Page 2 of 4

Re: Calculating title update download links with HMAC key

Posted: Thu Sep 03, 2015 1:28 am
by Proxima
Just so you are aware, when the Vita downloads a PKG file, it is over HTTP, not HTTPS.

Re: Calculating title update download links with HMAC key

Posted: Thu Sep 03, 2015 5:09 am
by MooMooMan
Proxima wrote:Just so you are aware, when the Vita downloads a PKG file, it is over HTTP, not HTTPS.
That isn't very smart, why would it be over HTTP?

I'm not calling you a liar, I'm calling Sony stupid.

Re: Calculating title update download links with HMAC key

Posted: Thu Sep 03, 2015 12:57 pm
by yifanlu
And why is Sony stupid? When has downloading large files over HTTPS even been a good idea? Do you even know what HTTPS is used for?

Re: Calculating title update download links with HMAC key

Posted: Thu Sep 03, 2015 12:59 pm
by reprep
This means it is possible to create URL links for any game/app update .pkg with Game ID, right? So we can download the missing update .pkg files of PSM etc.?

Re: Calculating title update download links with HMAC key

Posted: Thu Sep 03, 2015 1:02 pm
by EchoDev
MooMooMan wrote:
EchoDev wrote:If we could manipulate https data to the vita we prolly could feed it our own pkg files right? :lol: Change the pkg file to a different one from the Sony servers to see if it accepts it.

Does anyone know how the sha1sum is calculated in the xml file? It does not seem to be a standard sha1 calculation.
I am willing to bet my manhood that what you are proposing is very difficult at the moment, or down right impossible.

If it were that easy, all you would need to do is set up a router to search for a specific https connection, and reroute it to another site, or better yet, your own home server with the files you need.

The idea is nice though, I wonder if something will ever come of it. I guess all we need is the keys? I don't know, I only code in JavaScript. Lol
You can't just hijack the https connection. The Vita will refuse to use the connection if the certificates don't match.

Re: Calculating title update download links with HMAC key

Posted: Thu Sep 03, 2015 3:41 pm
by Hykem
reprep wrote:This means it is possible to create URL links for any game/app update .pkg with Game ID, right? So we can download the missing update .pkg files of PSM etc.?
Pretty much.

Another great contribution from Proxima. Thank you!

Re: Calculating title update download links with HMAC key

Posted: Sat Sep 05, 2015 6:25 pm
by SMOKE
Very nice Proxima, always nice to see the things you do :)

Unfortunately, I'm not getting the same result. I'm getting the following link for PCSA00007:

Code: Select all

https://gs-sec.ww.np.dl.playstation.net/pl/np/PCSA00007/c6a6524d5018c043074f3d543b8940be043ad1cd8721ab4a66ccadbd98af2d92/PCSA00007-ver.xml
This is the implementation of hmac_sha256 that I used:
https://gist.github.com/tsupo/112188/ac ... b58b6dff5e

Re: Calculating title update download links with HMAC key

Posted: Sat Sep 05, 2015 6:45 pm
by qwikrazor87
yup, got a different result too using openssl hmac.

Re: Calculating title update download links with HMAC key

Posted: Sat Sep 05, 2015 7:05 pm
by mr.gas
this one is working nice .. by frtomtomdu80
https://www.dropbox.com/s/nij7w3o29urgi ... e.exe?dl=0

Re: Calculating title update download links with HMAC key

Posted: Sun Sep 06, 2015 3:10 am
by Proxima
http://web.mit.edu/freebsd/head/contrib ... o/sha256.c

This is what I used for my implementation. Not sure why it would vary between implementations. Maybe differences in how the arguments processed.