Since the LV0 keys have now been leaked, I believe I can now share this info with you, to help out those who are trying to build their own 4.x CFW :
The NPDRM ECDSA signature in the SELF footer is checked by lv2. It first asks appldr to tell it whether or not the signature is to be checked, and appldr will only set the flag if the SELF is a NPDRM with key revision from 3.56+ (the ones without private keys). This means that the SELF files signed with the new 3.56+ keys still don't have their ecdsa checked (probably to speed up file loading).
If appldr says the ecdsa signature must be checked, then lv2 will verify it itself, and return an error if it's not correct. There are many ways to patch this check out.
1 - Patch out the check for the key revision in appldr
2 - Patch out the "set flag to 1" in appldr if the key revision is < 0xB
3 - Patch out the code in lv2 that stores the result from appldr
4 - Patch out the actual sigcheck function from lv2.
5 - Ignore the result of the ecdsa from lv2.
Here is one of the patches (the 4th one, patching out the check function from lv2) :
In memory 0x800000000005A2A8, which corresponds to offset 0x6a2a8 in lv2_kernel.elf, replace :
e9 22 99 90 7c 08 02 a6
With :
38 60 00 00 4e 80 00 20
This is for the 4.21 kernel (that was the latest one when I investigated this), I will leave it as an exercise to the reader to find the right offsets for the 4.25 and upcoming 4.30 kernel files.
And here's another bit of info... in 4.21 lv2, at memory address 0x800000000005AA98 (you figure out the file offset yourself), that's where lv2 loads the 'check_signature_flag' result from appldr, so if you prefer implementing method 3 above, just replace the 'ld %r0, flag_result_from_appldr' by 'ld %r0, 0' and you got another method of patching it out. Either solutions should work just the same though.
Enjoy homebrew back on 4.x CFW....
- Extrayez 4.21 EBOOT Resigner
- Placez l'EBOOT.BIN dans le dossier extrait
- Lancez resigner.bat pour resigner l'EBOOT. il est possible que vous deviez sélectionner "encrypté"
- Si vous choississez le type de NPDRM, vous devrez entrer le Content-ID.
- L'EBOOT est créé, l'original renommé en EBOOT.BIN.BAK
* Includes all content from previous 04.07.00 FULL release (CEX+DEX)
+ New game covers
+ Updated gameDATA and lastGAME apps
+ multiMAN 04.07.01:
--- Updated 11 of the translations
--- Added support for Hermes payload for 4.21CEX CFW (SC-10)
--- Updated lastGAME app to version 3.00 (with Hermes support)
--- Updated gameDATA app to version 3.00
Ajout du support du payload 4.21 pour le CFW de Rogero
- Added proper support for [Hermes] for 4.21CEX ROGERO (SC-8)
- Fixed issue with loading split games from external USB HDD
- Improved support in lastGAME, gameDATA and bdRESET applications
3.41 OFW + JB DONGLE
3.41 CFW HERMES
3.41 CFW REBUG
3.55 OFW DEX
3.55 CFW DEX
3.55 CFW KMEAW
3.55 CFW REBUG
3.55 CFW ROGERO
3.55 CFW TB
3.55 CFW COBRA
4.21 OFW DEX
4.21 CFW DEX
4.21 CFW CEX (all flavors)
ERK = CA7A24EC38BDB45B98CCD7D363EA2AF0C326E65081E0630CB9 AB2D215865878A
RIV = F9205F46F6021697E670F13DFA726212
PUBLIC = A8FD6DB24532D094EFA08CB41C9A72287D905C6B27B42BE4AB 925AAF4AFFF34D41EEB54DD128700D
PRIVATE = 001AD976FCDE86F5B8FF3E63EF3A7F94E861975BA3
CURVE_TYPE = 0x33
1- This CFW doesn't have LV1 checks disabled and can't be installed on Downgraded PS3 consoles unless you have Dehashed/Reset Syscon Properly (if you're not sure about your PS3, Dehash it anyway to avoid any risk) Link ----> Dehashing Tutorial
2- Always make a NOR/Nand dump using multiMAN or memdump before installing this CFW to have a recovery backup in case of any bricks.Having a valid NOR/Nand dump is an essential step before upgrading, because you will always have a way to recover (using hardware flashers) when you have a valid dump.
** A Hardware Flasher alone without a valid dump cannot fix your bricked PS3 **
3- It's always better to have QA flag set (leave it Enabled) on your PS3 for safer upgrading/downgrading operations. Link ----> toggle_qa.pkg
4- Always use the Recovery Menu while installing this CFW to avoid possible bricks (XMB update works, but Recovery Menu is safer).
5- TrueBlue CFW users must update back to OFW3.55 before installing this CFW to avoid possible bricks.
- This is a 4.21CFW spoofed to version 4.25 to allow SEN access
- It can be used as a normal System Update from any 3.55 OFW/CFW/MFW
- TrueBlue CFW users must update back to OFW3.55 before installing this CFW to avoid possible bricks.
- It was tested using a hardware flasher and no bricks or any problems at all were encountered
- It can run games signed with Keys up to version 4.21 without any Eboot/Sprx patching needed
- Games must be loaded from Disc Icon (with Original game in BD) and not from app_home
- Current 3.55 homebrew application can't be loaded on this CFW, applications must be re-signed properly.
- Downgrading back to 3.55 is always possible using hardware flashers and will be tested soon using software methods.
Credits to eussNL and the PS3DevWiki for the valuable and always up-to-date source of information.
Credits to Deank for his continuous efforts on Multiman and many other PS3 tools/fixes.
- Download the 4.25 downgrader PUP ---> 4.25 Downgrader Size 176MB (184,595,263 bytes) MD5: 49d80e07fc1f5ca1b0840e02e94635db
- Rename the downloaded file to "PS3UPDAT.PUP" and put it on your USB in: "USB\PS3\UPDATE\PS3UPDAT.PUP"
- While on Rogero CFW4.21, go to System Update from XMB and install the 4.25 downgrader CFW.
- Once installed, now put "Rogero CEX-3.55 CFW V3.7" on your USB in: "USB\PS3\UPDATE\PS3UPDAT.PUP" ---> Rogero CEX-3.55 CFW V3.7.PUP
- Start the PS3 into Recovery Menu (or use Condor Updater for Slim consoles) and install "Rogero CEX-3.55 CFW V3.7" (from Recovery Menu, this is important)
- Once the install is finished, you're now back on Rogero CFW3.55 v3.7 ( from here it's better to dehash again before installing any other OFW/CFW 3.55 )
CECH 2504B BRIKEABLE Slim
CECH 2501B BRIKEABLE Slim
CECH 2501A BRIKEABLE Slim
CECH 2511A ACEPTABLE Slim
CECH 2004A ACEPTABLE Slim
CECH 2504A ACEPTABLE Slim--posibles bricks
CECH 2011A ACEPTABLE Slim
CECH 2001A ACEPTABLE Slim
CECH 2104A ACEPTABLE Slim
CECH2004B N/A N/A
CECH 2101A ACEPTABLE Slim
CECH 2004B ACEPTABLE Slim
CECH-2504A BRIKEABLE Slim
CECHJ 04 ACEPTABLE Fat
CECHL 01 ACEPTABLE Fat
CECHG 01 ACEPTABLE Fat
CECHL 11 ACEPTABLE N/A
CECHK 01 ACEPTABLE Fat
CECHL 04 ACEPTABLE Fat
CECHK 11 ACEPTABLE Fat
CECHH 01 ACEPTABLE Fat
CECHG 04 ACEPTABLE Fat
Next Tuesday, October 23rd, we will be releasing a new system software update for PlayStation 3 (version 4.30). With this update we have made several changes to how Trophies are displayed on your PlayStation 3.
The Trophy Collection will now reside under PlayStation Network on the XMB. Trophies that you have earned playing PlayStation Vita games are now displayed on your PlayStation 3. You will also be able to see your Trophy level and progress towards the next level while viewing your trophy collection.
By the beginning of November 2012, we will retire the services available through the Life with PlayStation application. In conjunction with its retirement, we will stop offering the Life with PlayStation application to new users with the 4.30 update.
This includes the conclusion of our participation with Stanford University's Folding@home, a distributed computing project aimed at understanding protein folding, misfolding and studying the causes of a variety of diseases such as Parkinson's, Alzheimer's as well as various cancers.
We'd like to thank the more than 15 million users that have participated in the program since it started on PS3 in 2007. PS3 users have donated in total more than 100 million computation hours to the Folding@home project to date, and as a result, contributing greatly to Stanford University's Alzheimer 's disease research.
Considering the contribution PS3 has made to the project, we decided to retire it as a result of discussions with Stanford University.
Vijay Pande, Folding@home research lead at Stanford University, had this to say about your contributions:
"The PS3 system was a game changer for Folding@home, as it opened the door for new methods and new processors, eventually also leading to the use of GPUs. We have had numerous successes in recent years.
Specifically, in a paper just published in the Journal of Medicinal Chemistry, we report on tests of predictions from earlier Folding@home simulations, and how these predictions have led to a new strategy to fight Alzheimer's disease.
The next steps, now underway at Stanford, are to take this lead compound and help push it towards a viable drug. It's too early to report on our preliminary results there, but I'm very excited that the directions set out in this paper do appear to be bearing fruit in terms of a viable drug (not just a drug candidate)."
Play All PS3 games from any USB media, download and play directly
Play PSN with latest CFW
Download and upgrade CFW from USB disk, easily and quickly
Downgrade to CFW3.55 from CFW4.25 by USB disk , easily and quickly
Update to latest CFW in a short time when new OFW released
All update is free include future new function like PS2/PSX game supported
Instruction
Works on 3.55FW console, any higher FW need downgrade to 3.55FW first
CDKEY is needed to run Bluedisk CFW Upgrader
One CDKEY for one console only
The customized CFW can't used on other console
http://www.youtube.com/watch?v=PvFg1A7En6I
- Full Support Of Bd-mirror For Games On Internal HDD For 4.21 CFW
- Full Support Of 4.25 Spoofer For 4.21 CFW CEX
- Fixed Issue Of Loading Ps1 Backups
- Fixed Some Text Issues And Added Translations For Temperature Type
Télécharger Multiman (CEX) 04.07.00
SSNE99999 = RetroArch-Wonderswan
SSNE88888 = RetroArch-SNES
SSNE77777 = RetroArch-NES
SSNE66666 = RetroArxch-Gameboy
SSNE55555 = RetroArch-TurboGrafx16
SSNE44444 = RetroArch-GameboyAdvance
SSNE33333 = RetroArch-Genesis
SSNE22222 = RetroArch-FBalpha (arcade)
SSNE11111 = RetroArch-IMAME4all
SSNE12121 = RetroArch-SG-1000
SSNE13131 = RetroArch-Game Gear
SSNE14141 = RetroArch-Master System
SSNE15151 = RetroArch-Turbo Grafx CD (aka TurboDuo)
SSNE16161 = RetroArch-Super Grafx
SSNE17171 = RetroArch-Sega CD
SSNE65432 = RetroArch prBoom
SSNE54321 = RetroArch Neo-Geo
Usage / Compatibilité :
- Peut être utilisé pour le downgrade directement à l'aide d'un flasher hardware comme le Progskeet / E3 Flasher / Teensy++, etc.
- Peut être utilisé pour une mise à jour système normale comme avec n'importe quel autre CFW/MFW, c'est-à-dire depuis le XMB ou le mode recovery.
Structure interne :
Nouvelles fonctionnalités :
- Mise à jour du Passphrase pour permettre l'accès au PSN/SEN sans qu'il soit nécessaire d'utiliser un autre outil. Il suffit d'installer le CFW et de se connecter au PSN/SEN.
- Ajout d'un fix dans le CFW pour les anciens titres "Black Screen" qui demandaient soit l'USB Mount (Rogero Manager), soit Select+X (Multiman), pour se lancer depuis un disque dur externe.
- Les jeux cités ci-dessus peuvent ainsi être maintenant chargés depuis le disque dur interne avec ce CFW.
- Intégration d'un spoof 4.25 afin d'éviter une mise à jour accidentelle du système.
- Ajout d'un patch NoBD pour permettre au CFW de s'installer avec le lecteur Blu-Ray déconnecté (notamment à des fins de downgrade)
- Contient d'autres fixs permettant d'éviter un Black Screen ou un problème de chargement du payload rencontrés sur quelques systèmes PS3.
Fonctionnalités standard :
- Lv2 patché du CFW Kmeaw avec les patchs nécessaires pour supporter les patchs Peek/Poke (la compatibilité avec les jeux est la même que pour le CFW Kmeaw)
- Vérifications du LV1 désactivées pour bypasser les hashs Syscon pour les consoles downgradées
- Patch Privacy appliqué afin de bloquer les communications avec tous les serveurs de Sony.
- Logo de démarrage customisé
- Intégration d'un thème dynamique "Heavy Rain"
C'est une version mieux optimisée, par rapport au précédent MFW publié. Celui-ci est un CFW compilé anuellement en patchant et en reconstruisant les fichiers et le PUP final. Cela a pu être possible grâce aux outils bien connus de la team "failoverflow" et grâce à la base du CFW Kmeaw, contrairement à la version précédente qui était compilée à l'aide de la célèbre application MFW Builder et d'une base d'OFW 3.55.
Changelog :
- Mise à jour du Passphrase pour permettre l'accès au PSN/SEN sans qu'il soit nécessaire d'utiliser un quelconque autre outil. Il suffit d'installer le CFW et de se connecter au PSN/SEN. Remerciements à eussNL et au PS3DevWiki pour la précieuse source d'informations toujours à jour.
- Ajout d'un fix dans le CFW pour les anciens titres "Black Screen" qui demandaient soit l'USB Mount (Rogero Manager), soit Select+X (Multiman), pour se lancer depuis un disque dur externe. Remerciements à Deank pour son travail continu sur Multiman et sur d'autres outils/fixs.