possible way to sign PS3 .pkg files?

[normanizsharpe]

Alright now this very well may work, or i may go down in my own flames, dying a slow death. but if we take a signed package from sony, and unpack it with the latest SDK, then we pack it with the SDK, then it wont be signed, so we will have 2 pkg files, one signed, one not. both containing the same data with the same stuff, just one pkg got signed by sony, and one didn't.

now i know this next part will be the most noobish thing to say, but we could put them on a hex editor, then view the differences. if i'm correct the only difference we should see is the signature.

i just want to help by pitching ideas out here

[CJPC]

Alas no - namely, because retail packages can not be decrypted without the aid of a PS3, and the only way to re-encrypt them would be to use development keys (since, we lack retail ones) - so on compare they would be very, different.

Furthermore, there is still a matter of the encrypted executable (the .self, usually the EBOOT.BIN) - which is another entire issue.

[normanizsharpe]

have you tried it? i just want to know if this idea was original. also if you havnt tried it, just try it, theres no risk really.

[CJPC]

Well - in a way, yes. You can't unpack a Retail PKG without a PS3, so that's out.

Even if you do unpack it, you can't re-pack it as a DEV pkg, since the self's are encrypted.

Even if you get past that, nearly every byte will differ, due to the type of encryption used.