Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for decrypting Game Updates? #32

Open
1jtp8sobiu opened this issue Mar 6, 2021 · 2 comments
Open

Support for decrypting Game Updates? #32

1jtp8sobiu opened this issue Mar 6, 2021 · 2 comments

Comments

@1jtp8sobiu
Copy link

Hello, I tried to decrypt the game update (PBOOT.PBP) but it failed.
Is it possible to support it?
Here is a screenshot and uploaded the files.
https://i.gyazo.com/dabb014361d788ad2696df89a7686c81.png
NPJH50698_00-SIREN4PLUS2012MA.zip

@artart78
Copy link
Contributor

Just took a look at it, it looks very similar to #33. It uses an additional key we called "secureInstallId" in uofw (not sure it's its official name), which is passed to the decryption function sceMesgLed_driver_31D6D8AA, but I'm not really sure where that key comes from.
It looks like it can come :

  • from the sceKernelLoadModule*() call itself
  • from init.prx which gets the npdrm key from loadcore, coming from reboot, ultimately coming from loadexec's sceKernelLoadExecNpDrm

If anyone has any info about what's the game update run process, I can take a deeper look at it, but for now I'm quite clueless.

@Yoti
Copy link
Contributor

Yoti commented Jun 29, 2021

u8 key_2e5e10f0[16] = {
	0x9D, 0x5C, 0x5B, 0xAF, 0x8C, 0xD8, 0x69, 0x7E, 0x51, 0x9F, 0x70, 0x96, 0xE6, 0xD5, 0xC4, 0xE8
};

u8 xor_2e5e10f0[16] = {
	0x69, 0xBA, 0x55, 0x34, 0xF0, 0xC0, 0xD6, 0x71, 0xE3, 0x1F, 0xDB, 0x97, 0xE0, 0x7C, 0xD2, 0x2A
};

PSPCipher.zip

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants