Per Console Keys

per_console_root_key_0

• metldr is decrypted with this key
• bootldr is decrypted with this key
• might be obtained with per_console_root_key_1?

per_console_root_key_1 / EID_root_key

• derived from per_console_key_0
• stored inside metldr
• copied to sector 0 by metldr
• cleared by isoldr
• Used to decrypt part of the EID
• Used to derive further keys
• can be obtained with a modifyed isoldr that dumps it
• can be obtained with a derivation of this key going backwards

obtaining it

launch the patched isoldr with your prefered method

• modified kernel module
• payload

(both can be found on this wiki)

• patched isoldr to dump it
• DO NOT CREATE AN MFW USING THIS IT WOULD BRICK
• http://www.multiupload.com/2MP5KY28EZ

per_console_root_key_2 / EID0

• this key can be obtained through AES from EID_root_key

• EID can be partially decrypted by setting this key in anergistics and fireing aim_spu_module.self

obtaining it

• patched aim_spu_module to dump it
• DO NOT CREATE AN MFW USING THIS IT WOULD BRICK
• http://www.multiupload.com/1XUOOYS9I0

per_console_root_key_n

these are further derivations of the per_console_key_1/EID_root_key