Hacker claims PS Vita PKG archives extracted and decrypted

Discussion in 'PS Vita Homebrew' started by x3sphere, Nov 26, 2011.

  1. x3sphere

    x3sphere Administrator Staff Member

    Joined:
    May 17, 2006
    Messages:
    14,696
    Likes Received:
    129
    Last played:
    Sunset Overdrive on Xbox One
    SKFU now claims he has managed to extract and decrypt PKG game archives for the Vita. Apparently, Sony reused the PSP's AES key for securing the files *facepalm*.

    There's no way to verify this right now so I'd file it under rumor, but it wouldn't be the first time Sony made a colossal slip-up.

    Source: http://streetskaterfu.blogspot.com/2011/11/ps-vita-pkg-xtractor-100.html
     
  2. Abe Froeman

    Abe Froeman Gamer Dad Staff Member

    Joined:
    Mar 31, 2009
    Messages:
    5,396
    Likes Received:
    25
    Last played:
    Destiny on Xbox One
    Why would this dude go public with all of these findings?
     
  3. Moose

    Moose Meta Moose

    Joined:
    Apr 21, 2010
    Messages:
    2,002
    Likes Received:
    4
    Last played:
    Grand Theft Auto V on Xbox One
    Surely they will have wasted their time if Sony decides that they are going to change the key/encryption prior to release? Or will it be too late?
     
  4. hush404

    hush404 Member

    Joined:
    Apr 23, 2011
    Messages:
    363
    Likes Received:
    4
    Last played:
    Sonic & All-Stars Racing Transformed™ on PS3
    I can see sony totally changing security for the device once it ships.
     
  5. x3sphere

    x3sphere Administrator Staff Member

    Joined:
    May 17, 2006
    Messages:
    14,696
    Likes Received:
    129
    Last played:
    Sunset Overdrive on Xbox One
    Yup, Sony can easily add new keys.
     
  6. vane

    vane New Member

    Joined:
    Dec 15, 2009
    Messages:
    4
    Likes Received:
    0
    Dude's an idiot if you ask me leaking all this info prior to a release. Keeping it till after the vita is released at least gives us the chance to stay on the release firmware if sony were to push out an update to patch this.
     
  7. TwistedFate

    TwistedFate New Member

    Joined:
    Nov 26, 2011
    Messages:
    1
    Likes Received:
    0
    'especially after the recent PS3 security blunder.'
    What does that have to do with anything? The network was hacked, that has nothing to do with custom firmware for the PS3.
    I wish these people would just fuck off already, it'll only lead to Sony releasing firmware after firmware update to stop it.
     
  8. cboushell

    cboushell New Member

    Joined:
    Nov 14, 2009
    Messages:
    5
    Likes Received:
    1
    TwistedFate says:
    'especially after the recent PS3 security blunder.'
    What does that have to do with anything? The network was hacked, that has nothing to do with custom firmware for the PS3.
    I wish these people would just fuck off already, it'll only lead to Sony releasing firmware after firmware update to stop it.
    cboushell says:
    Are you really that dense? Do you not recall the the huge blunder that was the PS3s system security that was blown apart by fail0verflow? That is what they are referring to I woul think since the article is about a consoles system security. wow! Let Sony release FW update after FW update, the cat and mouse game has already begun and I LOVE IT!!!
     
  9. Spiros

    Spiros Maiki

    Joined:
    Mar 24, 2010
    Messages:
    481
    Likes Received:
    1
    It seems like this guy didn't say that Sony is using the same keys, he's only assuming that Sony might use the PSP's key.

    This guy definitely just wants to be in the news, I mean what's the point of releasing this and then a couple days later releasing another version that adds an info tab. Who knows, maybe I'm wrong but I think it's ridiculous to assume that Sony would reuse the PSP's key for pkg encryption.
     
  10. x3sphere

    x3sphere Administrator Staff Member

    Joined:
    May 17, 2006
    Messages:
    14,696
    Likes Received:
    129
    Last played:
    Sunset Overdrive on Xbox One
    Nah that's definitely what he's saying, though it's worded a bit weird. The app checks for a keyfile with the PSP's AES keys for decryption.

    Anyway... one thing to consider is that he's probably messing with dev/non-retail PKGs, unless he found a way to dump the memory cards used for retail games (I assume they have some sort of protection.) Still careless of Sony to use compromised keys for anything though. I would be shocked if this isn't fixed up for release.
     
  11. Ozito

    Ozito New Member

    Joined:
    Aug 22, 2008
    Messages:
    5
    Likes Received:
    0
    Well this is cool and all i really like when the consoles get cracked but this time i'm going to buy all the games on the vita, just like i did with the ps3.
    I was pirating games until 3 years back when i noticed i barely took my time to play them through.
    It's more fun with doing the whole buying ritual and the to have it neatly placed among the other bought games.
     
  12. Moose

    Moose Meta Moose

    Joined:
    Apr 21, 2010
    Messages:
    2,002
    Likes Received:
    4
    Last played:
    Grand Theft Auto V on Xbox One
    I agree that there is something rather spectacular with buying the physical copy of a game and having it on your shelf.
     
  13. LocutusEstBorg

    LocutusEstBorg Contributor

    Joined:
    Sep 9, 2008
    Messages:
    1,877
    Likes Received:
    14
    Isn't SKFU a fraud/noob?
     
  14. sonnyz

    sonnyz Rated Aaargh

    Joined:
    May 7, 2009
    Messages:
    29
    Likes Received:
    0
    Last played:
    Terraria on Steam
    @Kurian..Of Borg Yes, yes he is. I don't know why his "press releases" continue to get picked up by gaming news sites.
     
  15. x3sphere

    x3sphere Administrator Staff Member

    Joined:
    May 17, 2006
    Messages:
    14,696
    Likes Received:
    129
    Last played:
    Sunset Overdrive on Xbox One
    I'm not really sure what his track record is like. He's published info on PSN before that I saw nowhere else so I don't consider him a fraud.

    I recall he posted links to some PSN access logs awhile back, not long after the hack... which Sony disabled only after SKFU published them.

    He seems to be more of a research guy than dev though. Anyone with a bit of programming know-how could hack together these apps considering the AES key was already known and extracting files from an unknown container format isn't that difficult... more tedious than anything. Just a matter of having access to the files, which he seems to have.
     

Share This Page