Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- As mentioned in 32c3, these can be calculated by dumping the normalkey on wii u (or miitomo), and the keyY from NATIVE_FIRM.
- Keyslot 0x31 is used to encrypt and decrypt Mii QR codes.
- Slot 0x31 normalkey, found by xoring the Wii U XOR key (from OTP) with static data in IOSU (at 0x1CB24 in 5.5.0):
- 59FC817E6446EA6190347B20E9BDCE52
- Slot 0x31/(0x39 DLP) keyY, found in NATIVE_FIRM:
- 7462553F9E5A7904B8647CCA736DA1F5
- Slot 0x30-0x33 keyX, set by bootrom, calculated using normalkey + keyY:
- C66E23128F289133F04CDB877A3749F2
- Slot 0x39 DLP normalkey, found by xoring the Wii U XOR key (from OTP) with static data in IOSU (at 0x1CB14 in 5.5.0):
- 89A7DE3B56E060637BD7458C3A6CF9AC
- Slot 0x2D normalkey, found by xoring the Wii U XOR key (from OTP) with static data in IOSU (at 0x1CB04 in 5.5.0):
- 3ED6F5CF2CC37C54655000B7C8B52E0D
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement