Quick Jump Daily Digest
Thank you for your interest in the Quick Jump Daily Digest. Get notified of all new content on QJ in our free Daily Digest. To subscribe, enter your email address below and click the subscribe button.
Sony responds to GeoHotz PS3 exploit with a new patent? |
Listed in: PS3 Tags: geohotz, playstation 3 updates, Sony
Sony's not taking the GeoHotz PS3 exploit sitting down. A new patent has been filed by Sony, and it looks like it's their response to the exploit. Hold on tight, this is gonna be quite a ride.
To quote this patent, it is:
“A method, system, and computer-usable medium are disclosed for controlling unauthorized access to encrypted application program code. Predetermined program code is encrypted with a first key. The hash value of an application verification certificate associated with a second key is calculated by performing a one-way hash function. Binding operations are then performed with the first key and the calculated hash value to generate a third key, which is a binding key.
The binding key is encrypted with a fourth key to generate an encrypted binding key, which is then embedded in the application. The application is digitally signed with a fifth key to generate an encrypted and signed program code image. To decrypt the encrypted program code, the application verification key certificate is verified and in turn is used to verify the authenticity of the encrypted and signed program code image. The encrypted binding key is then decrypted with a sixth key to extract the binding key.
The hash value of the application verification certificate associated with the second key is then calculated and used with the extracted binding key to extract the first key. The extracted first key is then used to decrypt the encrypted application code."
Now I will not even go and pretend I understood all that technical jargon. What I do know is that it does sound ominous.
This is gonna be a different kind of game now.
[Full Patent via SKFU]
Related Articles:
| 100% of voters think this story ROCKS! |
|
|
Comments
Reply
Yeah, i got it, after a couple of goes
One Key + Two Key - Checksum only = Three Key
Three Key + Four Key = Application Locked
Five Key = Digital Signature for verification of authenticity of Locked Application
Six Key = Hardware Key (?) tells locked app to release key from locked app (maybe - thats how i interpret)
I think this is Sony telling everyone to give up, because even though we can activate unsigned code, there is still several layers of encription to run an application Correctly - i guess, either that or they want it in a future firmware, or hardware configuration.
Don't Give Up, we will soon have our own code running of this system - hopefully (too bad i'm not a Programmer)
Reply
if you guys wanna earn money online to pay for psn cards or ps3 games like MW2, and U2 hit up this link:
linkbee.com/CrownSignup
Reply
Reply
Reply
Reply
Reply
Reply
However, I noticed a lot of keys being numbered. I'm assuming they're going to implement a series of blockades (keys... I think?) and I don't know.
Oh technofriends, please come and enlighten us with your knowledge.
Reply
Reply
Reply
Reply
Codes are typically released on a copyright. If codes are patented, then people will be stealing them left and right as it takes a while(and a lot of money) to patent something.
On the side note: not all open source software are under GPL license. There are other various open source licenses out there like MIT, BSD, etc. Codes under open source license are normally called "copylefted".
Reply
it's a website for patents, btw.
and yes code can be patented. check it out son! all i have to say is amazon.
Reply
you don't patent code, code is covered by copyright.
Reply
Reply
Reply
like there's encryptions that build up and then need to be unencrypted backwards or something. idk, but i feel like i'm on the right tracks.
kind of like morals and ethics...
Reply
To put it simply, you can create a function that looks at a value and creates a new value.
What this is doing is just basically looking at a value and "hashing" out a new value and doing that 6 or 7 times with a few other factors in to create variability.
Still, telling people what stages they re-hash values and such really defeats the purpose and makes it way easier for "hackers".
Reply
It's not simple but it's not hard, basically key1 ask key2 what he knows, key2 only gives information but it doesn't extract any from key1. Once the info is given, key1 becomes key3, key3 will merge with key4 for and turn in to an encrypted key then it is attached to the program. Then key5 locks both the encrypted key(3+4) with the application and makes a signed and encrypted files. Now this is the part it gets tricky, to read the file it checks the key, once done the key turns against the file and checks if its the original one. Key(3+4) is extracted back without the signature by using the key6, the info that key2 gave is now being used to verify that the info in Key(3+4) is legit. Once verified the key(3+4) is unlocked and becomes key1 again but with the info that key2 has and finally opens the Game/program you are trying to use. Mainly Key1 and Key2 has the information then key1 becomes key3 and the rest just check if key 3 is real.
Reply
For now, the exploit only "works" on pre-slim models that run linux.
So unless sony now knows this can be used on slims, I am not sure what they are worried about.
Reply
Reply
You may have got a small exploit open, but now you gotta get the keys. The keys (as you read) are extremely hard to get due to all the encrypting. This isn't needed to actually run homebrew but you know, having all these keys decrypted = entire access to the system.
Reply
Reply
To say it in the easiest words. That system has a hell of a security. If all of these keys are encrypted differently, you can almost kiss goodbye to homebrew.
Even finding one of the keys could be very hard to impossible. Not even the main key of the PSP has been decrypted yet. (Otherwise you could run homerbrew on a legit PSP system.)
I can't imagine this whole process being ressource-friendly. This also means, however, IF the PS3 is ever cracked (which I doubt) Homebrew can even be more amazing, since we can skip this whole ressource-hungry process, which all games seem to use.
Reply
That's actually true, what makes the PS3 so amazing it's the Cell processor and the ability to keep it self guarded while playing games. If you can dump the whole security process you can utilise that power for something else.
Reply
Reply
Reply
maybe they just want to scare potential hackers away. or it's just a new form of drm scheme.
Reply
Reply
PS3 is like Fort Knox now, and they want to go further.
Reply
maybe this firmaware update comes with kingdom hearts
Reply
Reply
Reply
Sony will bind this new method of encryption in the future firmware update,probably 3.20 which is coming with 3D update.As far i know Geohot's exploit can take control of an isolated SPU (thats 1 out of 7)and inject unsigned code through it,but after this update each spe will try to connect to next spe to get key2,key3,...key7 and bind the key to supply to another spu.So,without gaining ctrl over all of the 7 spes it will be impossible for the exploit to infect ps3.
Each SPU has 768kb of cache memory and everybody knows Cell is damn fast,so encrypting a 512bit/say 768bit key and sending it to another spe..X 7 times to generate the final key aint that hard and it wont slowdown ps3's performance that much.Sony can easily implement dis in the next FW update.and PS3 will remain unhackable like ... forever
Reply
Reply
The patent has simply not been filed as the patent info would then have been available?
Just a thought.......
Reply
Reply
anyway its gonna take us years to dowload 1 ps3 game so whats the point
Reply
Reply
1 is 'predetermined'
2 is made from the application
1 and 2 make 3 (simple math)
3 makes 4
4 and the application make 5
5 becomes 6
2 and 6 make 7, which gets 1
So in the end, you use 1 to get to 7... you get to 7 because you need 7 to get 1... Isn't that some sort of paradox?
Reply
It makes more sense if you read the source.
Either way, this is dumb. All they are doing it creating a chain of keys. In the end, breaking the last link is all that's needed.
Reply
Reply
It simply is applying that key to a formula to generate the other ones. Once at the end, it sticks that key into a formula and should return the same answer as key 1.
Anyone ever done those math games, where you can pick one number, any number, and throw it into a formula and the answer will always be 4. or 5, or "insert random number here". Thats what this is doing. Except the start numbers MUST be a certain string, or the answer fails at some point in the formula process.
I personally read this as it has been there the whole time. TYhey are simply throwing a patent out on it so that when/if someone ever distributes the master key, or the encryption process to decrypt it, they have more ammo for the law suit. Since copyright infringement is a proven method of legal persuit. Copyright enfringment cases come down to each judge, and what they perceive to be the truth. There is too much grey area.
They are in no way trying to copyright Geohotz code. He is the author of it. As long as it is entirely his code (which I beleive it is), he has all the rights to it.
This is simply a game of sony trying to get everything together just in case they need it.
Reply
Reply
Also notice my use of the word method, not code. Code is not copyrightable.
Reply
Reply
"Predetermined program code is encrypted with a first key."
The program (game or OS or both) is encrypted using the first key (of which the origins are unknown, although IMHO it is probably closely related to the root hardware key.)
"The hash value of an application verification certificate associated with a second key is calculated by performing a one-way hash function."
A second key is required to get an "application verification certificate" (the origins of the second key and the process used to get the cert. are not specified.)
The certificate is then one-way-hashed (we have some 'hash' data that has no correlation to the actual certificate, meaning it's impossible to figure out the certificate using the hash data)
"Binding operations are then performed with the first key and the calculated hash value to generate a third key, which is a binding key."
The above hash and the first key are combined (using some unspecified "binding operations") to produce the third key.
"The binding key is encrypted with a fourth key to generate an encrypted binding key, which is then embedded in the application. The application is digitally signed with a fifth key to generate an encrypted and signed program code image."
The third key is encrypted using a fourth key (of unknown origin) and put inside the (already encrypted) program.
Then the program is signed with a fifth key (of unknown origin.) This doesn't (or, based on the description, shouldn't) actually change the program.
Reply
Reply
I'm surprised Sony hasn't said anything about the PSP much like this. This statement basically states that anything tampered or related to the keys + signature will be against the patent.
Reply
Reply
Reply
Reply
Reply
Reply
Not quite, anyone could release their exploits/codex anomalously. Or information could get "leaked" without any names being said. Besides, Sony is not going to be able to catch the millions who play their system. This patent is a scare tactic.
Reply
Reply
Reply
I personally don't think that's quite it. Datel cracked the PSP's kirk crypto engine so why hasn't IBM improvised a patent for the PSP??
Reply
Reply
We may not be reading this right. What if this patent is an entirely new security system and it has a very tiny resemblance to the current security layout. What if the current layout is much simpler then previously understood and it may be hacked sooner then expected. To those who will eventually want homebrew on their ps3, I suggest you stay away from the update button for a bit. I can imagine the exploit will bring homebrew to the console eventually. Just have patients.
Reply
Reply
Reply
so following this, they can't patent this new... encryption system, when its already in use... can they?
Reply
If this goes through, it will almost have the same effect as if native games are being emulated by the system, rather then run properly.
The reason is because a lot of things will require translation at runtime.
Correct me if I'm wrong, I'm no software engineer.
Reply
having said that 256 bits per encryption...well lets just say the only real way around it will be to find another hole...
unless someone has a quantum computer handy lol
Reply
Why did they wait til now to release this tidbit of info if that is what will make them feel more secure against hacking/piracy/homebrew? I just want my linux on my ps3. And for my ps3 to do what it was designed to do. Period.
Why do they wait until now to claim this additional security AFTER removing the otherOS function, if this new keythis keythat crap will solve that problem? Something sounds fishy.
You jerks. Sony, I'm still pissed you removed(tried, as i am not updated yet) something i paid for on my ps3.
It just seems they should worry about working out their own security issues in their product first before screwing people over. This is so stupid of you Sony!
Reply