sata dock. USB connection - estimated dump time: 21 hours. eSATA connection: 24 minutes.)

What would be the next step??

DebugBrain
02-06-2013
05:32 PM

49

Two weeks ago, for the first time, I had to get the eEID_root-key from a Dex Ps3, after having tried everything I had to do some research on the web, then I finally found the right information that helped me.

Needed files:
1) 3.55 DEX with peek & poke (R-3.55-DEX-DG-C_F_W-PeekPoke.PUP)

2) Kmeaw lv2 kernel & flatz eid root key dumper

3) Rebug Toolbox (v02.01.00)

4) mmCM ver 04.00.01 BASE (20120126).pkg
multiMAN ver 04.01.00 DEX UPD MOD (20120204).pkg
mmCM ver 04.04.03 BASE (20120702).pkg

These are the instructions to get eid_root_key on DEX:

1) Downgrade to 3.55-DEX special downgrader, after you can install 3.55 DEX with
peek & poke (R-3.55-DEX-DG-C_F_W-PeekPoke.PUP)

2) Instal multiman in this order:

mmCM ver 04.00.01 BASE (20120126).pkg

multiMAN ver 04.01.00 DEX UPD MOD (20120204).pkg

mmCM ver 04.04.03 BASE (20120702).pkg

3) Install Rebug-Toolbox-02.00.00

3) Put lv2_kernel.self from 3.55KMEAW on a usb stick and connect to the PS3

4) Start toolbox

5) In Utilities - Load LV2 Kernel from usb drive

6) Start eid0 flatz root key dumper

7) Start Multiman for copy your keys from hdd to usb-drive

Done!

it seems fair to say that the instructions are of PatrikBatman of ps3crunch.
I have not posted the link for downloads because I did not know if I could do

bobross
02-07-2013
09:53 AM

50

The saga continues. Think I'm close!

I have my HDD file from HxD in the \ps3_decrypt_tools\data\ in Ubuntu 12.10

What format do I use the root key in? The actual 3Dump.bin file? Or a text doc with just the key?

And I have two keys, what one do I use? #1 or #2?

sguerrini97
02-07-2013
10:10 AM

51

Originally Posted by bobross

The saga continues. Think I'm close!

I have my HDD file from HxD in the \ps3_decrypt_tools\data\ in Ubuntu 12.10

What format do I use the root key in? The actual 3Dump.bin file? Or a text doc with just the key?

And I have two keys, what one do I use? #1 or #2?

The key should be called "eid_root_key" and should be 48 bytes.
Why did you use the 3k3y dumper? As far as I know it will give you the keys for the BD Drive..

You should use this: http://www.ps3hax.net/showthread.php?t=40889

Someone (I think deank) said that to use it on DEX you must load a CEX (Kmeaw 3.55) lv2_kernel.self.

bobross
02-07-2013
11:58 AM

52

Originally Posted by sguerrini97

The key should be called "eid_root_key" and should be 48 bytes.
Why did you use the 3k3y dumper? As far as I know it will give you the keys for the BD Drive..

You should use this: http://www.ps3hax.net/showthread.php?t=40889

Someone (I think deank) said that to use it on DEX you must load a CEX (Kmeaw 3.55) lv2_kernel.self.

Ok so this is what has happened. Initially I thought it wasn't working. So I used 3k3y. Just this morning I FTP'd to my ps3 and to my surprise there was eid_root_key on the HD!

Fast forward to now. I have run the Ubuntu program and it looks like I successfully decrypted my HD! But now I don't know what to do. Do I mount the HD image or something? How do I access the data?

Ok I need to mount it with kpartx-ps3

can I grab this program from someone? Ps3wiki is down. Or can I install it via command line in Ubuntu?

sguerrini97
02-07-2013
12:42 PM

53

Originally Posted by bobross

Ok so this is what has happened. Initially I thought it wasn't working. So I used 3k3y. Just this morning I FTP'd to my ps3 and to my surprise there was eid_root_key on the HD!

Fast forward to now. I have run the Ubuntu program and it looks like I successfully decrypted my HD! But now I don't know what to do. Do I mount the HD image or something? How do I access the data?

Ok I need to mount it with kpartx-ps3

can I grab this program from someone? Ps3wiki is down. Or can I install it via command line in Ubuntu?

The wiki seems offline now.. All the info that you need are here: http://www.ps3devwiki.com/wiki/Mount...artition_Table

bobross
02-07-2013
09:41 PM

54

Originally Posted by sguerrini97

The wiki seems offline now.. All the info that you need are here: http://www.ps3devwiki.com/wiki/Mount...artition_Table

Ok I'm confused and don't really understand that page. So kpartx-ps3 is not some standalone program I can just select my decrypted image with? I have to compile it? I don't know how to do that.

I'm sooo close after all this. Can someone PLEASE walk me through this? I've gotten this far with very little Linix experience!

MRDOTB
02-08-2013
05:07 AM

55

You must compile your own kernel image for your Linux distro with Glevands patches (or use attached kernel few posts before). After that you can use kpartx for mounting and reading data on decrypted sector dump or (?) real hw.

But... Ubuntu have tons of patches for their distro, and there's no official 3.5.x kernel for it. It's pain in ass doing it on Ubuntu.

sguerrini97
02-08-2013
09:08 AM

56

Originally Posted by MRDOTB

You must compile your own kernel image for your Linux distro with Glevands patches (or use attached kernel few posts before). After that you can use kpartx for mounting and reading data on decrypted sector dump or (?) real hw.

But... Ubuntu have tons of patches for their distro, and there's no official 3.5.x kernel for it. It's pain in ass doing it on Ubuntu.

I didn't install glevand patches, afaik they are needed for ps3 distros.. I've just enabled UFS write support in my kernel and patched kpartx to recognize ps3 hdd partition table (patches are here http://gitorious.ps3dev.net/ps3linux...-tools-patches).

Code:

git clone http://git.opensvc.com/multipath-tools/.git multipath-tools
cd multipath-tools
patch -p1 < ../kpartx-ps3-partition.patch
make

You need a physical drive connected to the PC, otherwise device mapper will give you problems.

Anyway you can split your hdd image to use the tool in the first page, once splitted the procedure it's longer but easier imo.

MRDOTB
02-08-2013
12:04 PM

57

Originally Posted by sguerrini97

I didn't install glevand patches, afaik they are needed for ps3 distros..

So, I must misunderstood wiki.
Sorry.

I've just enabled UFS write support in my kernel and patched kpartx to recognize ps3 hdd partition table (...)

I've got: "No such file and directory", and in multipath folder I didn't find it.

bobross
02-08-2013
01:18 PM

58

What am I doing wrong here?

I use dd if=./HDD.img of=/dev/mapper/dec_ps3hdd

It starts crunching then this:

Not enough space? I have 170 GB drive and this is only a stock 60GB PS3 drive?

I have 111GB free...

I also did install linux-image-3.5.7.2-ufs-write_3.5.7.2-ufs-write-10.00.Custom_i386

EDIT: Ok so I used this command:
dd if=./HDD.img of=dec_ps3hdd

(shows how little I understand about the Linux file structure) and it copied. Still trying to mount...

bobross
02-08-2013
09:37 PM

59

So I'm still stuck. Can someone give me a Ubuntu step-by-step on how to mount this decrypted .img?

And like I said before I barely know Linux basics. So saying "oh just go here and compile this" is not really any help. I don't even really understand the file structure of that OS. So in short I've been using windows my whole life - hence why I'm pleading for simple understandable steps.

Thanks,
Bob

MRDOTB
02-09-2013
05:44 AM

60

Originally Posted by bobross

And like I said before I barely know Linux basics. So saying "oh just go here and compile this" is not really any help. I don't even really understand the file structure of that OS. So in short I've been using windows my whole life - hence why I'm pleading for simple understandable steps.

Same me.

So I'm still stuck. Can someone give me a Ubuntu step-by-step on how to mount this decrypted .img?

You saying about mounting unc hdd img, but have you already patched kpartx? I'm stuck on it. I was installed git, multipath-tools, and clone repo but there's is no file such "kpartx-ps3-partition.patch". Also I don't understand why there's "../"? In ubuntu default dir is "/home/<user>/", so i don't understand sguerrini97 script. Why going to "/home/<user>/multipath-tools/", and telling patch app to looking it on level above.

Also, I cannot compile it from this git repo because I've getting: libdevmapper.h: no such file or directory.

Have you done this?

edit:
Ok. done. I compile it. In Ubuntu 12.0.4.1 LTS are missing:
libaio-dev, libreadline-dev and liblvm2 (this one i compile myself from ftp://sources.redhat.com/pub/lvm2/LVM2.2.02.98.tgz).
+ sudo updatedb

bobross
02-09-2013
12:12 PM

61

Originally Posted by MRDOTB

Same me.

You saying about mounting unc hdd img, but have you already patched kpartx? I'm stuck on it. I was installed git, multipath-tools, and clone repo but there's is no file such "kpartx-ps3-partition.patch". Also I don't understand why there's "../"? In ubuntu default dir is "/home/<user>/", so i don't understand sguerrini97 script. Why going to "/home/<user>/multipath-tools/", and telling patch app to looking it on level above.

Also, I cannot compile it from this git repo because I've getting: libdevmapper.h: no such file or directory.

Have you done this?

edit:
Ok. done. I compile it. In Ubuntu 12.0.4.1 LTS are missing:
libaio-dev, libreadline-dev and liblvm2 (this one i compile myself from ftp://sources.redhat.com/pub/lvm2/LVM2.2.02.98.tgz).
+ sudo updatedb

I have attached the file kpartx-ps3-partition.patch.

Do not use this command in term:
patch -p1 < ../kpartx-ps3-partition.patch

Be in the Multipath-tools DIR and use this command:
patch -p1 < kpartx-ps3-partition.patch

Then type:
make

Console will go crazy but I end up with these error after a bit:

Code:

root@ubuntu:/home/bob/Downloads/multipath-tools# make make[1]: Entering directory `/home/bob/Downloads/multipath-tools/libmultipath' make[1]: Nothing to be done for `all'. make[1]: Leaving directory `/home/bob/Downloads/multipath-tools/libmultipath' make[1]: Entering directory `/home/bob/Downloads/multipath-tools/libmultipath/prioritizers' make[1]: Nothing to be done for `all'. make[1]: Leaving directory `/home/bob/Downloads/multipath-tools/libmultipath/prioritizers' make[1]: Entering directory `/home/bob/Downloads/multipath-tools/libmultipath/checkers' cc -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -Wunused -Wstrict-prototypes -fPIC -DLIB_STRING=\"lib\" -I.. -c -o directio.o directio.c directio.c:16:20: fatal error: libaio.h: No such file or directory compilation terminated. make[1]: *** [directio.o] Error 1 make[1]: Leaving directory `/home/bob/Downloads/multipath-tools/libmultipath/checkers' make: *** [recurse] Error 2 root@ubuntu:/home/bob/Downloads/multipath-tools#

EDIT: Solved all errors by installing missing libs by hand:

apt-get install aptitude
sudo apt-get install python2.7-dev
sudo aptitude install libaio-dev
sudo apt-get install libreadline-dev
--------------------------------------------------------------------------

Now I run kpartx -l dec_ps3hdd.img but get:

Code:

/dev/mapper/control: open failed: Permission denied Failure to communicate with kernel device-mapper driver. mount: Could not find any loop device. Maybe /dev/loop# has a wrong major number?Bad address can't set up loop

Ugh I'm lost again! Grrr

sguerrini97
02-10-2013
08:41 AM

62

[MENTION=100143]bobross[/MENTION] run the command as root (sudo kpartx -l dec_ps3hdd.img).

bobross
02-10-2013
01:14 PM

63

Originally Posted by sguerrini97

[MENTION=100143]bobross[/MENTION] run the command as root (sudo kpartx -l dec_ps3hdd.img).

I renamed the IMG to dec.img for less typing. Something is wrong. It's just doing nothing:

sguerrini97
02-10-2013
02:42 PM

64

Originally Posted by bobross

I renamed the IMG to dec.img for less typing. Something is wrong. It's just doing nothing:

How did you get the .img file?

bobross
02-10-2013
03:03 PM

65

1. Attached Ps3 HD to esata dock
2. Used HxD -> select Drive -> save-as "HDD.img"
3. In Ubuntu -> HDD file from HxD in the \ps3_decrypt_tools\data\ with eid_root_key file
4. Ran ./decrypt_tools -> select option #1 (Decrypt HDD)
5. Seemed(?) successful output [ATA-DATA/TWEAK/ENCDEC-DATA/TWEAK Keys]

Maybe I did something wrong in HxD?

I'm re-dumping my HD in Ubuntu using "dd if=/dev/sdb of=./PS3HD.img"

Can only get Ubuntu to recognize the HD over USB connection not eSATA for some reason so this might take a while.

advocatusdiaboli
02-10-2013
08:15 PM

66

Originally Posted by bobross

I'm re-dumping my HD in Ubuntu using "dd if=/dev/sdb of=./PS3HD.img"

For your own sanity I do hope that . ( this directory ) is on the external USB?

Code:

cd /mnt/sdc3/
dd if=/dev/sdb of=./PS3HD.img

With a cd( change directory ) similar to the one above.

bobross
02-10-2013
09:23 PM

67

Originally Posted by advocatusdiaboli

For your own sanity I do hope that . ( this directory ) is on the external USB?
Code:
cd /mnt/sdc3/
dd if=/dev/sdb of=./PS3HD.img
With a cd( change directory ) similar to the one above.

My PS3 drive is on a eSATA dock that also has USB. My Ubuntu is on a local disc via VmWare.

I can't figure out how to mount the PS3 drive via eSATA. Only USB connection seems to work.

Looks like its going at about 1GB every 1-2min. So 60GB drive, maybe an 1/2 hours

This is just my "practice" drive too. The data I REALLY need is on my 650GB drive ugghh...

I looked around for mounting eSATA drive on Ubuntu but they all seem to involve re-partitioning or formatting and I obviously don't want to be dong that for my recovery purposes.

Edit: CRAP! dd image also does not mount! WTF am I doing wrong?!

advocatusdiaboli
02-10-2013
11:08 PM

68

dd image should not mount the ordinary way.

You should find your PS3’s keys( eid_root_key ), and then use the tool to mount the dd AFAIK.

I’m working on an SFO tool for the Mac now, but I’m paying attention to this thread as I would like to make a Mac port of this tool also, but one thing at the time.

sguerrini97
02-11-2013
03:11 AM

69

[MENTION=100143]bobross[/MENTION]
That image is your encrypted HDD, the tool will decrypt the file "sectors" and it must be multiple of 200 bytes.

For me it doesn't work with the full (80 GB) HDD, maybe you should split the image and decrypt 1-2 GB (multiple of 200 bytes) per time. http://unixhelp.ed.ac.uk/CGI/man-cgi?split

(I got the informations from zecoxao )

bobross
02-11-2013
02:23 PM

70

Originally Posted by advocatusdiaboli

dd image should not mount the ordinary way.

You should find your PS3�s keys( eid_root_key ), and then use the tool to mount the dd AFAIK.

What tool?

Originally Posted by sguerrini97

[MENTION=100143]bobross[/MENTION]
That image is your encrypted HDD, the tool will decrypt the file "sectors" and it must be multiple of 200 bytes.

For me it doesn't work with the full (80 GB) HDD, maybe you should split the image and decrypt 1-2 GB (multiple of 200 bytes) per time. http://unixhelp.ed.ac.uk/CGI/man-cgi?split

Can you post the example commands in Terminal you used please?

advocatusdiaboli
02-12-2013
05:12 AM

71

Originally Posted by bobross

What tool?

This one I assume: https://github.com/zecoxao/ps3_decrypt_tools

bobross
02-12-2013
09:24 AM

72

Originally Posted by advocatusdiaboli

This one I assume: https://github.com/zecoxao/ps3_decrypt_tools

I'm pretty sure that tool is only for decrypting the HD. I already have the decrypted image. I need help mounting it.

advocatusdiaboli
02-12-2013
09:23 PM

73

Code:

# mount /tmp/decryptedimage.dd /mnt/cdrom/

bobross
02-12-2013
09:34 PM

74

Originally Posted by advocatusdiaboli

Code:

# mount /tmp/decryptedimage.dd /mnt/cdrom/

Code:

mount: mount point /mnt/cdrom/ does not exist

?
************* [ - Post Merged - ] *************
Argh this is so effing frustrating. Someone want to volunteer who's done this on Ubuntu over PM to walk me through this. People keep jumping in on this thread confusing the hell out of me.

advocatusdiaboli
02-13-2013
03:26 AM

75

mkdir /mnt/cdrom/

bobross
02-14-2013
10:02 PM

76

Originally Posted by advocatusdiaboli

mkdir /mnt/cdrom/

Did that, seemed to work, then this:

Code:

mount: special device /dec_ps3hdd.img does not exist

Wait, then I did this :

Code:

mount dec_ps3hdd.img /mnt/cdrom/

(realized that first slash wasn't need)

But then it tells me this:

Code:

mount: you must specify the filesystem type

advocatusdiaboli
02-14-2013
11:12 PM

77

Where is the original dd image, and where is the deciphered one?

bobross
02-14-2013
11:39 PM

78

Originally Posted by advocatusdiaboli

Where is the original dd image, and where is the deciphered one?

wait I need both?! I only have the decrypted one in /media/bob/New/ps3_decrypt_tools/data as shown above

advocatusdiaboli
02-15-2013
12:03 AM

79

I don’t know if you need them both, I’m just trying to understand what your are doing.

As I have not been through the process myself yet.

bobross
02-15-2013
12:18 AM

80

Originally Posted by advocatusdiaboli

I don�t know if you need them both, I�m just trying to understand what your are doing.

As I have not been through the process myself yet.

I have a decrypted PS3 HD just sitting here and nobody seems to be able to help me get it mounted and read.

advocatusdiaboli
02-15-2013
12:28 AM

81

Originally Posted by bobross

I have a decrypted PS3 HD just sitting here and nobody seems to be able to help me get it mounted and read.

Well... that’s what you believe that you have done, can you please paste all the steps you have done so far and which files are available? That way we can find out if what you did makes sense.

I’m just trying to help you to find the answer.

sguerrini97
02-15-2013
05:40 AM

82

Originally Posted by bobross

I have a decrypted PS3 HD just sitting here and nobody seems to be able to help me get it mounted and read.

I don't think you have the decrypted image.. Try this post the output:

Code:

hexdump -C yourimagename.img | head -12

Inviato dal mio LG-P760 con Tapatalk 2

bobross
02-15-2013
11:39 AM

83

Originally Posted by sguerrini97

I don't think you have the decrypted image.. Try this post the output:
Code:
hexdump -C yourimagename.img | head -12
Inviato dal mio LG-P760 con Tapatalk 2

I'm starting over with a new HD dump to be sure, some questions:

1. Does the image need to be name anything specific for when I run ./decrypt tool?
2. I just put it in the /data folder and run ./decrypt_tool from the /ps3_decrypt_tools DIR? Or

do I need to specify where the IMG is so ./decrypt_tools /data/dec_ps3hdd.img?

sguerrini97
02-15-2013
12:02 PM

84

Originally Posted by bobross

I'm starting over with a new HD dump to be sure, some questions:

1. Does the image need to be name anything specific for when I run ./decrypt tool?
2. I just put it in the /data folder and run ./decrypt_tool from the /ps3_decrypt_tools DIR? Or

do I need to specify where the IMG is so ./decrypt_tools /data/dec_ps3hdd.img?

The image must be called "sectors" with no extension in data folder.
As I said before, for me the tool didn't work with the full dump so you should split the file and join the decrypted parts to get a full decrypted dump.

Inviato dal mio Optimus L9 con Tapatalk 2

bobross
02-15-2013
12:47 PM

85

Originally Posted by sguerrini97

The image must be called "sectors" with no extension in data folder.
As I said before, for me the tool didn't work with the full dump so you should split the file and join the decrypted parts to get a full decrypted dump.

Inviato dal mio Optimus L9 con Tapatalk 2

Hi Sguerrini,

Thanks for being so patient with me and helping out. I will split the file and report back as soon as the new dump is complete.

Would be something like this right?

Rename dec_ps3hdd.img to sectors

Code:

split -b 2147483648 sectors

bobross
02-16-2013
03:36 PM

86

ok so I got the HD split into 2GB chunks. When I run ./decrypt_tools it creates a file called selectors_decrypted but it's 0 bytes?

Is this right:

Code:

/media/bob/New/ps3_decrypt_tools/
./decrypt_tools
Choose option 1. (decrypt HD)

haz367
02-16-2013
04:11 PM

87

with 2GB splits i had an error..must be m mistake or some..then with "200mb" parts it decrypted fine each part..i'm about todo a 80GB but it took way to long with 200mb parts... the "program" works great..its the users

bobross
02-16-2013
04:23 PM

88

Originally Posted by haz367

with 2GB splits i had an error..must be m mistake or some..then with "200mb" parts it decrypted fine each part..i'm about todo a 80GB but it took way to long with 200mb parts... the "program" works great..its the users

Ok it seemed to work with 1GB chunks! 2GB was outputting nothing. I now have a 1GB sectors_decrypted file!

what should I be looking for when I run

Code:

hexdump -C sectors_decrypted | head -12

?

Still looks like a bunch of random data. Should there be some header in English or something?

also tried to mount but get this:

Code:

root@ubuntu:/media/bob/New/ps3_decrypt_tools/data# mount -t ufs -o ufstype=ufs2,ro sectors_decrypted /mnt/
mount: wrong fs type, bad option, bad superblock on /dev/loop0,
       missing codepage or helper program, or other error
       In some cases useful info is found in syslog - try
       dmesg | tail  or so

root@ubuntu:/media/bob/New/ps3_decrypt_tools/data#

haz367
02-16-2013
05:15 PM

89

didn't get that far here..the pain in the butt is the size of the "sectors" file..tested
6668863488 bytes/6.20GB chunks = segmentation fault
Exception: STATUS_ACCESS_VIOLATION at eip=00403119

isn't there a faster way on a pc even if 1GB chunks work..80x..imagine 320gb

but the sectors_decrypted, checked with HxD, obviously its decrypted fine
then the mounting part..lol

bobross
02-16-2013
07:01 PM

90

Ok something is wrong, my header on sectors_decrypted is still a bunch of jumbled data, nothing readable in English. Any ideas?

UPDATE: So I re-downgraded to Rogero CEX-3.55 CFW V3.7 and re-dumped my eid_root_key just to be sure, still not getting a proper decrypted image. Uggghh... any ideas?

sguerrini97
02-17-2013
06:30 AM

91

zecoxao told me that the file must be multiple of 200 bytes and bigger than 1000 bytes.
Anyway the fastest way is to get the keys from the tool (they are on screen when you select option 1) and follow the procedure on the wiki.

Inviato dal mio LG-P760 con Tapatalk 2

haz367
02-17-2013
06:38 AM

92

i bet it is, then we need to build glevlands distro, cuse trying spu-elf or whatever howto on wiki on red ribbon fails, need to setup that livecd where we can "ssh" into from rr to do this the fast way....then stuck again on that debian iso, it can be build but not without linux hassle

thx for all tips here..it only gonne take us a little longer to achive it

sguerrini97
02-17-2013
07:55 AM

93

Originally Posted by haz367

i bet it is, then we need to build glevlands distro, cuse trying spu-elf or whatever howto on wiki on red ribbon fails, need to setup that livecd where we can "ssh" into from rr to do this the fast way....then stuck again on that debian iso, it can be build but not without linux hassle

thx for all tips here..it only gonne take us a little longer to achive it

If you want glevand's distro to obtain your keys, you can obtain your keys with your eid_root_key and this tool.
Red ribbon can mount the PS3 hdd as read write with no problems, but I don't know if it can do that from the livecd.

Inviato dal mio LG-P760 con Tapatalk 2

haz367
02-17-2013
08:11 AM

94

thx for tip...its just not my linux day today

zecoxao
02-17-2013
08:24 AM

95

if you people need help i can help you on irc, at #ps3hax . i'll leave where i can be found in my signature . i'm just not in the mood for forums...

bobross
02-17-2013
02:33 PM

96

Hmm might need to take this to IRC. To re-cap here is where I'm stuck:

1. Copy PS3 HD via DD command (also did a rip with HxD)
2. split file into 200MB chunks
3. Rename first "xaa" file to "sectors" and place in ps3_decrypt_tools/data
5. Dumped eid_root_key on CFW 3.55 - place in /data
6. Open eid_root_key copy first 32 bytes in "XX XX XX XX XX XX" text format to file "key"
7. Copy last 16 bytes in "XX XX XX XX text" format to file "iv"
8. Run ./decrypt_tool and select option #1 (decHD)
9. Wait for processing
10. File "sectors_decrypted" is output
11. Open "sectors_decrypted" HxD
12. See only a jumbled mess no magic header at offset 00000000

Is are these steps correct? Should this be working?

haz367
02-17-2013
03:17 PM

97

yes that part should work, atleast it does via Cygwin setup and ./decrypt_tools.exe - 1
the first 200MB chunk wil show the magic? header like e.g with IF.I dump..aka human read-able language in it.. or whatever

Code:

00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000010  00 00 00 00 0f ac e0 ff  00 00 00 00 de ad fa ce  |................|
00000020  00 00 00 00 00 00 00 03  00 00 00 00 00 00 00 02  |................|
00000030  00 00 00 00 00 00 00 08  00 00 00 00 00 00 75 f8  |..............u.|
00000040  10 70 00 00 01 00 00 01  00 00 00 00 00 00 00 03  |.p..............|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

the second "chunk" does have again all unknown gibberish but stil decrypted ofcourse..for that we need to mount the "full decrypted" and i imagine then it looks like daemontools mount > dev_flash, dev_hdd0.. like we see it in ftp

atleast on a windows it would

stuck again on glevland distro oh why is this so stressfull..follow exact howto's and stil stuck..beat that..

bobross
02-17-2013
04:56 PM

98

ok well I am lost then, no idea why I'm not getting magic numbers.

MD Krie
02-21-2013
09:17 AM

99

No tutorial for this?

Sent from my GT-I8150 using Tapatalk 2

bobross
02-25-2013
02:51 PM

100

Anyone want to be a pal and compile a Ubuntu version of decryt_tools for me? I think I might have messed up on that? Still trying to figure this out.

mifelmi
03-07-2013
03:57 AM

101

Bobross did you manage to mount decrypted ps3 hdd image? My hdd is corupted according PS3. I have checked there is no bad blocks. PS3 want me to format. I have lots of picures on HDD. What Linux distribution should I use to mount PS3 HDD?

mifelmi
03-08-2013
05:44 AM

102

This is the list of my tasks:

1. Dump PS3 hdd using dd 640GB
2. Install ubuntu 12.10
3. Install packages: aptitude, python2.7-dev, libaio-dev, libreadlibe-dev, liblvm2-dev, git, g++,
4. Git multipathtools apply patch kpartx (attached above), compile
5. Compile ps3_decrypt_tools_master
6. Needed tools compiled and work
PS3 stuff
7. Back from Rogero 4.30 to CFW 3.55.
8. eEid-RKdumper - my eid_root_keys

UBUNTU
9. Split eid_root_keys into ERK i IV, put in data directory
10. Unfortunately ps3_decrypt_tools_master should be rewritten to avoid splitting HDD img file into 1GB parts......

zecoxao
03-28-2013
02:32 PM

103

a little status update on this tool. i talked to naehrwert about why decrypting the hdd doesn't work when reading the disk. that's because _read_buffer will read the entire hdd to memory! that means that if you have, let's say, 8 GB of memory currently available on your pc, you cannot decrypt a disk of 40 GB, because it'll enter in segfault. the better alternative is using glevand's tools to mount the disk and analyze it yourself like i said before.

[MENTION=138171]haz367[/MENTION] [MENTION=100143]bobross[/MENTION] and the others, good luck

haz367
03-29-2013
03:38 AM

104

oh so many projects..but none go straight on first try damnit...i have his latest ISO but it's collecting dust like the others and 8GB ram isn't 1.5GB enough?

thx for thinking about me [MENTION=202826]zecoxao[/MENTION]

sguerrini97
04-02-2013
06:01 AM

105

Originally Posted by haz367

oh so many projects..but none go straight on first try damnit...i have his latest ISO but it's collecting dust like the others and 8GB ram isn't 1.5GB enough?

thx for thinking about me [MENTION=202826]zecoxao[/MENTION]

You should split your HDD in parts of 1~2 GB and decrypt them one by one.
However you still need linux to mount the HDD image, so it's easier to use the glevand's steps on the wiki.

Inviato dal mio LG-P760 con Tapatalk 2

haz367
04-02-2013
06:11 AM

106

yeah i know the first part: decrypting parts/joining decrypted parts isn't a problem...but that's a bit anal so to speak...takes way to long on a small 80GB drive..to much repeating it makes u silly for now a bad hdd goes into the trash

we can do all on linux, that glevland distro must admit it's not easy and the wiki is not written for a noob,u need basic knowledge there cuse the guides are great, it's always missing 'noo step' e.g another requirement to get the guide working

sguerrini97
04-06-2013
09:42 AM

107

[MENTION=138171]haz367[/MENTION] maybe this topic can help to reduce the time http://ubuntuforums.org/showthread.php?t=1540873
Using those commands you can dump the full HDD in splitted parts (so no need to split them manually) and you can also rewrite splitted parts to HDD (so no need to join them manually). You only have to remove the "gzip" command because you can't decrypt the a compressed image.
It should be also possible to make a script that rename the parts one by one and decrypt them

[MENTION=202826]zecoxao[/MENTION] is possible to add the eid0 encryption?
I read something about an "IDPS project", I'm pretty sure that they just change the IDPS in the eid0 first section, like the cex2dex but replacing the whole idps and not just the target id. I can't figure out how to do it right with openssl .. Thank you

zecoxao
04-06-2013
10:09 AM

108

check the source. it's there you only need to make it workable

hxdrummerxc
05-12-2013
03:31 PM

109

I know im probably bringing this thread back from the dead....

But basically there is no way to decrypt the HDD without the eid_root_key.

In which case I am screwed. My ps3 suffered the YLOD over a year ago. I took it apart and fixed it myself numerous times (heat gun and thermal paste method). Sometimes it would work for two weeks, sometimes a a few months. But it finally died completely. I wen't to fix it for the last time, but it never turned back on that last time.

I eventually traded that broken ps3 in to gamestop for some cash. But I pulled out my hard drive in hopes that one day I would be able to decrypt it and pull all of my game saves off of it.

Fast forward to today.... I see that there is a way to decrypt the HDDs now, but it seems as though you need the original ps3 system in order to get the eid_root_key. So in other words, im still s*** out of luck?

No way to retrieve the eid_root_key from the HDD without the actual working system? No way to decrypt without the eid_root_key? Am I just sitting on a 320gb paper weight with years of game save trapped inside?

zecoxao
05-12-2013
03:46 PM

110

Originally Posted by hxdrummerxc

I know im probably bringing this thread back from the dead....

But basically there is no way to decrypt the HDD without the eid_root_key.

In which case I am screwed. My ps3 suffered the YLOD over a year ago. I took it apart and fixed it myself numerous times (heat gun and thermal paste method). Sometimes it would work for two weeks, sometimes a a few months. But it finally died completely. I wen't to fix it for the last time, but it never turned back on that last time.

I eventually traded that broken ps3 in to gamestop for some cash. But I pulled out my hard drive in hopes that one day I would be able to decrypt it and pull all of my game saves off of it.

Fast forward to today.... I see that there is a way to decrypt the HDDs now, but it seems as though you need the original ps3 system in order to get the eid_root_key. So in other words, im still s*** out of luck?

No way to retrieve the eid_root_key from the HDD without the actual working system? No way to decrypt without the eid_root_key? Am I just sitting on a 320gb paper weight with years of game save trapped inside?

yup... without root_key, no can do

MRDOTB
05-19-2013
02:01 PM

111

I have compiled current version (on Ubuntu 12.04.2 LTS) from zecoxao git repo and I have some problems.

1.
I dumped for test purposes first 2MB for my PS3 HDD. Program made output sectors_decrypted but it's filled with 2MB of trash (I compare it with http://www.ps3devwiki.com/wiki/HDD_Encryption#Test).

Code:

dd if=/dev/sdb of=/home/qa/ps3hdd.img bs=2M count=1

sdb is my PS3 HDD, I'm sure of this. ;]

When I dumped first 1KB, program give me an error: "naruszenie ochrony pamięci (core dump)". [rough translation: ;] "memory violation (core dump)"]

2.
When I want decrypt eEID program give me an errors:

Code:

warning: eid0 section 0 hash check failed!
warning: eid1 hash check failed!
warning: eid4 hash check failed!

I'm sure that cuted and named properly all data, and they are in proper place.

Maybe this is why I cannot decrypt HDD. ;d And maybe I've got eid0 hash check failed because my eid_root_key is from CEX fw and eEID from converted to DEX?

Repository For Decryption Tools

111 Comments

Visit Sponsored Links

Categories

Archives

Tags