Search found 3 matches

by FriedChicken
Sat Nov 14, 2009 10:31 pm
Forum: PSP Development
Topic: Reproducing brokencode's hack
Replies: 9
Views: 5609

Actually it is not the case that the decryption process has been changed, we can still decrypt the IPL. I think even using the older PSPs (like decrypting PSP 3000 IPL in Phat PSP). Only issue here is IPL block signatures. From what I gather these are HMACs of somesort. I deny the possibility of com...
by FriedChicken
Wed Oct 21, 2009 6:45 am
Forum: PSP Development
Topic: Reproducing brokencode's hack
Replies: 9
Views: 5609

Sorry, I think this topic requires a bit of explaination on my part. First I will like to invite folks to look at DA's explaination on why TA88v3 cannt be hacked by a pandora. Here is the link http://pspslimhacks.com/dark_alex-explains-why-ta88v3-cannot-be-hacked/ Notice that he talks about "2 ...
by FriedChicken
Sat Oct 17, 2009 8:58 pm
Forum: PSP Development
Topic: Reproducing brokencode's hack
Replies: 9
Views: 5609

Reproducing brokencode's hack

Did anyone ever tried reproducing brokencode's hack? Here are my observation.. Starting in the first 4 KB block of Nand flash (OFW 4.05)... 16 byte data at 0x0FE0 is a IV (initialization vector). This is used with SHA1 to produce a Hash whose first eight byte form the first part of the signature (16...