PS3 LV0 Keys Leaked: 4.21, 4.25 and 4.30 CFW Updates Incoming

[G Sus]

i believe that now all keys are known , it means you could technically make a cfw that could be installed on any ps3 ofw. however. its not really as simple as that. the keys only mean you can decrypt it all. it dont mean you will understand what your seing or even be able to find a flaw or weakness in it. (per console keys)

What it effectively means is now that it can all be decrypted there is the possibility that someone will find out how the fw and ps3 gos about the verification of per console keys etc. and then copy the process, and make a new cfw that will update on ofw above 3.55.

it don't mean it will happen , it just means it could be possible if someone is smart enough to work it out. or at least thats how i understood it, ive been wrong before though. what is more likely is. now you'll just get a 4.31 cfw that installs only on 3.55 or below.

I bet theres a hell of a lot of code to read for devs. look how many files theyve been given access too in just a few months. The PS3s life will have ended before anyone gets round to making cfw install above 3.55 ofw. I reckon the few people that probably could do it aint even working on it, (they have no need) and the rest wouldn't know where to start.

but like i say, I'm often wrong, and this is highly likely to be one of those times.

[UrKoS]

I hold hope for a 4.31 installable cfw.

Sent from my GT-I9100 using Tapatalk 2.

[G Sus]

i'd keep hope too, theres always some up and coming smartass that looks at things differently or just spots something others have missed. 1 little thing can suddenly change the game completely. the algorithym used to calculate per console keys has to be hidden somewhere within the cfw, and all parts the fw is now readable. so its technically just a case of finding it and undestanding how to exploit it.

sadly that don't just take a clever person, that takes a clever person that is actually interested in doing it, and not afraid of any consequences. for all we know it could have already been done.

Hope is a great thing, its free and you can have as much of it as you want.

[ConsoleDev]

Maybe someone more experienced than me could help to clarify this thing.. It seems that zadow28 managed to find a lv2diag.self file signed with the 3.60/3.61 keys in the ps3tmgui program that was a part of the official SDK.

If possible can someone tell me more about that?

DO NOT TRY THIS!

scetool 0.2.9 <public build> (C) 2011-2012 by naehrwert
NP local license handling (C) 2012 by flatz
[*] SCE Header:
 Magic           0x53434500 [OK]
 Version         0x00000002
 Key Revision    0x0010
 Header Type     [SELF]
 Metadata Offset 0x000003F0
 Header Length   0x0000000000000900
 Data Length     0x00000000000C9D00[*] Metadata Info:
 Key 3F 1D 99 53 C6 80 C7 C0 46 54 C2 7C 03 95 A8 91 
 IV  85 CD 91 78 31 2F 9E 05 7E E7 95 9A 22 AB B9 F7 [*] Metadata Header:
 Signature Input Length 0x00000000000008A0
 unknown_0              0x00000001
 Section Count          0x00000006
 Key Count              0x0000002E
 Optional Header Size   0x00000030
 unknown_1              0x00000000
 unknown_2              0x00000000[*] Metadata Section Headers:
 Idx Offset   Size     Type Index Hashed SHA1 Encrypted Key IV Compressed
 000 00000900 0004BDB2 02   00    [YES]  00   [YES]     06  07 [YES]
 001 00058600 00003F14 02   01    [YES]  08   [YES]     0E  0F [YES]
 002 0005C514 00000000 02   02    [YES]  10   [YES]     16  17 [NO ]
 003 0005C514 00000000 02   03    [YES]  18   [YES]     1E  1F [NO ]
 004 0005C514 00000000 02   04    [YES]  20   [YES]     26  27 [NO ]
 005 0005C610 000006C0 01   03    [YES]  28   [NO ]     --  -- [NO ][*] SCE File Keys:
 00: 86 78 6D 6F F5 E2 DD BB 3C F2 CD EA 21 D6 94 36 
 01: C5 FA BC 79 00 00 00 00 00 00 00 00 00 00 00 00 
 02: 76 28 F8 FE 36 3B 9A C1 B7 2F E1 78 AD 3F D5 19 
 03: 3B 55 FD FB 26 15 B7 12 6F E2 40 9A 0D 35 7A CB 
 04: 95 C3 59 2C CE 7F 1A 79 E1 46 05 5C 10 B2 CA 59 
 05: 26 08 5E DE CA BA 19 B2 5E BF 2C 1D 59 6D 3D CD 
 06: 88 42 7C AC 9E 94 CB 67 A6 42 A9 B6 5F 19 47 A7 
 07: F7 62 B4 AD 5A 81 48 97 BD 89 B5 5B 80 1C B2 DB 
 08: 55 A6 D7 D7 AA FD DC AB 53 EB C6 2D 91 45 16 98 
 09: 57 D4 82 E6 00 00 00 00 00 00 00 00 00 00 00 00 
 0A: 76 28 F8 FE 36 3B 9A C1 B7 2F E1 78 AD 3F D5 19 
 0B: 3B 55 FD FB 26 15 B7 12 6F E2 40 9A 0D 35 7A CB 
 0C: 95 C3 59 2C CE 7F 1A 79 E1 46 05 5C 10 B2 CA 59 
 0D: 26 08 5E DE CA BA 19 B2 5E BF 2C 1D 59 6D 3D CD 
 0E: 88 42 7C AC 9E 94 CB 67 A6 42 A9 B6 5F 19 47 A7 
 0F: F7 62 B4 AD 5A 81 48 97 BD 89 B5 5B 80 1C B2 DB 
 10: 45 54 9C 94 65 67 74 CE 58 7B D6 2B 6B 40 8E 4D 
 11: 19 C0 E6 84 00 00 00 00 00 00 00 00 00 00 00 00 
 12: 76 28 F8 FE 36 3B 9A C1 B7 2F E1 78 AD 3F D5 19 
 13: 3B 55 FD FB 26 15 B7 12 6F E2 40 9A 0D 35 7A CB 
 14: 95 C3 59 2C CE 7F 1A 79 E1 46 05 5C 10 B2 CA 59 
 15: 26 08 5E DE CA BA 19 B2 5E BF 2C 1D 59 6D 3D CD 
 16: 88 42 7C AC 9E 94 CB 67 A6 42 A9 B6 5F 19 47 A7 
 17: F7 62 B4 AD 5A 81 48 97 BD 89 B5 5B 80 1C B2 DB 
 18: 45 54 9C 94 65 67 74 CE 58 7B D6 2B 6B 40 8E 4D 
 19: 19 C0 E6 84 00 00 00 00 00 00 00 00 00 00 00 00 
 1A: 76 28 F8 FE 36 3B 9A C1 B7 2F E1 78 AD 3F D5 19 
 1B: 3B 55 FD FB 26 15 B7 12 6F E2 40 9A 0D 35 7A CB 
 1C: 95 C3 59 2C CE 7F 1A 79 E1 46 05 5C 10 B2 CA 59 
 1D: 26 08 5E DE CA BA 19 B2 5E BF 2C 1D 59 6D 3D CD 
 1E: 88 42 7C AC 9E 94 CB 67 A6 42 A9 B6 5F 19 47 A7 
 1F: F7 62 B4 AD 5A 81 48 97 BD 89 B5 5B 80 1C B2 DB 
 20: 45 54 9C 94 65 67 74 CE 58 7B D6 2B 6B 40 8E 4D 
 21: 19 C0 E6 84 00 00 00 00 00 00 00 00 00 00 00 00 
 22: 76 28 F8 FE 36 3B 9A C1 B7 2F E1 78 AD 3F D5 19 
 23: 3B 55 FD FB 26 15 B7 12 6F E2 40 9A 0D 35 7A CB 
 24: 95 C3 59 2C CE 7F 1A 79 E1 46 05 5C 10 B2 CA 59 
 25: 26 08 5E DE CA BA 19 B2 5E BF 2C 1D 59 6D 3D CD 
 26: 88 42 7C AC 9E 94 CB 67 A6 42 A9 B6 5F 19 47 A7 
 27: F7 62 B4 AD 5A 81 48 97 BD 89 B5 5B 80 1C B2 DB 
 28: 7F D0 D9 E9 5F DC 81 F3 1D C9 B1 B7 C4 D2 16 0F 
 29: 45 46 67 E6 00 00 00 00 00 00 00 00 00 00 00 00 
 2A: 76 28 F8 FE 36 3B 9A C1 B7 2F E1 78 AD 3F D5 19 
 2B: 3B 55 FD FB 26 15 B7 12 6F E2 40 9A 0D 35 7A CB 
 2C: 95 C3 59 2C CE 7F 1A 79 E1 46 05 5C 10 B2 CA 59 
 2D: 26 08 5E DE CA BA 19 B2 5E BF 2C 1D 59 6D 3D CD [*] SELF Header:
 Header Type         0x0000000000000003
 App Info Offset     0x0000000000000070
 ELF Offset          0x0000000000000090
 PH Offset           0x00000000000000D0
 SH Offset           0x000000000005C610
 Section Info Offset 0x0000000000000290
 SCE Version Offset  0x0000000000000390
 Control Info Offset 0x00000000000003A0
 Control Info Size   0x0000000000000070[*] Application Info:
 Auth-ID   [Lv2diag FW Stuff]
 Vendor-ID [normal]
 SELF-Type [Application]
 Version   03.60[*] SCE Version:
 Header Type 0x00000001
 Present     [FALSE]
 Size        0x00000010
 unknown_3   0x00000000[*] Control Info
 Type      Flags
 Size      0x00000030
 Next      [TRUE]
 Flags 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
       00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [*] Control Info
 Type      Digest
 Size      0x00000040
 Next      [FALSE]
 Digest 1   62 7C B1 80 8A B9 38 E3 2C 8C 09 17 08 72 6A 57 
            9E 25 86 E4 
 Digest 2   5E 0D 82 DF 70 AB FF 26 E0 87 67 C6 16 CF 9B 89 
            0E CB E5 1B [*] Optional Header
 Type      Capability Flags
 Size      0x00000030
 Next      [FALSE]
 unknown_3 0x0000000000000000
 unknown_4 0x0000000000000000
 Flags     0x000000000000001B [ 0x01 0x02 REFTOOL DEBUG ]
 unknown_6 0x00000001
 unknown_7 0x00000000[*] Section Infos:
 Idx Offset   Size     Compressed unk0     unk1     Encrypted
 000 00000900 0004BDB2 [YES]      00000000 00000000 [YES]
 001 00058600 00003F14 [YES]      00000000 00000000 [YES]
 002 0005C514 00000000 [NO ]      00000000 00000000 [YES]
 003 0005C514 00000000 [NO ]      00000000 00000000 [YES]
 004 0005C514 00000000 [NO ]      00000000 00000000 [YES]
 005 00000000 00000004 [NO ]      00000000 00000000 [NO ]
 006 00000000 00000000 [NO ]      00000000 00000000 [NO ]
 007 00000000 00000040 [NO ]      00000000 00000000 [NO ][*] ELF64 Header:
 Type                   [EXEC]
 Machine                [PPC64]
 Version                0x00000001
 Entry                  0x00000000000D2778
 Program Headers Offset 0x0000000000000040
 Section Headers Offset 0x00000000000C9640
 Flags                  0x00000000
 Program Headers Count  0008
 Section Headers Count  0027
 SH String Index        0026[*] ELF64 Program Headers:
 Idx Type     Offset   VAddr    PAddr    FileSize MemSize  PPU SPU RSX Align
 000 LOAD     00000000 00010000 00010000 000B40C0 000B40C0 X-R --R --- 00010000
 001 LOAD     000C0000 000D0000 000D0000 00009544 000160B0 -WR -WR --- 00010000
 002 LOAD     000C9544 00000000 00000000 00000000 00000000 --R --- --- 00010000
 003 LOAD     000C9544 00000000 00000000 00000000 00000000 -WR --- --- 00010000
 004 LOAD     000C9544 00000000 00000000 00000000 00000000 -WR -WR -WR 00010000
 005 TLS      000C8BC4 000D8BC4 000D8BC4 00000004 00000088 --R --- --- 00000004
 006 PARAMS   00000000 00000000 00000000 00000000 00000000 --- --- --- 00000008
 007 PRX      000B4080 000C4080 000C4080 00000040 00000040 --- --- --- 00000004[*] ELF64 Section Headers:
 Idx Name Type          Flags Address    Offset   Size     ES   Align    LK
 000 0000 NULL          ---   00000000   00000000 00000000 0000 00000000 000
 001 000B PROGBITS      -AE   00010200   00000200 0000002C 0000 00000004 000
 002 001F PROGBITS      -AE   00010230   00000230 000ABC28 0000 00000008 000
 003 0011 PROGBITS      -AE   000BBE58   000ABE58 00000024 0000 00000004 000
 004 0017 PROGBITS      -AE   000BBE7C   000ABE7C 000003A0 0000 00000004 000
 005 0025 PROGBITS      -A-   000BC21C   000AC21C 00000030 0000 00000004 000
 006 0039 PROGBITS      -A-   000BC24C   000AC24C 00000074 0000 00000004 000
 007 0049 PROGBITS      -A-   000BC2C0   000AC2C0 00000004 0000 00000004 000
 008 0056 PROGBITS      -A-   000BC2C4   000AC2C4 00000004 0000 00000004 000
 009 0063 PROGBITS      -A-   000BC2C8   000AC2C8 00000004 0000 00000004 000
 010 0071 PROGBITS      -A-   000BC2CC   000AC2CC 00000084 0000 00000004 000
 011 007B PROGBITS      -A-   000BC350   000AC350 00000004 0000 00000004 000
 012 0089 PROGBITS      -A-   000BC358   000AC358 00007D28 0000 00000008 000
 013 0091 PROGBITS      -A-   000C4080   000B4080 00000040 0000 00000004 000
 014 00A5 PROGBITS      WA-   000D0000   000C0000 00000058 0000 00000004 000
 015 00AC PROGBITS      WA-   000D0058   000C0058 00000028 0000 00000004 000
 016 00B3 PROGBITS      WA-   000D0080   000C0080 00000004 0000 00000004 000
 017 00B8 PROGBITS      WA-   000D0088   000C0088 000017F0 0000 00000008 000
 018 00C5 PROGBITS      WA-   000D1878   000C1878 00000074 0000 00000004 000
 019 00D4 PROGBITS      WA-   000D18F0   000C18F0 00000E78 0000 00000008 000
 020 00DA PROGBITS      WA-   000D2768   000C2768 00005790 0000 00000008 000
 021 00DF PROGBITS      WA-   000D7EF8   000C7EF8 00000CCC 0000 00000008 000
 022 00E4 PROGBITS      WA-   000D8BC4   000C8BC4 00000004 0000 00000004 000
 023 00EB NOBITS        WA-   000D8BC8   000C8BC8 00000084 0000 00000004 000
 024 00F1 PROGBITS      WA-   000D8C50   000C8C50 000008F4 0000 00000008 000
 025 00F7 NOBITS        WA-   000D9548   000C9544 0000CB68 0000 00000008 000
 026 0001 STRTAB        ---   00000000   000C9544 000000FC 0000 00000001 000

[G Sus]

wouldnt that mean we could use FSM to install cfw and then use the new Lv2diag.self to get out of it, in fw 3.60 and above ?

even if not the cfw, does this give us the possibility of a tool to get out of FSM ? above 3.55

[UrKoS]

Wish i had found all this before upgrading to 4.31 grrrr

Sent from my GT-I9100 using Tapatalk 2.

[Blade86]

There is even a 4.21 one. But without Hardware-flasher I dont dare to try it...

[G Sus]

nah i wouldnt either, hopefully technodon will give it a wirl for us.

i find being in FSM one of the most scarey moments of ps3. only thing that's ever been worse was flashing for cex to dex. and back again .

[zhigge]

can't wait. things are getting interesting.. lets just hope they give up on security being so strict in the new system.. there is room for legal and illegal.

[SethPDA]

I think this means good news for PS3 Slim 3k users if it is not fake. I really do think there are people who are willing to leak out information just to help people. I have a PS3 Slim 120GB serial CECH-3001A. Originally it came with 3.72 and I accidentally upgraded it to 4.31 which is the current one. I already know that my console cannot be downgraded to 3.55 to use CFW using the current methods.

I hope someone will make some progress with this to help people like me