I didn't read all of this but you need to understand that the games are encrypted and must have a signature from Sony to work.

up as they said. what u said was the easy part the hard part is encrypting it

I believe the encryption algorithm has been already found but as every encryption system, it has a key to encrypt and probably it was not found yet.
Once found, someone who is into the ps3 scene can code a decrypt function which uses the same encryption algorithm and the same encryption key.

But not it is not easy. Sony has probably created a very sophisticated encryption system with a very long key (or probably more than one key)

After all was said and done, the claims by the crack teams where BS(This isn't a packed PE file, they couldn't handle it,) and the obscurity through proprietary chips and insane use of hashing where too much for low budget crackers.

To tell you the truth the type of people it'll take to crack the PS3 security from all angles will probably never even take interest. The hashing on the binaries will require a lot of cryptanalysis, which would most likely end up having to use a special tool to look at the chip dies on a function level like was done with passive RFID crypto- that requires great commercial insight to computer engineering. Frequency and side channel attacks probably won't work on this algorithm.

I still look around the memory map, but I admit I can't crack the hashing Sony used on it's ELF(?) files. My major hold back is the fact the units cost at least $300 US a piece, and I only make $40k US a year- I know it'll be a waste to invest in because the crypto.

The biggest thing worth noting on PS3 hacking or cracking is that memory corruption means nothing on top of this hypervisor. So all those buffer overflow ideas and claims where counter productive. I said this from the beginning, but the RSX researchers verified it many times.

Also the only extra info obtained since this all started is that the crypto functions are actually in the Cell chip die. This is what killed it for a lot of people. Also Sony is very unlikely to ever open the GPU. Someone needs to do a software 3D algorithm kernel setup for an SPE or whatever. Without OpenGL Linux on a PS3 is boring(demoscene needed.)

Last edited by 0m1kr0n (2008-07-03 05:39:44)

xXKILLERXx12 wrote:

Can you say that again but in English. I understand most of it but some parts on unclear not that you dint type it well is just the terms used.

Basically what I said is it's going to take a lot of crypto work to get over just the apparent levels of security on the PS3.

The passive RFID systems used in car keys that where cracked where done so by professional highly funded researchers. They had great insight into how silicon chips where manufactured and engineered. They analyzed the actual functions of the chip with a special magnification tool.

Here the same is going to half to be done unless someones a mathematician and has some server farms. Even then you're not likely to crack the implemented crypto algorithm by conventional methods.


After the crypto only then can people get back to trying to tamper with the FLASH and gameOS, because it's all based on hashes and check sums. If the chip circuitry doesn't have hardwired hashing then a binary in gameOS does, and that will be encrypted by the chip hardware functions.

If you let a seasoned electronics engineer look through the scope at a silicon die he wouldn't know what does what. That should put things in some perspective, and that's what needs to be done.



http://www-128.ibm.com/developerworks/l … a-ps3lab1/

Last edited by 0m1kr0n (2008-07-03 22:41:44)

LOL this is exactly like the last thread like this. Guys please dont waste your time writing all this out.

ok.

Mr.TurnSignal wrote:

"Well why doesnt someone just make a program to hack the encryption?"
"Why dont we just download the games from our computer to ps3 to trick it into thinking its PSN game"
"My console frooze so i think i found an exploit"

Actually, TurnSignal, the last line isn't a question

BTW thw Blu ray encryption has been bypassed btw...the same man who got passed HDdvd got passed bluray in two weeks of each other...

All encryption supposedly takes a long time to crack with status quo hardware, but it's usually the key exchange or some non-cipher factors that breaks it.

Also the people at ps2dev are looking at the PS3 security as PowerPC mode levels like the PPC Mac systems had. They're basically focused on the modes in the PPE. Until you see people with a lot of time focus on "root key" and the secure boot mechanism, this is as good as it gets. I have nether the time nor resources to mess with PS3 stuff currently.

Most RSX researchers have went to SPE->GPU projects. The "root key" and secure boot details are still in obscurity. The secure boot IS the PS3 security.

Last edited by 0m1kr0n (2008-07-23 12:08:16)

there are a lot of people working on hacking it but they will not share finds with each other (the whole wanting to be the first to crack it BS) and it slows down the possible progress.

it is a little bit refreshing to hear about ppl still having a "crack" at it XD (pun intended)