Sponsored Links

Sponsored Links

Rumor: 3K3y - PS3Key (ODD) XKey for PS3 Consoles is Incoming


Sponsored Links
93w ago - Following up on the previous Blu-ray drive emulation rumor, today modrobert has announced that 3K3y, a PS3Key (ODD) - essentially an XKey for PS3 - is incoming shortly with some preliminary details outlined below.

Still can't get too excited at requiring additional hardware to play PS3 games with the advent of PlayStation 3 Custom Firmware a few years ago though.

To quote from EurAsia (linked above): I just got word from a well known team that will make PS3 owners happy!

Watching the video and drooling!! With those few words I hope to keep you interested...

Below is a picture (via facebook.com/x360key) as well.

More info while waiting for the video: In order to retrieve the needed BD drive key, Team 3k3y (aka xk3y) will release a PS3 software tool which requires CFW 3.55, after the key is dumped the PS3 can be upgraded to latest official system update (firmware/XMB) to get PSN etc.

The team is exploring other options to dump the required key as well, more on that later.

I'm relatively sure it does support original discs as well, but will confirm it anyway. Pretty much same functionality as xkey.

For now, any PS3 model that can be downgraded to CFW 3.55 will be supported, this is only to retrieve the Blu-ray drive key, after that you can update as you want.

The 3k3y Team is researching other options to dump the required key as well, more on that later. For now you have to downgrade to (or be on) CFW 3.55 in order to get the unique BD drive key required by 3k3y, once you have the key the PS3 can be updated anyway you want, doesn't matter for 3key.

General tech info about 3k3y which is true for xkey as well:

The 3k3y hardware device is an advanced Optical Disc Drive (ODD) emulator, it does not rely on any software based hacks to operate (once the drive key is known).

The device is connected on the SATA (PATA) bus in the PS3, like this; cable from PS3 goes into 3key, cable to BD drive goes out from 3k3y, in other words 3k3y physically sits between the drive and the PS3 mainboard and offers USB 2.0 port to connect hard drive(s). Games residing on the connected hard drive(s) can be selected using a small remote display with buttons (as seen in the photo linked a few posts up reading "PS3" in white characters on the display).

For the PS3 this device appears as a legit BD drive, and replies to any ATA protocol requests/commands the same way the original drive does. The BD drive key which is unique in each PS3 makes it possible for 3k3y to decrypt/encrypt data on the fly and redirect SATA traffic originally on disc media from the hard drive connected via USB 2.0 instead. No original Blu-ray disc needs to be inserted for operation, you can use this without any disc in the drive.

Again, this makes it possible to use any official firmware (XMB) version you want after installation (and key retrieval). No need for software hacks like CFW or DEX to make this work at all. If the original game requires firmware (XMB) 4.25, then go ahead and update, just like you would if the system was completely original (virgin).

I hope this clears up any misunderstandings what 3k3y does, or what it requires.

If the CFW you use can load games on Blu-Ray from the BD drive today, then it will be able to do that from hard drive with 3k3y installed as well.

However, to my knowledge the Blu-ray Disc (BD) drive is not used with CFW, original game disc can be mounted for compatibility, but games are actually loaded from a hard drive connected to the USB port on PS3 or from the internal hard drive.

Simply put, whatever fails with the installed CFW will fail with 3key as well. That's the reason it is kind of pointless to use 3k3y with CFW, but makes a lot of sense to use OFW.

In summary:

  • The team for now is only releasing one picture regarding 3K3Y, but are hoping for an end of the year release.
  • It is full hardware interface, not a dongle, but currently you need CFW v3.55 to dump the BD drive key, after that you can update.
  • It will be complete ODD Blu-ray emulator, allowing even the feature to rip your original PS3 game discs to your external HDD.
  • Due to the nature of design, you will be required to open your PS3 to install it, but NO SOLDERING is needed.
  • More info will be release later, but for now any more pictures and videos are PRIVATE and been shown only to trusted long-time resellers.
  • In order to retrieve the needed BD drive key, Team 3k3y (aka xk3y) will release a PS3 util which requires CFW 3.55, after the key is dumped the PS3 can be upgraded to latest official system update (firmware/XMB) to get PSN etc. The team is exploring other options to dump the required key as well, more on that later.

Update: Below is a minor timeline update, as follows:

[21/10/12] 3k3y key dumper app! (pictured below)

Finally from bubba: You will need do some soldering with this ODE... If You want to get the keys from 4.31. SATA bus level For 25xx and newer models will need to be solder and to get the keys and play backups.








Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 102 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

PS3 News's Avatar
#82 - PS3 News - 69w ago
Below are details on the 3K3y SATA Motherboard And 20XX Daughterboards from bubba, as follows:

We have just assembled the first 'production status' 3k3y SATA motherboards and 20xx daughter boards.

The 3k3y SATA motherboard is compatible with all PS3 models with a SATA interface for the BDROM through a series of different daughterboards. The first board to be released is the 20xx series board.

We hope the hardware can be sent out to testers in the beginning of next week, and we do not anticipate any issues.

Also from bubba come some 3KS Slim Ver (3k3y) Pics below, who states the following: My good friend's at 3K3Y AND XKEY Sent me a Testing Unit.. Here is the Pics.. I just Install it on A Slim model.. Everything is Working HAS it should be.. I am Online Woot..

You will still to have your drive key... I am on 20/21xx Model. This 3kS 3K3Y is Not Out Yet... Im just testing it for them.. Past Week. If i get time i will show a video how to install it and get the drive key and run games.. or maybe my good friend brakk3n will do a Better one.

3KS & XK are now running on the same main PCB. Just add the correct adapter. More to come.. I got bigger news coming soon.

3k3y microSD image v1.01 (via k3yforums.com/viewtopic.php?p=65764#p65764)

Download: 3k3y101FW.rar‎ / FPGA.rar

This is a recovery factory image (firmware v1.01) by Team xKey for the 3k3y (PATA) microSD card to be used if the original card is corrupt (or if formatted by mistake). Use USB Image Tool to write the image in Windows (in Linux, use 'dd'). NOTE: If you want to upgrade 3k3y use USB stick or hard drive, don't copy stuff directly to the microSD card. WARNING: This firmware version contains bugs which makes 3k3y crash some of the old fat PS3 models, so only use this to restore microSD card, then update to latest version.

Update: 3k3y SATA is now ready! After months of testing 3k3y SATA is now in production. All SATA models can be supported by various daughter boards. At this time the first daughterboard supports the following models: (via facebook.com/x360key/posts/579022432130306)

  • Fat PS3s, CECHL onwards
  • 20xx/21xx Slims

3.55 is still required for key extraction but we have made some interesting finds which may eventually lead to key extraction directly from the drive.

PS3 News's Avatar
#81 - PS3 News - 75w ago
Below is a 3K3y PS3Dec (alternative encryptor/decryptor) from bubba (aka red_meryl) who states the following:

Download: [Register or Login to view links] (72.32 KB) / [Register or Login to view links] (76.10 KB)

Here's an alternative encryptor / decryptor (can be used in place of 3k3y ripper's ISO Crypto function). Features:

  • Commandline
  • Multi-threaded decryption/encryption
  • Compiles on linux and windows (should compile on anything with openmp and polarssl)
  • No dependency on .NET

Source, windows 32 bit and linux 64 bit binaries are included. Can whoever's interested please compile it for other environments (mac, linux 32 bit, others), and put a link to the binary in this thread? Also no plans for a gui, but a simple one shouldn't be hard to make if anyone's interested in doing so.

Decrypt:


Encrypt:


Note:

The multi-threading is not optimal (the encryption/decryption is multi-threaded, but not the io), but for an initial release it's fine. Not heavily tested. Please compare output to 3k3y ripper, and check that a decrypt-encrypt cycle produces the same iso you started with.

Increasing efficiency and adding features are planned later. The next version will at least have optional sha-1 hashing of input and output. Any feedback, bugs and feature requests please mention them in this thread.

Update: New version (r4), speed improvements (on relatively new hardware with HDDs this is io bound, and about as quick as it's going to get).

New features:

  • Fully multi-threaded (io happens simultaneously to processing)
  • Read from stdin and write to stdout (write '-' in place of a path)

Haven't implemented sha1-1 hashing as it complicates the multi-threading. As a compromise, you can pipe to stdout to do any post-processing you want. As a bonus, if someone makes a (piped) commandline ripper decrypted isos can be created directly.

Below are some 3K3y videos as follows for those interested and an official 3K3y Firmware v1.04 revision:

3K3y Firmware v1.04

Download: 3K3y Firmware v1.04

This firmware update fixes freezing issues on certain older PS3s, adds support for BLD/BLF ISO files, and offers enhanced stealth features.











2013-03-05: 3k3y Firmware v1.04 released!

This firmware update fixes freezing issues on certain older PS3s, adds support for BLD/BLF ISO files, and offers enhanced stealth features. Get it now!

2013-03-14: Ripper App now rebuilds 'jailbreak rips'!

The Ripper app can now rebuild a complete ISO from so-called 'scene' or 'jailbreak' rips (decrypted game data without ISO header and other metadata). We are now very proud to announce that you can recreate the ISO file using our Ripper app. To do so you need to download the corresponding Iso Rebuild Data, or IRD, file. These files can be downloaded and redistributed freely as they only contain metadata an other non-copyrighted data.

Finally, from bubba: 3K3y Public beta Ripp3r 1.18

Download: 3K3y Public beta Ripp3r 1.18 Setup.rar‎

We're proud to announce the public beta of the Ripp3r application 1.18. We ask you all to test this application for every possible aspect. Also test the IRD site: 3k3y.com/ird_files. Features of the new Ripp3r application include:

  • Rip PS3 game to ISO
  • Encrypt/decrypt ISO (decrypted ISO's can be zipped, but are NOT playable)
  • Decrypt ISO directly to zip or multipart zip (define size in the settings (Tools->Settings))
  • Encrypt ISO directly from zip
  • Create IRD (ISO Rebuild Data) file from ISO (this requires an 3k3y ISO)
  • Anonymizes specific information in the IRD (like the D2)
  • Completely anonymous upload of IRD files. Uploading uses a public/private key pair, which encrypts the payload before sending it to the server. We NEVER save who (not even IP) submitted which IRD file.
  • Identify JB Rip: gives you information about the JB rip, and tries to find the correct IRD file
  • Create ISO from JB rip: rebuilds an exact copy of the original ISO. This requires that a correct IRD file has been submitted to the database
  • Submit IRD file to the database: after you've ripped a game to your computer, also create an IRD file for it and upload it to the database. This will help us with more content, and helps others to rebuild the ISO
  • Automatic determines the correct version of PS3UPDAT.PUP file for the JB rip and downloads it
  • Automatic joins splitted JB rip files
  • Both GUI and (limited) console version available

Things that are NOT in this version:

  • Mono compatibility, due to the compression and packing algoritm we use, this software does not work under Mono (yet). We may look into this.
  • Automatic IRD download
  • Rebuild PsArc

Of course, you can assume that I've forgotten a few things. You can find those things out yourself. As always, post your findings here. Both good and bad. If you find issues, post them here. If you see weird Chinese characters, definitely copy them as text and post them here, or as a pastie. If you need a logfile, the last 5 sessions are saved to a logfile in your temp directory (type %TEMP% in the addressbar in Explorer).

Have fun, and please, please, upload those IRD files. We need a lot! Get the goodies here, and have fun!

Public beta Ripp3r 1.19 / 3k3y Ripper App v1.19 by r-win

Download: ripp3r_v1_19_beta.zip‎ / ripp3r_v1_19.zip‎

New and fixed in this release:

  • Cancel while ripping fixed
  • Windows XP support (yes, for real, .NET 4.5 has been dropped, now .NET 4.0 is required)
  • Save the last choosen paths on all dialogs
  • Ird creation from disc
  • Ird creation while ripping

We're proud to announce the public beta of the Ripp3r application 1.19. We ask you all to test this application for every possible aspect. Also test the IRD site (above) This version has some new features, which include:

  • Ird creation from disc
  • When ripping an iso, the IRD will automatically be created (enable/disable in settings)
  • Windows XP support (.NET 4.0 required)
  • Save last used paths in all dialogs

Also, a few bugs are fixed, including:

  • Fixed bug when pressing cancel while ripping
  • Prevents crash on Windows XP

Of course, you can assume that I've forgotten a few things. You can find those things out yourself. As always, post your findings here. Both good and bad. If you find issues, post them here. If you see weird Chinese characters, definitely copy them as text and post them here, or as a pastie.

If you need a logfile, the last 5 sessions are saved to a logfile in your temp directory (type %TEMP% in the addressbar in Explorer). This application REQUIRES the .NET 4.0 runtime.

PS3 News's Avatar
#80 - PS3 News - 76w ago
Below are some PS3 3K3y installation pictures for those interested (continued).

Also here is a link to the [Register or Login to view links] as well.

Finally, the main article has been updated recently for those who missed it alongside the PS3 3K3y Keydumper v1.00 / v1.01 for PS3 3.55-4.31 CFW post and attachments.

PS3 News's Avatar
#79 - PS3 News - 76w ago
Below are some PS3 3K3y installation pictures for those interested.

PS3 News's Avatar
#78 - PS3 News - 78w ago
I have now added the PS3 3K3y Keydumper v1.00 / v1.01 for PS3 3.55-4.31 CFW to the main article for those interested alongside a note from zecoxao as follows:

Download: [Register or Login to view links] / [Register or Login to view links] by jarmster (Note: Leave a USB stick installed when you run the app, it puts a 1kb file called 3dump.bin on the stick containing the decrypted drive keys)

3k3y Ripp3r v1.01 Setup and User Guide: Windows software for ripping/decrypting/reencrypting PS3 disks. The user manual is included in the archive.

Changelog [2013-02-01]:

  • Fixed a bug that affected encryption/decryption of very large files.

From zecoxao: I bet people didn't even touch the implementation of [Register or Login to view links] that naehrwert left us, and then these guys come, use flat_z's code to get the eid_root_key on hackables, and grab the necessary part of the code from libeeid to generate the eid4_key from it and decrypt the eid4. Bunch of freaking losers.

People, if you're that desperate to get the drive key (which is in eid4) just memdump eEID, get your eid_root_key with flatz's package and use my program which is adapted from naehrwert's code. you can even see for yourselves what's happening in the code. Don't forget to rename the eEID you get from your console's NOR/NAND to eid (without an extension) and place it on eid folder. same as key and iv (split them up with a hex editor).

You can then try that program and compare your decrypted eid4 with the pkg's dump, and realize it's the same crap.

Here we can see the keys used by the ripper (taken from: ps3devwiki.com/wiki/BD_Drive_Reverse_Engineering#Program and ps3devwiki.com/wiki/BD_Drive_Reverse_Engineering#Information_about_EID4):

The keys are in eid4, and yes, we DO need to decrypt it, or else Sony would be the biggest bunch of retards.. the eid4 key is used to verify the cmac hash of the first 0x20 bytes. Naehrwert's code seems to prove this:

omac1 basically spits out the digest of the secure communication channel keys. if you compare the digest with the last 16 bytes of eid4, it should match

Corrected some info. and apparently i was mistaken when i thought that 3Dump.bin contained the eid4 ENcrypted. it contains in fact eid4 DEcrypted. You still need to auth with the bd drive. that's the part Cobra/E3 figured out. we can do this normally with hacked consoles, but not with unhacked consoles.

So the ODE dumper package dumps the DEcrypted eid4, correct? now i understand. i was confused because i thought you said the eid4 ENcrypted was the same as 3Dump.bin.

From jarmster: The eid4 from running libeeid is a decrypted dump. The 3dump.bin is exactly the same. The eEID_Dumper.pkg dumps the encrypted eid4. And from the wiki: EID4 is of size 0x30 bytes: 0x0-0xf bytes = 1st key, 0x10-0x1f - 2nd key, 0x20-0x2f - CMAC-OMAC1 of EID4.

From haz367:

should be different.. correct..?

From zadow28 on the 3K3y PKG file: pastebin.com/79V2KdTK

I'm not into VS very much, maybe the devs can have an look. It's the visual source/assembly code for the x3key ps3 software for pc. got there keys and even shows there iso disc codes, plus a lot more. I'm not an visual expert, so maybe there are some visual experts here. shows how the x3key acts like an Bulk. etc

The iso for x3key are crypted, so they only play with there tool.. the source for encrypting the iso are in there too.

From Abkarino (via Zadow28) comes the 3K3y Ripper (PC Software) hacked source code recovered, as follows:

Download: [Register or Login to view links] (Password: Abkarino) / [Register or Login to view links] (Mirror: Password Removed)

This is a quick and dirty release for 3K3Y Ripper application including the full recovered source code. So you can build/modify your own version. All you will need is: .Net Framework Runtime v4.0

Message to 3K3Y Team: Do not steal glevand's work again Also do not forget to protect you applications using a good .Net protector like .Net Reactor to prevent me or any body else from recovering your codes. Hope that will help someone to do something useful in the future.

Regards.
Abkarino (Mohammed Hassan)

Finally, from 3Key: 3k3y IRD files 2013-03-15 is a collection of IRD (Iso Rebuild Data) files for 3k3y. Use them to convert PSJB game dumps to full PS3 ISO.

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News