Psvita Dual-FW Boot (POC){news}

[aliak18]

Have you tried to write the old nand back to the Vita?

Advertising

[NNNRT]

Amazing work you're doing there katsu! There's progress every week. Hope this would help other devs in accessing the kernels. But we need to get them interested in the Vita first.

Advertising

[PS3Y2kvirus]

http://youtu.be/05bG3nMimrU ps vita youtube link of katsu's vid for those who are on ps vita.

Um When did FW 2.05 dump happen?

[jotax]

with this inspection, it is possible to find "the sound of PSX"?

[S1NFUL]

with this inspection, it is possible to find "the sound of PSX"?

If you're referring to sound output on PS1 games played through eCFW, then the short answer is no...

[DaniPhii]

Nice. That means there's no updating of encryption keys in each fw update. This will be useful whenever a kernel exploit is found (so you can update use psn back up and downgrade).

I hope Sony doesn't update them by now and later, that will give all kernel exploits seekers more time until that moment.
I wish I could buy a PSVita already, but I'm still enjoying my PSP.

[XeLasar]

Im new to reverse enginiering, i think i understood the descryption and encryption Things. But I dont know, is there any way to descrypt the dumpet Firmware. Maybe a brut-force attack? Thats what Wikipedia mentioned C:

[krysodlak]

I've read somewhere that the brute force attack could take around billion years due to the 256bit AES encryption. So I reckon a brute force attack isn't a viable option

[noname120]

Im new to reverse enginiering, i think i understood the descryption and encryption Things. But I dont know, is there any way to descrypt the dumpet Firmware. Maybe a brut-force attack? Thats what Wikipedia mentioned C:

D:

I've read somewhere that the brute force attack could take around billion years due to the 256bit AES encryption. So I reckon a brute force attack isn't a viable option

D:

The modules are encrypted using a key that is different for each firmware. Once we know the decryption key for a firmware, we can decrypt all the modules.
We don't need a bruteforce attack whatsoever.

Signing modules is entirely different because we need a private key, and this one would need a virtually infinite time to factorize (as long as we don't have quantum computers).

[XeLasar]

How are we getting the descryption key? Am I right, when i could get the nand data of the vita and put it into Ida, do i get some readable arm assembly or just rubbish?
Wow, someone replied Thanks fo tha'