PS3Hax Network - Playstation 3 Hacks and Mods - View Single Post

Elegant · 04-26-2012

@Cheesethief bootldr is encrypted with the console key (how we get it decrypted would require knowing that except for this method which seems to bypass that). As such it's IMPOSSIBLE to EVER update the bootldr as then the console key for each console would be the same. If you write a bootldr that dumps lv0 (which is the only step required here) and sign it then we're done forever. No more updates can ever hide the keys.

We'd get access to lv0 by getting the bootldr to decrypt lv0 (which it already knows how to do as the bootldr is the FIRST link in the chain of trust) and simply telling it "Hey, rather than storing it memory and deleting it after it's done lets also dump it to say my internal hard drive or USB stick after decrypting it". Then we simply fetch the file later.

04-26-2012	#25
Elegant Member Join Date: Jan 2008 Posts: 227 Likes: 1 Liked 37 Times in 27 Posts Mentioned: 3 Post(s) Tagged: 0 Thread(s)	@Cheesethief bootldr is encrypted with the console key (how we get it decrypted would require knowing that except for this method which seems to bypass that). As such it's IMPOSSIBLE to EVER update the bootldr as then the console key for each console would be the same. If you write a bootldr that dumps lv0 (which is the only step required here) and sign it then we're done forever. No more updates can ever hide the keys. We'd get access to lv0 by getting the bootldr to decrypt lv0 (which it already knows how to do as the bootldr is the FIRST link in the chain of trust) and simply telling it "Hey, rather than storing it memory and deleting it after it's done lets also dump it to say my internal hard drive or USB stick after decrypting it". Then we simply fetch the file later. Last edited by Elegant; 04-26-2012 at 12:39 AM.