CONFIRMED: LV0 keys have been leaked and working! ~NO PUP SIGNING~

[opoisso893]

@PatrickBatman :

app-pub-360 rev11 : 2f da 7a 56 aa ea 65 92 1c 02 84 ff 19 42 c6 de 13 73 70 09 3d 10 60 34 b5 91 91 95 1a 52 01 b4 22 d4 62 f8 72 6f 85 2d
app-ctype-360 rev11 : 26

app-pub-365 rev13 : b2 6f e6 d3 e3 a1 e7 66 fa e7 9a 8e 6a 7f 48 99 8e 7f c1 e4 b0 ad 87 45 ff 54 c0 18 c2 a6 cc 7a 0d d7 52 5f af ea 49 17
app-ctype-365 rev13 : 12

app-pub-365 rev14 : 04 27 5e 88 38 ef 95 bd 01 3b 22 3c 3d f6 74 54 09 32 f2 1b 53 4c 7e d2 94 4b 91 04 d9 38 fe b0 3b 82 4d db 86 6a b2 6e
app-ctype-365 rev14 : 27

app-pub-370 rev16 : 56 66 35 d3 e1 dc ec 47 24 3a ad 16 28 ae 6b 2c eb 33 46 3f c1 55 e4 63 58 46 ce 33 89 9c 5e 35 3d df a4 7f ef 56 94 af
app-ctype-370 rev16 : 30

app-pub-370 rev17 : 3b 7b 04 c7 1c ae 2b 11 99 d5 74 53 c0 38 bb 1b 54 1a 05 ad 1b 94 16 7b 0a b4 7a 9b 24 ca ec b9 00 0c b2 14 07 00 96 66
app-ctype-370 rev17 : 08

app-pub-400 rev19 : 14 8d ca 96 1e 27 38 ba f8 4b 2d 1b 6e 2d a2 ab d6 a9 5f 2c 95 71 e5 4c 69 22 f9 ed 96 74 f0 62 b7 f1 be 5b d6 fa 52 68
app-ctype-400 rev19 : 31

app-pub-400 rev1A : be 4b 1b 51 35 36 96 06 18 bf ef 12 a7 13 f6 67 38 81 b0 2f 9d c6 16 19 1e 82 3f c8 33 7c cf 99 ad aa 61 72 01 9c 0c 23
app-ctype-400 rev1A : 17

app-pub-420 rev1C : 36 c1 ac e6 dd 5c cc 00 06 fd f3 42 47 50 fa c5 15 fc 5c fa 2c 93 ec 53 c6 ec 2b c4 21 70 8d 15 4e 91 f2 e7 ea 54 a8 93
app-ctype-420 rev1C : 09

app-pub-420 rev1D : 43 03 22 88 75 03 cf 52 92 8f aa a4 10 fd 62 3c 73 21 28 1c 88 25 d9 5f 5b 47 ef 07 8e fc fc 44 45 4c 3a b4 f0 0b b8 79
app-ctype-420 rev1D : 1A

...

[PatrickBatman]

The next one but i have not the name :
pub=6f 8d f8 eb d0 a1 d1 db 08 b3 0d d3 a9 51 e3 f1 f2 7e 34 03 0b 42 c7 29 c5 55 55 23 2d 61 b8 34 b8 bd ff b0 7e 54 b3 43
ctype=21

pub=94 d1 b7 37 8b af f5 df ed 26 92 40 a7 a3 64 ed 68 44 67 41 62 2e 50 bc 60 79 b6 e6 06 a2 f8 e0 a4 c5 6e 5c ff 83 65 26
ctype=11

pub=8c a6 90 5f 46 14 8d 7d 8d 84 d2 af ce ae 61 b4 1e 67 50 fc 22 ea 43 5d fa 61 fc e6 f4 f8 60 ee 4f 54 d9 19 6c a5 29 0e
ctype=13

pub=1f 14 0e 8e f8 87 da b5 2f 07 9a 06 e6 91 5a 64 60 b7 5c d2 56 83 4a 43 fa 7a f9 0c 23 06 7a f4 12 ed af e2 c1 77 8d 69
ctype=14

pub=b6 bb 0a 84 c6 49 a9 0d 97 eb a5 5b 55 53 66 f5 23 81 bb 38 a8 4c 8b b7 1d a5 a5 a0 94 90 43 c6 db 24 90 29 a4 31 56 f7
ctype=15

pub=ab 28 4c a5 49 b2 de 9a a5 c9 03 b7 56 52 f7 8d 19 2f 8f 4a 8f 3c d9 92 09 41 5c 0a 84 c5 c9 fd 6b f3 09 5c 1c 18 ff cd
ctype=15

...

in order those are:
0.80-0.92 (rev 0x00)
0.92-2.36 (rev 0x01)
2.36 (rev 0x02)
3.40-3.42 (rev 0x04)
3.40-3.42 (rev 0x05)
3.50 (rev 0x07)

[Bootlegninja]

Well luckily enough you had 3.50 to begin with, so can't you find someone with the right tools and knowledge to downgrade for you? Even at a price, it has to be better than now.. which is.. well.. nothing.

I really don't like shipping the system out unless it's busted and I have no other choice to get it running again. That's why I'm really hoping for a 4.21 ofw cex payload or something to throw it into and out of factory service mode on 4.21.

Edit -

@Bootlegninja,you should take a look on E3 flasher


unless you have some friend or something

Unemployed right now. All money to bills and no toys.

[opoisso893]

Got these out of appldr430.elf (might be named with wrong firmware but there 3.65-4.20 app-pub keys)

9D 8D B5 A8 80 60 8D C6 97 17 99 1A FC 3A D5 C0 21 5A 5E E4 13 32 8C 2A BC 8F 35 58 9E 04 43 23 73 DB 2E 23 39 EE F7 C8
curve 00 00 00 18 00 00 00 00  app-pub-365?

62 DF E4 88 E4 10 B1 B6 B2 F5 59 E4 CB 93 2B CB 78 84 5A B6 23 CC 59 FD F6 51 68 40 0F D7 6F A8 2E D1 DC 60 E0 91 D1 D1
curve 00 00 00 25 00 00 00 00   app-pub-370?

63 7E AD 34 E7 B8 5C 72 3C 62 7E 68 AB DD 04 19 91 4E BE D4 00 83 11 73 1D D8 7F DD A2 DA F7 1F 85 6A 70 E1 4D A1 7B 42
curve 00 00 00 24 00 00 00 00   app-pub-400?

50 31 72 C9 55 13 08 A8 76 21 EC EE 90 36 2D 14 88 9B FE D2 CF 32 B0 B3 E3 2A 4F 9F E5 27 A4 14 64 B7 35 E1 AD BC 67 62
curve 00 00 00 30 00 00 00 00   app-pub-420?

It's not the APP key but the NPDRM key.

[pounou]

Look what i found guys please.
Recently i found this on ps3devwiki : http://www.multiupload.nl/HN2075U4B7
That contain lv0-and encapsulated loaders cex 4.30 with inside appldr.elf + isoldr.elf + lv0-430.elf + lv2ldr.elf

I take the kakaroto 4.21 LV2 Patcher and click on " Open lv2.elf " and select the lv2ldr.elf from ps3devwiki.

I can see one thing different, the size of the lv2ldr.elf is 98 ko before i patch with kakaroto script and after 425 ko !

So what happen ???? Please take a look if you have more knowelegde than me and sorry for my bad english.

[PatrickBatman]

It's not the APP key but the NPDRM key.

Cool, i couldnt verify what it was cause my SPU processor in IDA is being retarded.

typedef struct _appldr_key_container
{
/* start-end (length) */
u8 key[32]; /* 0x00-0x19 (0x20) */ (AES:ERK - 256bit Encryption Round Key) */
u8 iv[16]; /* 0x20-0x2f (0x10) */ (AES:RIV - 128bit Reset Initialization Vector) */
u8 pub[40]; /* 0x30-0x57 (0x28) */ (ECDSA: public - 320bit) */
u32 ctype; /* 0x58-0x5b (0x04) */ (ECDSA:curvetype - 32bit formatted 8bit value) */
u32 null; /* 0x5c-0x5f (0x04) */ (always zero - 32bit formatted) */
/* 0x00-0x5f (0x60) */ (total per revision/type entry - 768bit) */
} appldrKeyContainer;

[vittorio]

please release the public key 4.30

[GAGAU]

So, unfortunately no CFW for people with 3.55+ like usual...

I'm considering buying E3 Flasher from OZ3DS.com I've asked a friend if he could borrow me his International Credit Card and he said yes, I don't know if it's the original E3Flasher on this website, also, I can't solder anything since I don't have experience with it, I have PS3 Slim, the first one, the one that can be downgraded to 2.xx and I really, really want to go back to CFW cause as I've said before, I regreted a lot for upgrading...

Is it purely Solderless or it WILL eventually need some soldering?

Also I only need the E3 Flasher, the clip and the board, and a Micro SD right? nothing more, no dongle, anything, right?

I'm sorry for asking this in this thread, however it's the last question I swear.

Thanks in advance.

[Digital-Spooker]

I really don't like shipping the system out unless it's busted and I have no other choice to get it running again. That's why I'm really hoping for a 4.21 ofw cex payload or something to throw it into and out of factory service mode on 4.21.

Edit -

Unemployed right now. All money to bills and no toys.

In the same situation (damn US immigration takes forever to send a work visa out..), but I'll see about scraping together some money (slowly, or if I can get my work visa soon, putting some dosh aside) and I'll order one for you to use so you can at least get the console on it's modders feet, though, I wont have an ETA for when (or if) that would even be possible.

[cerebr_al]

Most of this is covered on the front page but anyway, here's a brief article from thehackernews.com for those interested in a little more light reading on this subject: http://thehackernews.com/2012/10/son...-custom.html#_