Advertisement
SciresM

3DS Keyslot 0x31 Keys (Bonus: 0x30-0x33 KeyX/0x39+0x2D nkey)

Sep 6th, 2016
1,030
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.82 KB | None | 0 0
  1. As mentioned in 32c3, these can be calculated by dumping the normalkey on wii u (or miitomo), and the keyY from NATIVE_FIRM.
  2.  
  3. Keyslot 0x31 is used to encrypt and decrypt Mii QR codes.
  4.  
  5. Slot 0x31 normalkey, found by xoring the Wii U XOR key (from OTP) with static data in IOSU (at 0x1CB24 in 5.5.0):
  6. 59FC817E6446EA6190347B20E9BDCE52
  7.  
  8. Slot 0x31/(0x39 DLP) keyY, found in NATIVE_FIRM:
  9. 7462553F9E5A7904B8647CCA736DA1F5
  10.  
  11. Slot 0x30-0x33 keyX, set by bootrom, calculated using normalkey + keyY:
  12. C66E23128F289133F04CDB877A3749F2
  13.  
  14. Slot 0x39 DLP normalkey, found by xoring the Wii U XOR key (from OTP) with static data in IOSU (at 0x1CB14 in 5.5.0):
  15. 89A7DE3B56E060637BD7458C3A6CF9AC
  16.  
  17. Slot 0x2D normalkey, found by xoring the Wii U XOR key (from OTP) with static data in IOSU (at 0x1CB04 in 5.5.0):
  18. 3ED6F5CF2CC37C54655000B7C8B52E0D
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement