Post: Regarding CFW installation on 3.60+
Options
10-28-2012, 09:21 PM
#1
ericmeltz
Grunt
In 3.56 Sony fixed the metldr exploit (hardware) by wrapping its security around bootldr (hardware)
In 3.60 Sony fixed the ECDSA Algorithm, making the variable which was supposed to be randomly generated work as intended
What does this mean?
The ability to sign files (PUP, PKG, etc...) is lost because of the change of private key (not hardcoded) and the fix of ECDSA prevents us form getting the key again.
TO CLARIFY:
The recent exploit of bootldr (lv0) (hardware, Sony's Final Defense) allow the ability to modify PUPs 3.56+ which is why we are getting 4.21, 4.25, 4.30
BUT since the private key used in the OFW has been changed and is unknown, 3.60+ IS NOT POSSIBLE (Rogero 4.21 and E3 4.30 are still using 3.55 private key which is why you need 3.55)
ECDSA WILL NOT BE CRACKED. If it is, GLOBAL security will be compromised, as many other databases, websites, etc. are using ECDSA
If you need proof or further reading, google ECDSA.
The following 25 users say thank you to ericmeltz for this useful post:
The following user groaned ericmeltz for this awful post:
10-28-2012, 11:11 PM
#12
primetime43
Knowledge is power 
10-28-2012, 11:17 PM
#13
ericmeltz
Grunt
Originally posted by primetime43
Isn't that because, doesn't each ps3 have its own individual key or something now?
No, the private key is in all 3.60+ FW and is universal for all PS3s, but the one and only way to get it (which was the ECDSA fail that fail0verflow exploited in 2010) was fixed... So the key cannot be acquired, well unless of course sony decides to just give it out LOL. yeah not gonna happen
10-28-2012, 11:19 PM
#14
primetime43
Knowledge is power
Originally posted by ericmeltz
No, the private key is in all 3.60+ FW and is universal for all PS3s, but the one and only way to get it (which was the ECDSA fail that fail0verflow exploited in 2010) was fixed... So the key cannot be acquired, well unless of course sony decides to just give it out LOL. yeah not gonna happen
Well can't we find another exploit. And im sure anonymous or somebody could get it.
10-28-2012, 11:22 PM
#15
Newelly
Can’t trickshot me!
Originally posted by ericmeltz
Trying to keep this as short and understandable as possible. I discuss why installing a modified PUP (CFW) on a OFW of 3.60+ will not happen anytime soon, so don't get your hopes up.
In 3.56 Sony fixed the metldr exploit (hardware) by wrapping its security around bootldr (hardware)
In 3.60 Sony fixed the ECDSA Algorithm, making the variable which was supposed to be randomly generated work as intended
What does this mean?
The ability to sign files (PUP, PKG, etc...) is lost because of the change of private key (not hardcoded) and the fix of ECDSA prevents us form getting the key again.
TO CLARIFY:
The recent exploit of bootldr (lv0) (hardware, Sony's Final Defense) allow the ability to modify PUPs 3.56+ which is why we are getting 4.21, 4.25, 4.30
BUT since the private key used in the OFW has been changed and is unknown, 3.60+ IS NOT POSSIBLE (Rogero 4.21 and E3 4.30 are still using 3.55 private key which is why you need 3.55)
ECDSA WILL NOT BE CRACKED. If it is, GLOBAL security will be compromised, as many other databases, websites, etc. are using ECDSA
If you need proof or further reading, google ECDSA.
In 3.56 Sony fixed the metldr exploit (hardware) by wrapping its security around bootldr (hardware)
In 3.60 Sony fixed the ECDSA Algorithm, making the variable which was supposed to be randomly generated work as intended
What does this mean?
The ability to sign files (PUP, PKG, etc...) is lost because of the change of private key (not hardcoded) and the fix of ECDSA prevents us form getting the key again.
TO CLARIFY:
The recent exploit of bootldr (lv0) (hardware, Sony's Final Defense) allow the ability to modify PUPs 3.56+ which is why we are getting 4.21, 4.25, 4.30
BUT since the private key used in the OFW has been changed and is unknown, 3.60+ IS NOT POSSIBLE (Rogero 4.21 and E3 4.30 are still using 3.55 private key which is why you need 3.55)
ECDSA WILL NOT BE CRACKED. If it is, GLOBAL security will be compromised, as many other databases, websites, etc. are using ECDSA
If you need proof or further reading, google ECDSA.
Stolen some of the info from here
You must login or register to view this content. right?
10-28-2012, 11:24 PM
#16
xXGRIM_REAPERXx
Splicer
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
