36w ago - Following up on the
previous update, today the PS3
3K3y Team have made available a video, the official features and release date of 12-12-12 for those interested below.
To quote: PS3 3K3y Features:
- Play your PS3, PS2 and PSX games from any USB media!
- No custom firmware required for operation* - you can update to the latest official firmware for PSN access
- Integrated game ripper
- User friendly intuitive interface
- No soldering required
- Multi-language support
- Compatible with both Fat and Slim models
- Supports most file systems, including NTFS, EXT2/3/4, and Mac OS X Extended
- High speed USB2 interface
- Powerful embedded Linux system running from Micro SD card (included)
- Linux firmware fully updatable from USB media
- FPGA fully updatable from USB media via built-in, in-system JTAG programming
- Recovery mode - it is always possible to recover from a bad flash Update your PS3 as normal, no CFW or game patching required
- Pass-through mode. (Use your PS3 in "normal mode")
* Currently firmware 3.55 is required for exctracting the drive key. Once the key has been extracted the PS3 can be updated to any official or custom firmware. We are working on hardware methods for extracting keys from PS3's already on 4.x firmware.
PS3 3K3y How It Works:
3k3y is an optical disk drive emulator for the PlayStation 3 video game console. It is installed between the genuine Blu-ray drive and the PS3 motherboard.
Once 3k3y is successfully installed and configured it can be used to make backups of your original PS3 game disks to USB media, and play those backups from USB media without the need of the original game disk.
Several games can be backed up to a single USB media, making it ideal as a 'jukebox' for hardcore gamers as well as for families with children too young to handle bluray discs with appropriate care.
3k3y works with most PS3 models, however there are a few exceptions, most notably the new super slim model and all PS3s which comes with firmware 4.xx (after retrieving the drive key the PS3 can be upgraded to any firmware). We are working to add support for these PS3's but you are adviced to consult with your reseller if you are in doubt whether your PS3 is compatible with 3k3y or not.
Finally,
3K3Y has
detailed pricing at a costly USD $129 for those who can't wait for free PlayStation 3 scene solutions, new PS3 key leaks, CEX and DEX fixes, etc.
Shortly following, a bit more information about 3K3y and 3Dump (via consolecrunch.com/more-information-about-3k3y-3dump-coming-soon/) surfaced, to quote:
Following up on the previous update, today the 3K3y Team shows us a picture of their future release application called 3Dump that allows you to dump the key that is needed to use the 3K3y.
Gday John.glad to have you here mate.Thanks for your service.If you need any help what so ever,please ask and we will do our best to help you mat...
...
Of course I'd hold off until the suckers blow their cash on it, then history will repeat itself once again with a free PS3 scene solution surfacing just like was done to the TB fixes, etc.
Their claim is that it can't be done without hardware (just like was stated and later debunked about the dongle), so why not release all the related diagrams, pin-outs/schematics, and a DIY parts list to an open source alternative for free if this is the case? They want to cash in once again is the most likely answer, however, as always good things come to those who wait.
Download: http://www.mirrorcreator.com/files/2DGE45CY/3k3y-keydumper-v1.rar_links / http://www.mediafire.com/?4l27o19ockqlg6l by jarmster (Note: Leave a USB stick installed when you run the app, it puts a 1kb file called 3dump.bin on the stick containing the decrypted drive keys. Run the app, triple beep + red flashing led... power down with front button = no good but it dumps the key. To get your root_key you must go back to 3.55, funny fact... when using the 3k3y dumper on 3.55 it includes the eid_root_key.
3k3y Ripp3r v1.01 Setup and User Guide: Windows software for ripping/decrypting/reencrypting PS3 disks. The user manual is included in the archive.
Changelog [2013-02-01]:
• Fixed a bug that affected encryption/decryption of very large files.
From zecoxao: I bet people didn't even touch the implementation of libeeid that naehrwert left us, and then these guys come, use flat_z's code to get the eid_root_key on hackables, and grab the necessary part of the code from http://dl.dropbox.com/u/35197530/libeeid.7z to generate the eid4_key from it and decrypt the eid4. Bunch of freaking losers.
People, if you're that desperate to get the drive key (which is in eid4) just memdump eEID, get your eid_root_key with flatz's package and use my program which is adapted from naehrwert's code. you can even see for yourselves what's happening in the code. Don't forget to rename the eEID you get from your console's NOR/NAND to eid (without an extension) and place it on eid folder. same as key and iv (split them up with a hex editor).
You can then try that program and compare your decrypted eid4 with the pkg's dump, and realize it's the same crap.
Here we can see the keys used by the ripper (taken from: ps3devwiki.com/wiki/BD_Drive_Reverse_Engineering#Program and ps3devwiki.com/wiki/BD_Drive_Reverse_Engineering#Information_about_EID4):
private byte[] IV1 = new byte[] { 0x22, 0x26, 0x92, 0x8d, 0x44, 3, 0x2f, 0x43, 0x6a, 0xfd, 0x26, 0x7e, 0x74, 0x8b, 0x23, 0x93 };
private byte[] IV2 = new byte[] { 0xe8, 11, 0x3f, 12, 0xd6, 0x56, 0x6d, 0xd0 };
private byte[] IV3 = new byte[] { 0x3b, 0xd6, 0x24, 2, 11, 0xd3, 0xf8, 0x65, 0xe8, 11, 0x3f, 12, 0xd6, 0x56, 0x6d, 0xd0 };
private static byte[] Key1 = new byte[0x10];
private static byte[] Key2 = new byte[0x10];
private byte[] Key3 = new byte[] { 0x12, 0x6c, 0x6b, 0x59, 0x45, 0x37, 14, 0xee, 0xca, 0x68, 0x26, 0x2d, 2, 0xdd, 0x12, 210 };
private byte[] Key4 = new byte[] { 0xd9, 0xa2, 10, 0x79, 0x66, 0x6c, 0x27, 0xd1, 0x10, 50, 0xac, 0xcf, 13, 0x7f, 0xb5, 1 };
private byte[] Key5 = new byte[] { 0x19, 0x76, 0x6f, 0xbc, 0x77, 0xe4, 0xe7, 0x5c, 0xf4, 0x41, 0xe4, 0x8b, 0x94, 0x2c, 0x5b, 0xd9 };
private byte[] Key6 = new byte[] { 80, 0xcb, 0xa7, 240, 0xc2, 0xa7, 0xc0, 0xf6, 0xf3, 0x3a, 0x21, 0x43, 0x26, 0xac, 0x4e, 0xf3 };
private static byte[] Key7 = new byte[0x10];
private static byte[] Key8 = new byte[0x10];
void aes_omac1(u8* output, u8* input, int len, u8* aes_key_data, int aes_key_bits)
aes_omac1(digest, eid4, 0x20, indiv + INDIV_EID4_KEY_OFFSET, 0x100);
if(memcmp(digest, eid4 + 0x20, AES_OMAC1_DIGEST_SIZE) != 0)
printf("warning: eid4 hash check failed!\n");
Corrected some info. and apparently i was mistaken when i thought that 3Dump.bin contained the eid4 ENcrypted. it contains in fact eid4 DEcrypted. You still need to auth with the bd drive. that's the part Cobra/E3 figured out. we can do this normally with hacked consoles, but not with unhacked consoles.
So the ODE dumper package dumps the DEcrypted eid4, correct? now i understand. i was confused because i thought you said the eid4 ENcrypted was the same as 3Dump.bin.
3K3y Key Dumper
Here is the Key dumping Application to on a Ps3 with CFW. This will only work for Fat consoles. You must have a FAT32 USb stick in the first port on your PS3, it will generate a file called 3Dump.bin This is what goes on your micro sd card, or loaded into the Ripper application.
Please note you need Peek and Poke enabled in your CFW to run this app, this is usually enabled by default. Cobra CFW doesn't allow you to run this file so you will need to flash to something else if you are on this.
From jarmster: The eid4 from running libeeid is a decrypted dump. The 3dump.bin is exactly the same. The eEID_Dumper.pkg dumps the encrypted eid4. And from the wiki: EID4 is of size 0x30 bytes: 0x0-0xf bytes = 1st key, 0x10-0x1f - 2nd key, 0x20-0x2f - CMAC-OMAC1 of EID4.
From haz367:
eid4 offset 303A0 - 303CF full nordump
eid4 only:
first key = 0-f (key1?)
sec key = 20-2f omac hash(required just as cex2dex convert to calculate usin omac's)
now for 3dump.bin: (= encrypted eid4(0-2f)+eid_root_key(30-5f)
3dump.bin
offset 0-1f = match original full nordump = offset 303a0-303bf (encrypted eid4)
offset 20-2f = sec key = match full nordump-encrypted eid4 = omac hash key
offset 30-5f = root_key per console key (also required to calculate+omac hash... real bdkey?
then we have zecoxao's program, it gives an erro on eid3 of missing stuff but it dumps also an "eid4d.bin"
offset 0-1f = decrypted eid4?! >>omac hash is match original nordump/encrypted eid4/3Dump.bin
From zadow28 on the 3K3y PKG file: pastebin.com/79V2KdTK
I'm not into VS very much, maybe the devs can have an look. It's the visual source/assembly code for the x3key ps3 software for pc. got there keys and even shows there iso disc codes, plus a lot more. I'm not an visual expert, so maybe there are some visual experts here. shows how the x3key acts like an Bulk. etc
The iso for x3key are crypted, so they only play with there tool.. the source for encrypting the iso are in there too.
From Abkarino (via Zadow28) comes the 3K3y Ripper (PC Software) hacked source code recovered, as follows:
You could build your own hardware interface to connect PS3 BD-ROM Drive to your PC to rip your games. The 3K3y special hardware is in only a cheap PATA To USB converter board with some modifications, and you can do it yourself. Also you could directly connect your PS3 Drive to your PC by soldering it to PATA bus a.k.a IDE cable and modify the power socket only. You can use the old leaked BD-ROM drive service manual for pinout (ps3devwiki.com/wiki/ODE).
Download: http://db.tt/0IfzsiN4 (Password: Abkarino) / http://www.mirrorcreator.com/files/1ISNZZ5A/3K3Y_Ripper_Hacked.rar_links (Mirror: Password Removed)
This is a quick and dirty release for 3K3Y Ripper application including the full recovered source code. So you can build/modify your own version. All you will need is: .Net Framework Runtime v4.0
Message to 3K3Y Team: Do not stole glevand's work again
Regards.
Abkarino (Mohammed Hassan)
To quote: Click the above-picture (HERE) to see a close-up view of the actual 3k3y BETA PCBoard, (the case on the PHAT PS3 used for demo, does not need to be cut-away, that was done on purpose for the video shown below), and the small black box to left is the usb hdd port, power and 3k3y LCD screen interface to select the PS3 ISO on your external USB HDD similar in style to their famous original X360key ODD emulator.
Now sit back and enjoy the video (download it http://www.mediafire.com/?rf4jxu1yizves1a) made by our Anonymous 3k3y Beta Tester (BTW, Many Thanks Whomever You Are!), as you nurse your video gaming body back into action from all those Happy New Year parties last night!
Below are a few more 3K3y videos / mirrors for those interested as well, from their page:
2013-01-03: 2 new 3k3y videos
As we are very close to shipping we decided to release 2 more product videos. We aim to have one of these great devices in your PS3 by the end of the month!
3k3y is the state of the art of PS3 drive emulation from the defacto leaders in drive emulation.
Feature List
• Play all PS3 games
• Play all PS2/PS1 games*+
• Plug n play installation
• Compatible with all currently available OFW/CFW versions
• Original 3k3y app for extracting drive key**
• User friendly OSD interface for managing your 3k3y
• Optional remote (compatible with Xk3y remote)
• Powerful embedded Linux platform
• Supports most popular file systems such as EXT2.3.4, Mac OS X and NTFS
• Emulation and transparent passthrough modes
• Both CPU and FPGA are fully in-system updatable
• Sleek and beautiful Wifi interface***
• Movie ISO playback+
• Not manufactured in China****
* Requires compatible PS3.
** Currently fw =< 3.55 is required for extracting the drive key. After this the FW can be upgraded freely. This holds true for all ODEs, see below for more details
*** Requires Wifi dongle sold separately
**** That's why we can deliver despite CNY + This feature will be added in an upcoming firmware
Pricing
Quantity 3k3y+Ripper 3k3y only Ripper Only Wifi dongle Remote
• 1k and up USD63 USD52 USD13 USD10 USD20
• 500pcs USD67 USD55 USD15 USD10 USD22
• 250pcs USD70 USD60 USD15 USD12 USD25
• 100pcs USD75 USD65 USD16 USD14 USD27
Retail Price: US $129.00 (
• PS3 3K3y (3Key) stock available now
• 3K3y Fat Model version release on 2013-02-08 . Slim version will release soon
• 3K3y PCB Kit
• 3K3y Remote (optional)
• 3K3y Ripper PCB (optional)
Products developed by our team members, such as Xk3y, Wode, and Wiikey Fusion have outsold products in direct competition by a factor. The same thing goes for many of our other products such as Qoob and Wiikey.
The question many people are asking about it compatibility with various firmwares and PS3 models. Let us state the facts here, which are true for 3k3y as well as any other PS3 ODE:
Key extraction
Currently a firmware