Homebrew 3DS/Wii U titlekey generation algorithm leaked

[Aletron9000]

This is a new level of stupidity for nintendo. "mypass" and "nintendo"? whether you add protection for leaks or not, you should choose better passwords.

 

[V10lator]

This is a new level of stupidity for nintendo. "mypass" and "nintendo"? whether you add protection for leaks or not, you should choose better passwords.

A new password has been leaked: "test".

I made a wrong assumption based on a few system titles.

Try said system titles again with "test". Some pirate told me that's the password for old system titles on Wii U, so maybe it will work for 3DS, too?

//EDIT: BTW: Is "nintendo" the password for the 3DS? Cause so far everything for the Wii U seems to be encrypted with "mypass"...

 

[Brawl345]

Try said system titles again with "test".

Sadly not, I tried the DS Cart whitelist where the encrypted title key has to start with e0bf84e050

BTW: Is "nintendo" the password for the 3DS

I don't know, I tried a preinstall ticket and none of the passwords work, hmm

 

[V10lator]

Sadly not, I tried the DS Cart whitelist where the encrypted title key has to start with e0bf84e050

DS != 3DS. AFAIK the algo is for 3DS only.

I don't know, I tried a preinstall ticket and none of the passwords work, hmm

Just a shoot into the blue but aren't preinstalled titles encrypted in a different way (IIRC some kind of global key instead of console specific / the so called "legit keys" that work on all consoles without CFW) ? [EDIT]If so you might want to try with eShop or disc titles instead.[/EDIT]

//EDIT: Also note that on the Wii U you have to encrypt the title key the PHP script gives you with AES128, common key as key, title ID padded with zeros as IV... Maybe you have to do some similiar action to get the real key for 3DS, too?

 

[Myria]

To find privatekey Nintendo you need find two multiplier (P*Q) to number

Which key is that? It's not one I recognize.

 

[Captain_N]

what we need is their master encryption keys. then we can sign anything and it will run with out system modification. which means i could make a wii u game and sign it and the wii you will run it. no need for sig patches.

 

[Brawl345]

Just a shoot into the blue but aren't preinstalled titles encrypted in a different way

Tried other games, same thing... :/

//EDIT: Also note that on the Wii U you have to encrypt the title key the PHP script gives you with AES128, common key as key, title ID padded with zeros as IV... Maybe you have to do some similiar action to get the real key for 3DS, too?

The script outputs the encrypted title key, not the decrypted.

 

[V10lator]

The script outputs the encrypted title key, not the decrypted.

Again: On the Wii U (I don't know about the 3DS) you have to encrypt the key the scripts outputs with AES. Trust me on this, I implemented this into a tool used by many people: https://github.com/V10lator/NUSspli/blob/master/src/keygen.c#L72 - You see the AES routines and getCommonKey() (which is a function reading the key directly from the Wii U, it's not hardcoded into my tool) ? The PHP script neither contains AES routines nor the common key, which would not be allowed to get linked here. Also the OP itself said:

The script doesn't contain any Nintendo specific keys

 

[justinkb]

you use the slot 0 common key for 3ds. can confirm the algo is legit

 

[acrash]

Since now we can generate the title key, does this mean that any NUS downloader can now be a FreeShop?
(for Wii, DSi, Wii U, 3DS)

Anyone created a tool?

 

[lone_wolf323]

Since now we can generate the title key, does this mean that any NUS downloader can now be a FreeShop?
(for Wii, DSi, Wii U, 3DS)

Anyone created a tool?

Lmfao. No. Title keys mean nothing. You need legit tickets to download a title with. which is something only nintendo has. So no. Will never happen.

 

[acrash]

Lmfao. No. Title keys mean nothing. You need legit tickets to download a title with. which is something only nintendo has. So no. Will never happen.

Thanks for the quick replay lone_wolf323

But doesn't this do it for Wii: https://github.com/WiiDatabase/PyNUSD

 

[alexmerscov]

It's actually useless, the perl script that can generate the RSA key on the leaked is more important than this. Please post it and make it public this one is already publicly available so it's not bad to post those to. It can be use for homebrews that works on unmodified consoles.

platinum.7z -> twl.7z -> twlipl

 

[ber71]

It's actually useless, the perl script that can generate the RSA key on the leaked is more important than this. Please post it and make it public this one is already publicly available so it's not bad to post those to. It can be use for homebrews that works on unmodified consoles.

platinum.7z -> twl.7z -> twlipl

Not really needed for 3DS as luma is a permanent cfw.
Signed homebrew would be very useful for wii U. Furthermore, signed coldboot cfw.

 

[asper]

Does anyone know if there is a modified version of NUS Downloader implementing the algo to generate correct keys for wiiwares ?

 

[asper]

Lmfao. No. Title keys mean nothing. You need legit tickets to download a title with. which is something only nintendo has. So no. Will never happen.

Well this is in part true; with the algo you can generate the titlekey and with this key you can install and run the title in a softmodded console without having someone to share that "titlekey" (no need of the "titlekey site" or "titlekey list" anymore); what is missing is the Nintendo private key for signature: with that key you will be able to sign anything and install it even if the console is not sofmodded because it will be the same as an original Nintendo signed application. So yes, a freeshop can be don (WiiU has one for example) but you still need to run signature patches (a custom firmware/softmod) to install and/or run them. I just miss if this is also possible for Wiiwares but probably it is, just no one made an update to the old NUS Downlaoder app.