PS3 LV0 Keys Leaked: 4.21, 4.25 and 4.30 CFW Updates Incoming!

Category: PS3 Hacks & JailBreak By: randomstuff - (pastie.org)
Tags: ps3 lv0 keys ps3 lv0 keys leaked ps3 4.21 cfw ps3 4.25 cfw ps3 4.30 cfw ps3 hacks

30w ago - Following up on the PS3 3.60 Keys leak comes a bright light at the end of the PlayStation 3 tunnel, as today an anonymous user has leaked the PS3 LV0 Keys meaning 4.21, 4.25 and 4.30 CFW updates are incoming!

Download: PS3 SCETool v0.2.9 + Keys for LV0 (125.2 KB)

.----==[22-10-2012]=======================================================----.
[_ As this was a group effort, we wouldn't normally have lost a word about it |
|ever, but as we're done with PS3 now anyways, we think it doesn't matter     |
|anymore [http://pastie.org/4462324]. Congratulations to the guy that leaked  |
|stuff, you, sir, are a 1337 haxx0r, jk, you're an ahole.                    _]
|                                                                             |
|                               Try this bytes...                             |
| - [erk=CA7A24EC38BDB45B98CCD7D363EA2AF0C326E65081E0630CB9AB2D215865878A]    |
| - [riv=F9205F46F6021697E670F13DFA726212]                                    |
| - [pub=A8FD6DB24532D094EFA08CB41C9A72287D905C6B27B42BE4AB925AAF4AFFF34D     |
|        41EEB54DD128700D]                                                    |
| - [priv=001AD976FCDE86F5B8FF3E63EF3A7F94E861975BA3]                         |
| - [ctype=33]                                                                |
|                              ...and be amazed.                              |
|                                                                             |
[_ People should know that crooked personalities are widespread in this so    |
|called 'scene'. Some people try to achive something for fun together and make|
|the wrong decision to trust others and share their results with them, but ofc|
|there got to be the attention seeking fame wh*** that has to leak stuff to   |
|feel a little bit better about him-/herself.                                _]
|                                                                             |
[_ Now the catch is that it works like this in every 'scene', just that in    |
|others it usually doesn't come to light.                                   _]
|                                                                             |
[_ The only sad thing is, that the others who worked on this won't get the    |
|attention they deserve because they probably want to remain anonymous (also  |
|they don't care about E-fame <3).                                           _]
|                                                                             |
[_ PS: This is neither about drama nor E-fame nor 'OMG WE HAZ BEEN FIRST', we |
|just thought you should know that we're disappointed in certain people. You  |
|can be sure that if it wouldn't have been for this leak, this key would never|
|have seen the light of day, only the fear of our work being used by others to|
|make money out of it has forced us to release this now.                     _]
'----===========================================[- The Three Musketeers]==----'

To recap, below are the confirmed legit and working PlayStation 3 LV0 Keys:

ERK = CA7A24EC38BDB45B98CCD7D363EA2AF0C326E65081E0630CB9AB2D215865878A
RIV = F9205F46F6021697E670F13DFA726212
PUBLIC = A8FD6DB24532D094EFA08CB41C9A72287D905C6B27B42BE4AB925AAF4AFFF34D41EEB54DD128700D
PRIVATE = 001AD976FCDE86F5B8FF3E63EF3A7F94E861975BA3
CURVE_TYPE = 0x33

PS3 Key dump from appldr 4.25 in SCETool format:

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=5019FEF491F2031AC2564E560EFDA3D79887F4CFFEAD371B0564EC4EE2CA8951
riv=E763C7970A7D7F9AD3B365AD804B759F
pub=6F8DF8EBD0A1D1DB08B30DD3A951E3F1F27E34030B42C729C55555232D61B834B8BDFFB07E54B343
priv=
ctype=21

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=DC64F26E860217ACEB70BE89E479DB8B93F29C78D2BB29C5CB45726BB7EE1387
riv=2600D2DA9DA6519D283117563F552B80
pub=94D1B7378BAFF5DFED269240A7A364ED68446741622E50BC6079B6E606A2F8E0A4C56E5CFF836526
priv=
ctype=11

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=8FCD13089C6499D584D93DA5C39795C0BB5BC6BB6F5B6E8BFECC7A1D879332B7
riv=04017C8421443E5FCA95DC3A6E9F0BD9
pub=8CA6905F46148D7D8D84D2AFCEAE61B41E6750FC22EA435DFA61FCE6F4F860EE4F54D9196CA5290E
priv=
ctype=13

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=D98D6AC6B0F76E2F08E46F78A5FFB6BB8FB8B26430980701A254022AAA11D0D5
riv=B56CFA40EC86FD1AD2EF6A578F81BBAE
pub=1F140E8EF887DAB52F079A06E6915A6460B75CD256834A43FA7AF90C23067AF412EDAFE2C1778D69
priv=
ctype=14

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=36486F69A3C6682DB3851CFD68614FA5B1CC636AAB3E8FC4F8D150BAE62AA276
riv=D686E30097952A605DB15744645570EE
pub=B6BB0A84C649A90D97EBA55B555366F52381BB38A84C8BB71DA5A5A0949043C6DB249029A43156F7
priv=
ctype=15

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=E2F9C174FBCEA739CBF2BE1567133F0035D0C9D1D70237122D2A8D6C9E0E9123
riv=C11B1AC4EFF80D6D2275F4FC8B4EAEC6
pub=AB284CA549B2DE9AA5C903B75652F78D192F8F4A8F3CD99209415C0A84C5C9FD6BF3095C1C18FFCD
priv=
ctype=15

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=877757BE18C759E2DEF34B34617A54A2C7F7A0657B68D70CBFC89FE1C0B59F57
riv=242A2FF7DD72554239450A424DD38AA6
pub=6E82F6B54A0E9DEBE4A8B3043EE3B24CD9BBB62B4416B0482582E419A2552E29AB4BEA0A4D7FA2D5
priv=
ctype=16

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=388F751542E8B245C6757ABC03B3D31B62D40030E09BE5A4A48F95FC436DBBA0
riv=6B976709CCD408718FF3CDF03CFB2E21
pub=09301B6436C85B53CB1585300A3F1AF9FB14DB7C30088C4642AD66D5C148B8995BB1A698A8C71827
priv=
ctype=25

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=C13D6AD58434080D3947EAC965A999CA909B36EE8689AC46FC27C409889878E0
riv=66D51260B5CD33E3772DFA2531218EC6
pub=2733C889D289550FE00EAA5A47A34CEF0C1AF187610EB07BA35D2C09BB73C80B244EB4147700D1BF
priv=
ctype=26

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=E24420003D554C14C4838DD43CA995781B350E8D360E8B014247609693C77A2F
riv=2265BA1E66FA4BD573F3D837CAF27B20
pub=71502ADB5783583AB88B2D5F23F419AF01C8B1E72FCA1E694AD49FE3266F1F9C61EFC6F29B351142
priv=
ctype=12

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=9F1C2C07C228AB8A6562DD27B8DB4D0D62A9AF3E000E0B8579D205ABFABEA622
riv=1BB69374A1E157D3C74DAC8FB784754E
pub=84DE5692809848E5ACBE25BE548F6981E3DB14735A5DDE1A0FD1F475866532B862B1AB6A004B7255
priv=
ctype=27

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=F239349F6472817C6251713DFA2F6A05164B7B37514C660ECDB83B96E6CF2991
riv=29E4B2179AC9DD72A66A1886205751F9
pub=50597B7F680DD89F6594D9BDC0CBEE03666AB53647D0487F7F452FE2DD02694631EA755548C9E934
priv=
ctype=25

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=632CCFBB2B4D1BE84C3FC15BE22B4839FEFD82953E86C075232817B6FF5E6818
riv=16E914D782054347F252715833AB3C51
pub=2FDA7A56AAEA65921C0284FF1942C6DE137370093D106034B59191951A5201B422D462F8726F852D
priv=
ctype=26

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=E2B22D94972650B4FD9BADD7C29F43C14D0ED3375AA42DD233A1D4A4E16322DC
riv=933B0784C58A44EAAD4D7846CA70B573
pub=B26FE6D3E3A1E766FAE79A8E6A7F48998E7FC1E4B0AD8745FF54C018C2A6CC7A0DD7525FAFEA4917
priv=
ctype=12

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=6DCE9AC4EFF461FE542FC543B7EF2F2AD9C98379C4DCBD3CB2BD58576861C7D2
riv=56835229635DE782F6001600DD4219EA
pub=04275E8838EF95BD013B223C3DF674540932F21B534C7ED2944B9104D938FEB03B824DDB866AB26E
priv=
ctype=27

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=C5F0DF6C72A61DFCD591D22E100ECBEB04A82831C6A90CB82DCFC852605C1433
riv=83947AB81813B4EFEDBEFB967E533DFB
pub=566635D3E1DCEC47243AAD1628AE6B2CEB33463FC155E4635846CE33899C5E353DDFA47FEF5694AF
priv=
ctype=30

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=04CD534825102487891B8E264D859587017BC8993EA10B0F8B0CAED2CD1DA207
riv=188A2108137A9E874D72A79E4D3A8E94
pub=3B7B04C71CAE2B1199D57453C038BB1B541A05AD1B94167B0AB47A9B24CAECB9000CB21407009666
priv=
ctype=08

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=7092ED26CDA962F6879776B1C390E9D9E5904F76DB5928B1789F05D79763B0E3
riv=6CCF6A03E7962F488F5043AEFDFDEE93
pub=148DCA961E2738BAF84B2D1B6E2DA2ABD6A95F2C9571E54C6922F9ED9674F062B7F1BE5BD6FA5268
priv=
ctype=31

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=4EAC8511C61C8459FDA903C6EB2B94A80E81C02495920FD2333257674A1701EF
riv=4D9860CB27D15E8A31A6874F602215A8
pub=BE4B1B513536960618BFEF12A713F6673881B02F9DC616191E823FC8337CCF99ADAA6172019C0C23
priv=
ctype=17

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=408B4CCF0D620A0EA7DB1C60706935CAE6DFC5BEF0FE7AF46DCFA97AA2A2C2E5
riv=514AD3E676E281D94825AC7609D62236
pub=36C1ACE6DD5CCC0006FDF3424750FAC515FC5CFA2C93EC53C6EC2BC421708D154E91F2E7EA54A893
priv=
ctype=09

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=0FA315D068EAF4EC96EB835253BF8E8AFEAC4D700A098D22B6ADAAB7E76B28ED
riv=64233F38F482D391C901E7F9DAAEBF58
pub=430322887503CF52928FAAA410FD623C7321281C8825D95F5B47EF078EFCFC44454C3AB4F00BB879
priv=
ctype=1A

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=5019FEF491F2031AC2564E560EFDA3D79887F4CFFEAD371B0564EC4EE2CA8951
riv=E763C7970A7D7F9AD3B365AD804B759F
pub=6F8DF8EBD0A1D1DB08B30DD3A951E3F1F27E34030B42C729C55555232D61B834B8BDFFB07E54B343
priv=
ctype=21

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=DC64F26E860217ACEB70BE89E479DB8B93F29C78D2BB29C5CB45726BB7EE1387
riv=2600D2DA9DA6519D283117563F552B80
pub=94D1B7378BAFF5DFED269240A7A364ED68446741622E50BC6079B6E606A2F8E0A4C56E5CFF836526
priv=
ctype=11

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=8FCD13089C6499D584D93DA5C39795C0BB5BC6BB6F5B6E8BFECC7A1D879332B7
riv=04017C8421443E5FCA95DC3A6E9F0BD9
pub=8CA6905F46148D7D8D84D2AFCEAE61B41E6750FC22EA435DFA61FCE6F4F860EE4F54D9196CA5290E
priv=
ctype=13

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=D98D6AC6B0F76E2F08E46F78A5FFB6BB8FB8B26430980701A254022AAA11D0D5
riv=B56CFA40EC86FD1AD2EF6A578F81BBAE
pub=1F140E8EF887DAB52F079A06E6915A6460B75CD256834A43FA7AF90C23067AF412EDAFE2C1778D69
priv=
ctype=14

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=36486F69A3C6682DB3851CFD68614FA5B1CC636AAB3E8FC4F8D150BAE62AA276
riv=D686E30097952A605DB15744645570EE
pub=B6BB0A84C649A90D97EBA55B555366F52381BB38A84C8BB71DA5A5A0949043C6DB249029A43156F7
priv=
ctype=15

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=E2F9C174FBCEA739CBF2BE1567133F0035D0C9D1D70237122D2A8D6C9E0E9123
riv=C11B1AC4EFF80D6D2275F4FC8B4EAEC6
pub=AB284CA549B2DE9AA5C903B75652F78D192F8F4A8F3CD99209415C0A84C5C9FD6BF3095C1C18FFCD
priv=
ctype=15

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=877757BE18C759E2DEF34B34617A54A2C7F7A0657B68D70CBFC89FE1C0B59F57
riv=242A2FF7DD72554239450A424DD38AA6
pub=6E82F6B54A0E9DEBE4A8B3043EE3B24CD9BBB62B4416B0482582E419A2552E29AB4BEA0A4D7FA2D5
priv=
ctype=16

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=388F751542E8B245C6757ABC03B3D31B62D40030E09BE5A4A48F95FC436DBBA0
riv=6B976709CCD408718FF3CDF03CFB2E21
pub=09301B6436C85B53CB1585300A3F1AF9FB14DB7C30088C4642AD66D5C148B8995BB1A698A8C71827
priv=
ctype=25

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=C13D6AD58434080D3947EAC965A999CA909B36EE8689AC46FC27C409889878E0
riv=66D51260B5CD33E3772DFA2531218EC6
pub=2733C889D289550FE00EAA5A47A34CEF0C1AF187610EB07BA35D2C09BB73C80B244EB4147700D1BF
priv=
ctype=26

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=E24420003D554C14C4838DD43CA995781B350E8D360E8B014247609693C77A2F
riv=2265BA1E66FA4BD573F3D837CAF27B20
pub=71502ADB5783583AB88B2D5F23F419AF01C8B1E72FCA1E694AD49FE3266F1F9C61EFC6F29B351142
priv=
ctype=12

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=9F1C2C07C228AB8A6562DD27B8DB4D0D62A9AF3E000E0B8579D205ABFABEA622
riv=1BB69374A1E157D3C74DAC8FB784754E
pub=84DE5692809848E5ACBE25BE548F6981E3DB14735A5DDE1A0FD1F475866532B862B1AB6A004B7255
priv=
ctype=27

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=F239349F6472817C6251713DFA2F6A05164B7B37514C660ECDB83B96E6CF2991
riv=29E4B2179AC9DD72A66A1886205751F9
pub=50597B7F680DD89F6594D9BDC0CBEE03666AB53647D0487F7F452FE2DD02694631EA755548C9E934
priv=
ctype=25

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=632CCFBB2B4D1BE84C3FC15BE22B4839FEFD82953E86C075232817B6FF5E6818
riv=16E914D782054347F252715833AB3C51
pub=2FDA7A56AAEA65921C0284FF1942C6DE137370093D106034B59191951A5201B422D462F8726F852D
priv=
ctype=26

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=E2B22D94972650B4FD9BADD7C29F43C14D0ED3375AA42DD233A1D4A4E16322DC
riv=933B0784C58A44EAAD4D7846CA70B573
pub=B26FE6D3E3A1E766FAE79A8E6A7F48998E7FC1E4B0AD8745FF54C018C2A6CC7A0DD7525FAFEA4917
priv=
ctype=12

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=6DCE9AC4EFF461FE542FC543B7EF2F2AD9C98379C4DCBD3CB2BD58576861C7D2
riv=56835229635DE782F6001600DD4219EA
pub=04275E8838EF95BD013B223C3DF674540932F21B534C7ED2944B9104D938FEB03B824DDB866AB26E
priv=
ctype=27

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=C5F0DF6C72A61DFCD591D22E100ECBEB04A82831C6A90CB82DCFC852605C1433
riv=83947AB81813B4EFEDBEFB967E533DFB
pub=566635D3E1DCEC47243AAD1628AE6B2CEB33463FC155E4635846CE33899C5E353DDFA47FEF5694AF
priv=
ctype=30

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=04CD534825102487891B8E264D859587017BC8993EA10B0F8B0CAED2CD1DA207
riv=188A2108137A9E874D72A79E4D3A8E94
pub=3B7B04C71CAE2B1199D57453C038BB1B541A05AD1B94167B0AB47A9B24CAECB9000CB21407009666
priv=
ctype=08

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=7092ED26CDA962F6879776B1C390E9D9E5904F76DB5928B1789F05D79763B0E3
riv=6CCF6A03E7962F488F5043AEFDFDEE93
pub=148DCA961E2738BAF84B2D1B6E2DA2ABD6A95F2C9571E54C6922F9ED9674F062B7F1BE5BD6FA5268
priv=
ctype=31

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=4EAC8511C61C8459FDA903C6EB2B94A80E81C02495920FD2333257674A1701EF
riv=4D9860CB27D15E8A31A6874F602215A8
pub=BE4B1B513536960618BFEF12A713F6673881B02F9DC616191E823FC8337CCF99ADAA6172019C0C23
priv=
ctype=17

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=408B4CCF0D620A0EA7DB1C60706935CAE6DFC5BEF0FE7AF46DCFA97AA2A2C2E5
riv=514AD3E676E281D94825AC7609D62236
pub=36C1ACE6DD5CCC0006FDF3424750FAC515FC5CFA2C93EC53C6EC2BC421708D154E91F2E7EA54A893
priv=
ctype=09

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=0FA315D068EAF4EC96EB835253BF8E8AFEAC4D700A098D22B6ADAAB7E76B28ED
riv=64233F38F482D391C901E7F9DAAEBF58
pub=430322887503CF52928FAAA410FD623C7321281C8825D95F5B47EF078EFCFC44454C3AB4F00BB879
priv=
ctype=1A

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=ED11AF0A3040E823E676244B3F79113AF4C858AD79997959386B5F48537EC1C2
riv=CB9E901D0466EFE8427AD65C8EFB85F6
pub=A14F6D5F9AD7EBB3B7A39A7C32F13E5DC3B0BA16BDC33D39FDDF88F4AEEA6CFEEB0C0796C917A952
priv=
ctype=0F

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=9DB0954784CEA7F2FF59192EFD04A60F0250B9D4A32AE6AD2A446F3A34F9212B
riv=BFA08178E4EB5A2CA41A336BE4CF5603
pub=05BF09CB6FD78050C78DE69CC316FF27C9F1ED66A45BFCE0A1E5A6749B19BD546BBB4602CF373440
priv=
ctype=0A

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=668716115A3B1F9F98F247769104E58E01AF6472571F257523865A53E8620C05
riv=564174ABF22C32D1102EAAF47E60F08A
pub=B05F9DA5F9121EE4031467E74C505C29A8E29D1022379EDFF0500B9AE480B5DAB4578A4C61C5D6BF
priv=
ctype=11

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=546B2FF3FE216ED2BA865C79368109A15F2B0D23C2031354B1F6F36B0FDB4D46
riv=9B871D6414B8AACE542C18100AC21893
pub=9C327471BAFF1F877AE4FE29F4501AF5AD6A2C459F8622697F583EFCA2CA30ABB5CD45D1131CAB30
priv=
ctype=16

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=68E8261E31115665F2FED48EB12C6E4A3722A93E46D3BAF41A71D0802CA2A1F6
riv=D882EF46F57E12FE4D44681FA4F7F805
pub=A13AFE8B63F897DA2D3DC3987B39389DC10BAD99DFB703838C4A0BC4E8BB44659C726CFD0CE60D0E
priv=
ctype=17

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=1DCBE29DC2B2730F084B55012BFCE82B40BEBDC2D92E6277C2118ED0CACE441F
riv=275F8D432055BE85199261963796D220
pub=3995C390C9F7FBBAB124A1C14E70F9741A5E6BDF17A605D88239652C8EA7D5FC9F24B30546C1E44B
priv=
ctype=27

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=E4F2C93F93BF636014E9F8AD36D9BAD0F835ABE16A5788E082A7001E39E30C1D
riv=E5F37DDC3E0BA3E3298DA91130133CF5
pub=9BFF1CC7118D2393DE50D5CF44909860683411A532767BFDAC78622DB9E5456753FE422CBAFA1DA1
priv=
ctype=18

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=C5AE4C11A373495DA250BC8A3A7B571415A38C381D3EA99202A9E8753644A813
riv=F407E9FD67E45D9A527234A083790CEB
pub=64A5C60BC2AD18B8A237E4AA690647E12BF7A081523FAD4F29BE89ACAC72F7AB43C74EC9AFFDA213
priv=
ctype=27

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=EE3B468FC5F29081588B7C816E6EFD1959FAFE5E3DF83ABADA9158CAB91362BE
riv=C62E683903BAB3018438621EFAB55A10
pub=9D8DB5A880608DC69717991AFC3AD5C0215A5EE413328C2ABC8F35589E04432373DB2E2339EEF7C8
priv=
ctype=18

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=8198BBF29F8F216CAA2EB1834F38E9490C155E767880346712BD6167C652D04E
riv=023E758FB9684EA99264249A5523BC53
pub=62DFE488E410B1B6B2F559E4CB932BCB78845AB623CC59FDF65168400FD76FA82ED1DC60E091D1D1
priv=
ctype=25

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=BE21A922FA6307DFEA78CB7617A51816145CE8D9A70A2DD14278A866BE65FDC8
riv=42994B6602F8E33781BA1281EF186FBF
pub=637EAD34E7B85C723C627E68ABDD0419914EBED4008311731DD87FDDA2DAF71F856A70E14DA17B42
priv=
ctype=24

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=4CEBFC1D3DCE650DE71F73B78EB4A37DEACFBE57231FDEDCDC568AEB49CEE377
riv=BD9A81284BBB019D3D2741AA3BAA5096
pub=503172C9551308A87621ECEE90362D14889BFED2CF32B0B3E32A4F9FE527A41464B735E1ADBC6762
priv=
ctype=30

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=9DB0954784CEA7F2FF59192EFD04A60F0250B9D4A32AE6AD2A446F3A34F9212B
riv=BFA08178E4EB5A2CA41A336BE4CF5603
pub=05BF09CB6FD78050C78DE69CC316FF27C9F1ED66A45BFCE0A1E5A6749B19BD546BBB4602CF373440
priv=
ctype=0A

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=668716115A3B1F9F98F247769104E58E01AF6472571F257523865A53E8620C05
riv=564174ABF22C32D1102EAAF47E60F08A
pub=B05F9DA5F9121EE4031467E74C505C29A8E29D1022379EDFF0500B9AE480B5DAB4578A4C61C5D6BF
priv=
ctype=11

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=546B2FF3FE216ED2BA865C79368109A15F2B0D23C2031354B1F6F36B0FDB4D46
riv=9B871D6414B8AACE542C18100AC21893
pub=9C327471BAFF1F877AE4FE29F4501AF5AD6A2C459F8622697F583EFCA2CA30ABB5CD45D1131CAB30
priv=
ctype=16

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=68E8261E31115665F2FED48EB12C6E4A3722A93E46D3BAF41A71D0802CA2A1F6
riv=D882EF46F57E12FE4D44681FA4F7F805
pub=A13AFE8B63F897DA2D3DC3987B39389DC10BAD99DFB703838C4A0BC4E8BB44659C726CFD0CE60D0E
priv=
ctype=17

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=1DCBE29DC2B2730F084B55012BFCE82B40BEBDC2D92E6277C2118ED0CACE441F
riv=275F8D432055BE85199261963796D220
pub=3995C390C9F7FBBAB124A1C14E70F9741A5E6BDF17A605D88239652C8EA7D5FC9F24B30546C1E44B
priv=
ctype=27

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=E4F2C93F93BF636014E9F8AD36D9BAD0F835ABE16A5788E082A7001E39E30C1D
riv=E5F37DDC3E0BA3E3298DA91130133CF5
pub=9BFF1CC7118D2393DE50D5CF44909860683411A532767BFDAC78622DB9E5456753FE422CBAFA1DA1
priv=
ctype=18

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=C5AE4C11A373495DA250BC8A3A7B571415A38C381D3EA99202A9E8753644A813
riv=F407E9FD67E45D9A527234A083790CEB
pub=64A5C60BC2AD18B8A237E4AA690647E12BF7A081523FAD4F29BE89ACAC72F7AB43C74EC9AFFDA213
priv=
ctype=27

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=EE3B468FC5F29081588B7C816E6EFD1959FAFE5E3DF83ABADA9158CAB91362BE
riv=C62E683903BAB3018438621EFAB55A10
pub=9D8DB5A880608DC69717991AFC3AD5C0215A5EE413328C2ABC8F35589E04432373DB2E2339EEF7C8
priv=
ctype=18

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=8198BBF29F8F216CAA2EB1834F38E9490C155E767880346712BD6167C652D04E
riv=023E758FB9684EA99264249A5523BC53
pub=62DFE488E410B1B6B2F559E4CB932BCB78845AB623CC59FDF65168400FD76FA82ED1DC60E091D1D1
priv=
ctype=25

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=BE21A922FA6307DFEA78CB7617A51816145CE8D9A70A2DD14278A866BE65FDC8
riv=42994B6602F8E33781BA1281EF186FBF
pub=637EAD34E7B85C723C627E68ABDD0419914EBED4008311731DD87FDDA2DAF71F856A70E14DA17B42
priv=
ctype=24

[appldr]
type=SELF
revision=????
version=000?00??00000000
self_type=?????
erk=4CEBFC1D3DCE650DE71F73B78EB4A37DEACFBE57231FDEDCDC568AEB49CEE377
riv=BD9A81284BBB019D3D2741AA3BAA5096
pub=503172C9551308A87621ECEE90362D14889BFED2CF32B0B3E32A4F9FE527A41464B735E1ADBC6762
priv=
ctype=30

From zadow28 comes lv0.elf: yep working: http://rghost.net/41097133 (4.21) / http://rghost.net/41097551 (4.25)

I've extracted and decrypted some off the loaders, go search for keys: http://rghost.net/41097829 (the 4.elf I uploaded is the appldr.elf)

Key 28 06 59 43 5E EA 33 B1 BD 7A B4 D0 81 13 06 D1
IV EA 0E 83 8B A5 90 57 7A 14 D1 3C 8E 09 FD D1 34[*] Application Info:
Auth-ID [appldr]
Vendor-ID [hv]
SELF-Type [Secure Loader]
Version 04.25

Some files inside that could be not be decrypted: http://rghost.net/41097841

Going throw appldr 4.25 dosen't look like there are revision 1C keys in there for 4.25 eboots.

One thing i found out thats interesting.. the lv0 had 6 files inside. 3 that could be decrypted = appldr/isoldr/lv2ldr. 3 that couldn't. But if you look in hex you would notice that the 3 unknown files is simply headers. I also noticed in the rest of the lv0 files there are encrypted hex sections.

So my guts says that you should try match the headers with some of the encrypted data/hex there you would probably find the missing lv1ldr if you succeed.

From haz367: added to scetool, decrypts fine

scetool 0.2.9 (C) 2011-2012 by naehrwert
NP local license handling (C) 2012 by flatz

Loaded keysets.
Loaded loader curves.
Loaded vsh curves.
Using keyset [lv0ldr 0x0000 04.25]
Header decrypted.
Data decrypted.
ELF written to C:\cygwin\home\xxx\425ofw\update_files\CORE_OS\lv0.elf

From zecoxao: https://dl.dropbox.com/u/35197530/lv0.elf this one is from 3.55, since i didn't have any other than this and the jig one. https://dl.dropbox.com/u/35197530/keys and updated keys file

Usage: scetool -d lv0 lv0.elf

From aldostools: add this to keys file:

[lv0ldr]
type=SELF
self_type=LV0
erk=CA7A24EC38BDB45B98CCD7D363EA2AF0C326E65081E0630CB9AB2D215865878A
riv=F9205F46F6021697E670F13DFA726212
pub=A8FD6DB24532D094EFA08CB41C9A72287D905C6B27B42BE4AB925AAF4AFFF34D41EEB54DD128700D
priv=001AD976FCDE86F5B8FF3E63EF3A7F94E861975BA3
ctype=33

Please the leaked keys in: home\username\.ps3

Name them:

lv0-ctype
lv0-iv-key
lv0-key-key
lv0-priv-key
lv0-pub-key

No version number required.

From Cyberskunk: Just be patient people... WE HAVE 100% WORKING solutions with no brick risk or complications.. tested for the last month not just spat out as fast as possible. After OFW 4.30 release.. not long..

From danixleet: Can we add these (https://dl.dropbox.com/u/35197530/keys) to SCETool to resign 4.x games for 3.55? Appldr needs to be reversed before us end user's get the updated keys file for SCETool...

Anyway Lv0 now decrypted for ever but it still need a lot of RE work to be able to get decrypted loaders from it since Sony had changed a lot of security algorithms to protect this loaders inside Lv0. Also we will not find 4.xx appldr keys inside the decrypted Lv0 so it still need more work to figure out how Sony store this keys right now.

1) Yes with the leak of lv0 keys we can decrypt lv0 > extract appldr > decrypt appldr with metldr keys > locate the keysets >> unicorns

This then enables us to decrypt any eboot / sprx etc for games and resign them with 3.55 keys .. (That is what is what you're looking to do)

2) fail0verfl0w exposed a flaw in sonys encryption ECSDA or whatever its called lol...

what does this mean? it means we can calculate the private keys
what are private keys ? there used to encrypt sony files.. aka SELF. SPRX etc, etc

So up until 3.55 we can calculate every key sony used to SIGN there files, thus making valid application, thus enabling homebrew etcc or whatever. 3.56+ that has been fixed and we can no longer calculate the private key... but yes we can still grab the public keys, as they are within the FW..

Public Keys Decryption / Private Keys Encryption

3) geohot released hes NPDRM tools which had static private keys, sony apparently blocked them keys, once npdrm was worked out, new tools had been released to select different keys, aka dont use geohots tools, there flop, even math stated this..

4) you can use any sony npdrm private key in scetool and produce homebrew with will execute on any OFW... aka 3.60++ .... sony can't block there own keys, cause then all there old psn games etc would not work unless updated and there not gonna back date the updates for extremely old games lol..

5) yes we can decrypt all current games and resign them for 3.55 if needed..

6) lv0 private key cant be changed as bootldr cant be updated, so for example, every new fw out can now become CFW... or for instance step 1)... aka you download 4.30 extract the pup or install and nor dump... decrypt lv0 etc etc (step 1) and add the new appldr keys to scetool... their chain of trust was "fixed" in 3.60 but once you pwn bootldr its game over, as bootldr would hold lv0 keys and lv0 signing cant be updated.. so pwnddd for lifeeee !!!

From KaKaRoToKS (via pastie.org/private/3np6uj6md1occbctdeir6a) comes an update on his previous exploit as well:

Since the LV0 keys have now been leaked, I believe I can now share this info with you, to help out those who are trying to build their own 4.x CFW:

The NPDRM ECDSA signature in the SELF footer is checked by lv2. It first asks appldr to tell it whether or not the signature is to be checked, and appldr will only set the flag if the SELF is a NPDRM with key revision from 3.56+ (the ones without private keys). This means that the SELF files signed with the new 3.56+ keys still don't have their ecdsa checked (probably to speed up file loading).

If appldr says the ecdsa signature must be checked, then lv2 will verify it itself, and return an error if it's not correct. There are many ways to patch this check out.

1 - Patch out the check for the key revision in appldr
2 - Patch out the "set flag to 1" in appldr if the key revision is < 0xB
3 - Patch out the code in lv2 that stores the result from appldr
4 - Patch out the actual sigcheck function from lv2.
5 - Ignore the result of the ecdsa from lv2.

Here is one of the patches (the 4th one, patching out the check function from lv2) :
In memory 0x800000000005A2A8, which corresponds to offset 0x6a2a8 in lv2_kernel.elf, replace :

e9 22 99 90 7c 08 02 a6

With :

38 60 00 00 4e 80 00 20

This is for the 4.21 kernel (that was the latest one when I investigated this), I will leave it as an exercise to the reader to find the right offsets for the 4.25 and upcoming 4.30 kernel files.

And here's another bit of info... in 4.21 lv2, at memory address 0x800000000005AA98 (you figure out the file offset yourself), that's where lv2 loads the 'check_signature_flag' result from appldr, so if you prefer implementing method 3 above, just replace the 'ld %r0, flag_result_from_appldr' by 'ld %r0, 0' and you got another method of patching it out. Either solutions should work just the same though. Enjoy homebrew back on 4.x CFW....

p.s: Thanks to flatz and glu0n who helped reversed this bit of info.

From marcan42 (a PS3 dongle developer): The correct name for the PS3 keys that were released is "bootldr keys", not "lv0 keys": named after the verifier, not what is verified. bootldr is the name of the code living at address 0 in Flash (which is loaded by the SPU isolated mode boot ROM). Keys are named after the verifier because we decided so originally, and everyone else stuck to it. No point in changing it now.

To quote (via games.slashdot.org/comments.pl?sid=3205473&cid=41747075):

"The first-stage bootloader is in ROM and has a per-console key which is effectively in tamper-resistant silicon. The second-stage bootloader (bootldr) is encrypted with the per-console key, but is not upgradable and is the same for all consoles (other than the encryption wrapper around it). This second-stage bootloader verifies lv0.

Sony signed lv0 using the same broken process that they used for everything else, which leaks their private key. This means that the lv0 private key was doomed from the start, ever since we demonstrated the screwup at the Chaos Communication Congress two years ago.

However, because lv0 is also encrypted, including its signature block, we need that decryption key (which is part of bootldr) before we can decrypt the signature and apply the algorithm to derive the private key. We did this for several later-stage loaders by using an exploit to dump them, and Geohot did it for metldr (the "second root" in the PS3's bizarre boot process) using a different exploit (we replicated this, although our exploit might be different).

At the time, this was enough to break the security of all released firmware to date, since everything that mattered was rooted in metldr (which is bootldr's brother and is also decrypted by the per-console key). However, Sony took a last ditch effort after that hack and wrapped everything after metldr into lv0, effectively using the only security they had left (bootldr and lv0) to attempt to re-secure their platform.

Bootldr suffers from the same exploit as metldr, so it was also doomed. However, because bootldr is designed to run from a cold boot, it cannot be loaded into a "sandboxed" SPU like metldr can from the comfort of OS-mode code execution (which we had via the USB lv2 exploit), so the exploit is harder to pull off because you don't have control over the rest of the software.

For the exploit that we knew about, it would've required hardware assistance to repeatedly reboot the PS3 and some kind of flash emulator to set up the exploit with varying parameters each boot, and it probably would've taken several hours or days of automated attempts to hit the right combination (basically the exploit would work by executing random garbage as code, and hoping that it jumps to somewhere within a segment that we control - the probabilities are high enough that it would work out within a reasonable timeframe). We never bothered to do this after the whole lawsuit episode.

Presumably, 18 months later, some other group has finally figured this out and either used our exploit and the hardware assistance, or some other equivalent trick/exploit, to dump bootldr. Once the lv0 decryption key is known, the signing private key can be computed (thanks to Sony's epic failure).

The effect of this is essentially the same that the metldr key release had: all existing and future firmwares can be decrypted, except Sony no longer has the lv0 trick up their sleeve. What this means is that there is no way for Sony to wrap future firmware to hide it from anyone, because old PS3s must be able to use all future firmware (assuming Sony doesn't just decide to brick them all...), and those old PS3s now have no remaining seeds of security that aren't known. This means that all future firmwares and all future games are decryptable, and this time around they really can't do anything about it.

By extension, this means that given the usual cat-and-mouse game of analyzing and patching firmware, every current user of vulnerable or hacked firmware should be able to maintain that state through all future updates, as all future firmwares can be decrypted and patched and resigned for old PS3s. From the homebrew side, it means that it should be possible to have hombrew/linux and current games at the same time. From the piracy side, it means that all future games can be pirated. Note that this doesn't mean that these things will be easy (Sony can obfuscate things to annoy people as much as their want), but from the fundamental security standpoint, Sony doesn't have any security leg to stand on now.

It does not mean that current firmwares are exploitable. Firmware upgrades are still signed, so you need an exploit in your current firmware to downgrade. Also, newer PS3s presumably have fixed this (probably by using newer bootldr/metldrs as trust roots, and proper signing all along)."

In summary, you can sign homebrew with old NPDRM keys which haven't been revoked. We don't have 3.60+ private keys for RETAIL signing (not NPDRM), but we don't need them as NPDRM keys can be used instead and the homebrew signed as NPDRM content.

In conclusion, according to afiser while Sony can update lv0 they must use the same keys to encrypt it each time or else bootldr wouldn't be able to load it. PlayStation 3 3k+ consoles have LV0.2 so it's not the same key. For those interested in examining them some LV0 dumps can be found via ps3devwiki.com/wiki/Loaders#Loader_encapsulation_in_lv0 as well.

Update: From woulph_alfa via Spanish site (ps3sos.com/showthread.php?29532-Keys-LV0-liberadas/page23) comes the following theory on the encryption, roughly translated:

I bring you good info compiled by me. I've been throwing a couple of hours to file the 4.25 appldr good here's a short summary of what is the content of. Elf

I will explain:

[1] - WA (Writing and Assignment) is not interested in a lot ... But do not rule ...
[2] - AX (allocation and execution) party quite important since it is the only part of "executable" You can look at the content from 100 to 01ba10 Possibly OFFSET is the one responsible for making the decryption of the RIV and ERK. Apart from checks ...
[3] - A (Assignment) and finally the most interesting part of the file, in this section I think is where the KEY to decrypt the RIV and ERK (See the second image there is the structure)
[4, 5, 6] - WA (Writing and Assignment) Here are the keys of the appldr from 4.25 up to the first keys appldr

KEY SAMPLE

40 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 FLAG
00 00 00 7B 00 00 00 01 00 11 60 00 48 CE C6 E6 INFO KEY + INICIO KEY
B3 88 23 A6 84 30 26 44 52 D8 0B 14 03 BA 54 86 KEY

40 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00
00 00 00 7B 00 00 00 01 00 11 60 00 F8 97 23 39
75 67 AF 39 D3 B6 8E DC F8 07 CE F3 59 B8 D1 2C

40 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00
00 00 00 7B 00 00 00 01 00 11 60 00 FD A1 2F 68
C9 11 0E 61 67 D5 F5 07 A6 A0 ED D7 B0 B4 89 D8

What is the encryption method that uses NO IDEA AS IF WE HAD A LONG AND THE ....

Possibly a little further investigation, if anyone wants me to help out ... welcome! OJO not expect great progress on my part, because currently I have no means eager.

Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

230 Comments - Go to Forum Thread »

#230 - GlobalTroll - 5w ago

Scrambling and unscrambling obfuscated keys from loader (PS3 FW 3.60 - 3.61)

from LV1LDR.ELF FW3.61

offset 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

1A390 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 < curve_type
1A3A0 00 00 00 00 00 00 00 00 00 01 2E 08 00 01 2D C0
1A3B0 00 01 8A 90 00 01 8A D0 00 00 00 00 00 00 00 00
1A3C0 00 00 00 00 00 00 00 00 00 01 2D 90 00 01 2D 78
1A3D0 00 01 66 28 00 01 66 28 00 00 00 00 00 00 00 00
1A3E0 1C DA BE 30 83 38 23 F4 61 CA 53 41 04 11 5F FF < pub
1A3F0 60 01 0B 71 06 31 E4 35 A7 D9 15 E8 2A E8 8E DE < pub
1A400 66 72 64 65 6C B7 06 2E 00 00 00 00 00 00 00 00 < pub
1A410 84 4F 80 F3 C5 7C 45 5C 7F 09 00 00 00 00 00 00 < root_scramlbe_key

1D140 F9 2C 86 66 EF FB AC 7E B5 83 E5 4A 25 7F 7C 05 < sk1_key
1D150 DD F6 A5 B1 43 C1 14 1F EE D0 1C DA 71 97 05 C3 < sk2_key
1D160 F2 E7 0B C4 BA C1 0C 3D 8D DB B7 DC 23 05 3F 9A < sk1_iv
1D170 01 8E 69 5C 3A 29 AF 6E 74 6A 73 CB F7 3D BD FD < sk2_iv
1D180 FF FF FF FF 00 00 00 00 00 00 00 01 00 00 00 01
1D190 FF FF FF FF 00 00 00 07 00 00 00 06 00 00 00 02
1D1A0 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00
1D1B0 FF FF FF FF 00 00 00 30 00 00 00 20 00 00 00 20
1D1C0 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00
1D1D0 00 00 00 00 FF FF FF F0 00 00 00 00 00 00 00 00
1D1E0 62 7C B1 80 8A B9 38 E3 2C 8C 09 17 08 72 6A 57
1D1F0 9E 25 86 E4 00 00 00 00 00 00 00 00 00 00 00 00

1DE00 18 09 79 66 C3 DE 8A 0D 82 BF 95 6C B3 9F AF 78 < erk_obf
1DE10 22 95 C6 CA 7F 1E 54 7A B3 0E DF D7 EE 5C B8 12 < erk_obf
1DE20 9B 32 B2 0F A7 72 80 F1 09 5E A1 3F 1C 2D 5C 99 < riv_obf

Unscrambling script: key_unscrambler.py

from CryptoPlus.Cipher import AES
import hashlib, hmac

def sha1_hmac(key, data):
return hmac.new(key=key, msg=data, digestmod=hashlib.sha1).digest()

def aes_decrypt_cbc(key, iv, data):
crypto = AES.new(key, AES.MODE_CBC, iv)
return crypto.decrypt(data)

def unscramble(key, iv, data):
key = sha1_hmac(root_scramble_key, key)
return aes_decrypt_cbc(key[:16], iv, data)

def unscramble_1(key):
return unscramble(sk1_key, sk1_iv, key)

def unscramble_2(key):
return unscramble(sk2_key, sk2_iv, key)

root_scramble_key = '844F80F3C57C455C7F09'.decode('hex')

sk1_key = 'F92C8666EFFBAC7EB583E54A257F7C05'.decode('hex')
sk1_iv = 'F2E70BC4BAC10C3D8DDBB7DC23053F9A'.decode('hex')

sk2_key = 'DDF6A5B143C1141FEED01CDA719705C3'.decode('hex')
sk2_iv = '018E695C3A29AF6E746A73CBF73DBDFD'.decode('hex')

erk_obf = '18097966C3DE8A0D82BF956CB39FAF782295C6CA7F1E547AB30EDFD7EE5CB812'.decode('hex')
riv_obf = '9B32B20FA77280F1095EA13F1C2D5C99'.decode('hex')

erk_dec = unscramble_1(erk_obf)
riv_dec = unscramble_2(riv_obf)

print 'erk_dec:', erk_dec.encode('hex')
print 'riv_dec:', riv_dec.encode('hex')

Scramling script: key_scrambler.py

from CryptoPlus.Cipher import AES
import hashlib, hmac

def sha1_hmac(key, data):
return hmac.new(key=key, msg=data, digestmod=hashlib.sha1).digest()

def aes_encrypt_cbc(key, iv, data):
crypto = AES.new(key, AES.MODE_CBC, iv)
return crypto.encrypt(data)

def scramble(key, iv, data):
key = sha1_hmac(root_scramble_key, key)
return aes_encrypt_cbc(key[:16], iv, data)

def scramble_1(key):
return scramble(sk1_key, sk1_iv, key)

def scramble_2(key):
return scramble(sk2_key, sk2_iv, key)

root_scramble_key = '844F80F3C57C455C7F09'.decode('hex')

sk1_key = 'F92C8666EFFBAC7EB583E54A257F7C05'.decode('hex')
sk1_iv = 'F2E70BC4BAC10C3D8DDBB7DC23053F9A'.decode('hex')

sk2_key = 'DDF6A5B143C1141FEED01CDA719705C3'.decode('hex')
sk2_iv = '018E695C3A29AF6E746A73CBF73DBDFD'.decode('hex')

erk_dec = '5FF17D836E2C4AD69476E2614F64BDD05B9115389A9A6D055B5B544B1C34E3D5'.decode('hex')
riv_dec = 'DF0F50EC3C4743C5B17839D7B49F24A4'.decode('hex')

erk_obf = scramble_1(erk_dec)
riv_obf = scramble_2(riv_dec)

print 'erk_obf:', erk_obf.encode('hex')
print 'riv_obf:', riv_obf.encode('hex')

#229 - nintendo1516 - 7w ago

very cool news

#228 - PS3 News - 12w ago

Here are some more purported PS3 keys for Firmware 4.31 from MARKUS++: pastebin.com/raw.php?i=zsQzfm7R

drm-ctype-431
00 00 00 30

drm-iv-431
24 6F 4B 83 28 BE 6A 2D 39 4E DE 20 47 92 47 C5

drm-key-431
81 03 EA 9D B7 90 57 82 19 C4 CE DF 05 92 B4 30 64 A7 D9 8B 60 1B 6C 7B C4 51 08 C4 04 7A A8 0F

drm-pub-431
50 31 72 C9 55 13 08 A8 76 21 EC EE 90 36 2D 14 88 9B FE D2 CF 32 B0 B3 E3 2A 4F 9F E5 27 A4 14 64 B7 35 E1 AD BC 67 62

iso-ctype-431
00 00 00 15

iso-iv-431
95 3F 6A 99 89 1B 47 39 35 8F 53 63 A0 0C 08 B9

iso-key-431
63 56 5D BE 98 C3 B1 A5 2A AD C9 07 C4 71 30 FE 57 A1 07 34 E8 4F 22 59 26 70 F8 6E D2 B0 A0 86

iso-pub-431
26 BE 7B 02 E7 D6 5C 6C 21 BF 40 63 CD B8 C0 09 2F E1 67 9D 62 FA 1A 8C CC 28 4A 1D 21 88 54 73 A9 59 99 25 37 A0 66 12

lv0-ctype-431
00 00 00 33

lv0-iv-431
F9 20 5F 46 F6 02 16 97 E6 70 F1 3D FA 72 62 12

lv0-key-431
CA 7A 24 EC 38 BD B4 5B 98 CC D7 D3 63 EA 2A F0 C3 26 E6 50 81 E0 63 0C B9 AB 2D 21 58 65 87 8A

lv0-priv-431
00 1A D9 76 FC DE 86 F5 B8 FF 3E 63 EF 3A 7F 94 E8 61 97 5B A3

lv0-pub-431
A8 FD 6D B2 45 32 D0 94 EF A0 8C B4 1C 9A 72 28 7D 90 5C 6B 27 B4 2B E4 AB 92 5A AF 4A FF F3 4D 41 EE B5 4D D1 28 70 0D

lv1-ctype-431
00 00 00 30

lv1-iv-431
ED 86 99 56 2C 6A C6 52 04 FA 16 62 57 E7 FC F4

lv1-key-431
10 CE A0 49 73 FC CC 12 EC 19 92 45 10 82 2D 8D 4C 41 F6 57 FD 3D 7E 73 F4 15 18 D6 87 42 1B CD

lv1-pub-431
1C 05 87 16 38 86 C7 07 18 08 50 19 00 20 00 00 14 3F CF 9E 3B 85 86 08 40 80 06 15 18 07 8D 14 1C 05 C7 0D 38 85 47 49 18 06 8C 93 14 3F CC 17

lv2-ctype-431
00 00 00 30

lv2-iv-431
9B 79 37 47 22 AD 88 8E B6 A3 5A 2D F2 5A 8B 3E

lv2-key-431
0C AF 21 2B 60 FA 53 C0 DA 7E 2C 57 5A DF 61 DB E6 8F 4A 33 43 3B 1B 89 1A BF 5C 42 51 40 6A 03

lv2-pub-431
69 59 84 B7 EE 2E C2 F7 7F CC 31 20 15 0D CE 7E 44 80 D8 44 80 DD D8 C5 94 0A EB 6F 79 E6 3D 17 A8 BA 3E 4E 63 B2 BB 06 FC 0C E5 7E 3B B8 FC 46

rvk-ctype-431
00 00 00 12

rvk-iv-431
A8 BA 3E 4E 63 B2 BB 06 FC 0C E5 7E 3B B8 FC 46

rvk-key-431
69 59 84 B7 EE 2E C2 F7 7F CC 31 20 15 0D CE 7E 44 80 D8 44 80 DD D8 C5 94 0A EB 7F 79 E6 3D 17

rvk-pub-431
7F 19 50 C6 E4 97 E9 22 40 05 86 EE 33 8B 41 E0 1C 90 6C 5A 6D FD 75 FE B5 24 9C FA 4B EC 53 4F 5C A6 79 67 0A 45 2B 2A

spp-ctype-431
00 00 00 07

spp-iv-431
6D 30 8B 59 BC 90 54 B1 2C 83 33 59 D3 1B AE 77

spp-key-431
D2 96 1B BF FE DA EE 26 9B 06 14 54 D6 AC F2 62 CD 71 BC 6F 53 20 18 0F 0A 04 A0 75 83 CC F7 C5

spp-pub-431
0C DD 0D 15 41 A6 B0 DF D1 2E 95 15 78 53 6C A6 0C 93 85 3B 88 FC E1 75 92 DC 8D 13 4B 08 A9 4A F8 BB 08 66 7E 2D 70 A5

Also below are unconfirmed PS3 RSA KEYS from haleskinn and via pastebin.com/rwapY2Ng: