PS4 EMX. New PS4 emulator is a reality (or scam)

[Deleted member 11852]

er...... you use ciphers which are not resistant to known plaintext attacks? It is not a good idea...

And AES, which is likely what is being used, is not susceptible to KPA attacks. But once you have the reference data (unencrypted from one PS4), you can hugely scale attacking the main algorithm. This is why you don't, ever, use a unique device key approach to encrypt easily accessible identical information. This is infsec 101.

Maybe you should be more focused when reading articles. They format the HDD and reinstall everything. If it werent encrypted uniquely, why would you need to do it?

Perhaps you should be more focussed when reading the articles because you clearly still do not understand how the exploit works. You said it was using a "per device" key which it is clearly not because any encryption algorithm engineered to use a unique device key would only ever work on the original PS4 because the key isn't transferrable. Taking the Brazil approach, if you cloned the NAND and HDD and put them in another PS4, it would just appear to be corrupt data.

That would be the point.

 

[Shifty Geezer]

Unless the key is in the NAND?

 

[Deleted member 11852]

Unless the key is in the NAND?

Then it's not a unique device key, it's just a soft key stored in NAND Unique device keys should be unique and unalterable like an Intel processor ID.

 

[Shifty Geezer]

Okay. But is it possible that there's a unique key per NAND that the HDD is encrypted with, in a classic security cock-up? Thus copying the NAND allows access to the HDD where a different system NAND won't?

 

[Deleted member 11852]

Okay. But is it possible that there's a unique key per NAND that the HDD is encrypted with, in a classic security cock-up?

Is it possible? Yes. Is it even remotely likely? No.

If you're going to the expense of using a unique hardware key, which is there only for the purpose of of securing the system, why would you copy it to NAND at all? Sure, copy it to RAM for use but NAND? If the unique key is embedded in the CPU then copy it nowhere because the key in RAM will be slower to access than the single clock cycle it takes to pull the key from the CPU itself.

 

[pMax]

But once you have the reference data (unencrypted from one PS4), you can hugely scale attacking the main algorithm. This is why you don't, ever, use a unique device key approach to encrypt easily accessible identical information. This is infsec 101.

I'll be glad to hear how you can scale it up - really. I could make a fortune by it, if you make it practical.

Perhaps you should be more focussed when reading the articles because you clearly still do not understand how the exploit works.

I clearly, perfectly understand it.

You said it was using a "per device" key which it is clearly not because any encryption algorithm engineered to use a unique device key would only ever work on the original PS4 because the key isn't transferrable.
Taking the Brazil approach, if you cloned the NAND and HDD and put them in another PS4, it would just appear to be corrupt data.

...ah yes - oh wait, why do they need to format, re-download and install games?

 

[Deleted member 11852]

I'll be glad to hear how you can scale it up - really. I could make a fortune by it, if you make it practical.

I am not schooling you in techniques for compromising encryption. This would contrary to jobs I've held in the past and why I did not respond to your PM asking me to share details about an Intel bus exploit.

I clearly, perfectly understand it.

Really?

...ah yes - oh wait, why do they need to format, re-download and install games?

Nope. As much as I like explain things if you've read the thread here and on GAF and still can't deduce how PS4's security works from it's basic account setup, then you need a detail of explanation that I do not have time to write. Sorry.

 

[pMax]

I am not schooling you in techniques for compromising encryption.

Afaik you can only make the equations for the initial and final round(s), but the central ones are impossible. It has been theorized by some crazy guy, however, that you MAY be able to do it for a subset of keys with some unknown properties. Yet I hardly believe that.

This would contrary to jobs I've held in the past and why I did not respond to your PM asking me to share details about an Intel bus exploit.

Well, at least you had a very good reason to not tell it - I was wondering why, actually.

Nope. As much as I like explain things if you've read the thread here and on GAF

GAF just quotes wololo which quotes the portugese one. The article explicitly says they format your HDD.