Author Topic: Nintendo Switch Retail Keys  (Read 22000 times)

0 Members and 1 Guest are viewing this topic.

Offline simonmkwii

  • Jr. Member
  • **
  • Posts: 99
Nintendo Switch Retail Keys
« on: February 28, 2018 - 04:12:50 »
Main keys:

ssl_rsa_kek = B011100660D1DCCBAD1B1B733AFA9F95
eticket_rsa_kek = 19C8B441D318802BAD63A5BEDA283A84

master_key_00 = C2CAAFF089B9AED55694876055271C7D
master_key_01 = 54E1B8E999C2FD16CD07B66109ACAAA6
master_key_02 = 4F6B10D33072AF2F250562BFF06B6DA3
master_key_03 = 84E04EC20B9373818C540829CF147F3D
master_key_04 = CFA2176790A53FF74974BFF2AF180921

keyblob_key_source_00 = DF206F594454EFDC7074483B0DED9FD3
keyblob_key_source_01 = 0C25615D684CEB421C2379EA822512AC
keyblob_key_source_02 = 337685EE884AAE0AC28AFD7D63C0433B
keyblob_key_source_03 = 2D1F4880EDECED3E3CF248B5657DF7BE
keyblob_key_source_04 = BB5A01F988AFF5FC6CFF079E133C3980

package1_key_00 = F4ECA1685C1E4DF77F19DB7B44A985CA
package1_key_01 = F8C60322F75CD548B821AF9162E16F76
package1_key_02 = C580CB1E2D9AA9866FFEF920010FC409
package1_key_03 = C32009C8CB268ED053052C9237DFD8BC
package1_key_04 = EDE36C3677495784B838D7265C6BA7A1

package2_key_source = FB8B6A9C7900C849EFD24D854D30A0C7
titlekek_source = 1EDC7B3B60E6B4D878B81715985E629B

aes_kek_generation_source = 4D870986C45D20722FBA1053DA92E8A9
aes_key_generation_source = 89615EE05C31B6805FE58F3DA24F7AA8

rsa_oaep_kek_generation_source = A8CA938434127FDA82CC1AA5E807B112
rsa_private_kek_generation_source = EF2CB61A56729B9157C38B9316784DDD

eticket_rsa_kek_source = DBA451124CA0A9836814F5ED95E3125B
eticket_rsa_kekek_source = 466E57B74A447F02F321CDE58F2F5535

ssl_rsa_kek_source_x = 7F5BB0847B25AA67FAC84BE23D7B6903
ssl_rsa_kek_source_y = 9A383BF431D0BD8132534BA964397DE3

key_area_key_application_source = 7F59971E629F36A13098066F2144C30D
key_area_key_ocean_source = 327D36085AD1758DAB4E6FBAA555D882
key_area_key_system_source = 8745F1BBA6BE79647D048BA67B5FDA4A

header_kek_source = 1F12913A4ACBF00D4CDE3AF6D523882A
header_key_source = 5A3ED84FDEC0D82631F7E25D197BF5D01C9B7BFAF628183D71F64D73F150B9D2

sd_card_kek_source = 88358D9C629BA1A00147DBE0621B5432
sd_card_save_key_source = 2449B722726703A81965E6E3EA582FDD9A951517B16E8F7F1F68263152EA296A
sd_card_nca_key_source = 5841A284935B56278B8E1FC518E99F2B67C793F0F24FDED075495DCA006D99C2

master_key_source = D8A2410AC6C59001C61D6A267C513F3C
keyblob_mac_key_source = 59C7FB6FBE9BBE87656B15C0537336A5

per_console_key_source = 4F025F0EB66D110EDC327D4186C2F478

Generated keys:

header_key = AEAAB1CA08ADF9BEF12991F369E3C567D6881E4E4A6A47A51F6E4877062D542D

sd_card_save_key = 8F696AEED967F492041CD7DACE7BAFB2F20A25AD13108ED9BAB662A09C28CC86
sd_card_nca_key = 2A34D7A63F1F6C87EA8068E8A67DD66F9637EAFF943686D74F5AB43FCBCEC6DA

package2_key_00 = A35A19CB14404B2F4460D343D178638D
package2_key_01 = A0DD1EACD438610C85A191F02C1DB8A8
package2_key_02 = 7E5BA2AAFD57D47A85FD4A57F2076679
package2_key_03 = BF03E9889FA18F0D7A55E8E9F684323D
package2_key_04 = 09DF6E361E28EB9C96C9FA0BFC897179

titlekek_00 = 62A24D6E6D0D0E0ABF3554D259BE3DC9
titlekek_01 = 8821F642176969B1A18021D2665C0111
titlekek_02 = 5D15B9B95A5739A0AC9B20F600283962
titlekek_03 = 1B3F63BCB67D4B06DA5BADC7D89ACCE1
titlekek_04 = E45C1789A69C7AFBBF1A1E61F2499459

key_area_key_application_00 = EF979E289A132C23D39C4EC5A0BBA969
key_area_key_application_01 = CDEDBAB97B69729073DFB2440BFF2C13
key_area_key_application_02 = 75716ED3B524A01DFE21456CE26C7270
key_area_key_application_03 = F428306544CF5707C25EAA8BC0583FD1
key_area_key_application_04 = 798844EC099EB6A04B26C7C728A35A4D

key_area_key_ocean_00 = B33813E4C9C4399C75FABC673AB4947B
key_area_key_ocean_01 = C54166EFA8C9C0F6511FA8B580191677
key_area_key_ocean_02 = 3061CE73461E0B0409D6A33DA85843C8
key_area_key_ocean_03 = 06F170025A64921C849DF168E74D37F2
key_area_key_ocean_04 = DC857FD6DC1C6213076EC7B902EC5BB6

key_area_key_system_00 = 6DD02AA15B440D6231236B6677DE86BC
key_area_key_system_01 = 4AB155E7F29A292037FD147592770B12
key_area_key_system_02 = B7A74ADEAF89C2A198C327BDFF322D7D
key_area_key_system_03 = D5AAB1ACD23A8AEC284A316DF859D377
key_area_key_system_04 = 9B44B45B37DE9D14754B1D22C2CA742C

Other keys:

Capsrv screenshot HMAC signing key: 287AABF9FED34D4E995CC7BE0D914A3221B9822A45524649B0A2CBCDD4B98E4A

Unwrapped Keyblobs:

keyblob_00=
F759024F8199101DDDC1EF91E6EECF37
E24B95AC9272F7AE441D5D8060C843A4
8322D21CDD06D4FC958C68D3800EB4DB
939FFBEC930177F77D136144FF615AA8
835E811BB958DEDA218F8486B5A10F53
1B30CB9D269645AC9FC25C53FC80525E
56BD3602988A9FCF06BBF99CA910AD65
30791D512C9D57E17ABF49220DE6419B
F4ECA1685C1E4DF77F19DB7B44A985CA

keyblob_01=
BD27264AE07E979756411D0C66E679E3
C50851F3E902D9C2CD1A438B948159A5
17EC1566C10570326EA2697EE62DA46F
14BB5D581BFC06FD0C9387EA33D2D4DC
63E7809BA90F03DD2C7112FFBFA54895
1B9B8C688B5E4F2951D24A73DA29C668
154A5D4838DBA71EE068ACE83FE720E8
C2A495C596F73525DC3C05994B40AD27
F8C60322F75CD548B821AF9162E16F76

keyblob_02=
A3D4A8E153B8E6AE6E6AEF3E8F219CB4
B7790F47856ACCC76268F9AFA99A1FF8
B1A72F63D1F99F480A3C1532078BB59A
BDD25203CFB12A38B33E9BA6A09AFB6F
24283B3BA76A0161230A73669DDF5493
C2B7919D094FD795B484794854F71E4F
4C672245D7770E29397722444D111B42
29CDBF35707B70634EA8F140766E884C
C580CB1E2D9AA9866FFEF920010FC409

keyblob_03=
1558F525AE8C5BE9243FB6D8A8B0A8EE
0E886A59035668740A936619B7A5C83E
821198B171D18E51445054DF68688E45
703B936818A827D8E540DD6BEF2E11EC
9DDC6CFE5FC736DD769B9F6E0A23A62E
2E5F49E86143646A04EC3A23F828373A
336A5C224A91F8A0C6C6A7B5844DD641
5804209F83C943AECA9CFD856DB6BD4E
C32009C8CB268ED053052C9237DFD8BC

keyblob_04=
9FBEB1957FC1629E08B753A9086D6E01
FFB4F11466B7417E3FA7F5F1EFB75440
6704FD75AFAF91A408A0B524C1FC80D3
6C2046FA4757412EFE4C11E382F72E8A
10D90ED580017D9DEB87AF2549B6B026
61AF48FF94F6072C0FEF7FC2833B8BDA
E503898E2E927AC0663E8B6391DD4F1D
685313935E2C48ECE7D177C88BC9C883
EDE36C3677495784B838D7265C6BA7A1

BCAT passphrases:

Splatoon 2: de13a4a0894bba7308ccc5c2fd5cd6f8e4ebded4dbd1131b6608ddfc7f1f8231
Super Mario Odyssey: 11bb07b219bc60794a14f8966d146f67769a247445f78a4ac38eeff48eff68a5

Attached Tegra X1 bootrom and TSEC firmware.
« Last Edit: June 23, 2018 - 05:27:50 by simonmkwii »

Offline lemonman

  • Sr. Member
  • ****
  • Posts: 291
Re: Nintendo Switch Keys
« Reply #1 on: March 24, 2018 - 09:22:04 »
this is everything I have, some taken from Simon's post above and others from BBB

XCI Header Key: 01C58FE7002D135AB29A3F69339574B1                 
NCA Header Encryption Key: AEAAB1CA08ADF9BEF12991F369E3C567,D6881E4E4A6A47A51F6E4877062D542D

master_key_00=C2CAAFF089B9AED55694876055271C7D
master_key_01=54E1B8E999C2FD16CD07B66109ACAAA6
master_key_02=4F6B10D33072AF2F250562BFF06B6DA3

package1_key_00 = F4ECA1685C1E4DF77F19DB7B44A985CA
package2_key_00 = A35A19CB14404B2F4460D343D178638D


package2_key_source = FB8B6A9C7900C849EFD24D854D30A0C7
aes_kek_generation_source = 4D870986C45D20722FBA1053DA92E8A9
aes_key_generation_source = 89615EE05C31B6805FE58F3DA24F7AA8
key_area_key_application_source = 7F59971E629F36A13098066F2144C30D
key_area_key_ocean_source = 327D36085AD1758DAB4E6FBAA555D882
key_area_key_system_source = 8745F1BBA6BE79647D048BA67B5FDA4A


Which exactly are we missing now ?

Offline danfozzy85

  • Newbie
  • *
  • Posts: 25
Re: Nintendo Switch Keys
« Reply #2 on: March 24, 2018 - 14:59:44 »
Master key 3 and 4

Offline onepiecefreak

  • Newbie
  • *
  • Posts: 1
Re: Nintendo Switch Keys
« Reply #3 on: March 25, 2018 - 10:33:45 »
So, can we derive the nca_body_keys with the master_keys?
BBB mentioned that with the release of the master_keys we could now decrypt all the games, but without the nca_body_key for a FW that seems unlikely.
So I assume we can derive them from the master_keys.

Offline lemonman

  • Sr. Member
  • ****
  • Posts: 291
Re: Nintendo Switch Keys
« Reply #4 on: March 25, 2018 - 17:34:34 »
@simonmkwii

in your list you forgot

XCI Header Key: 01C58FE7002D135AB29A3F69339574B1   

Offline AzizR

  • Newbie
  • *
  • Posts: 2
Re: Nintendo Switch Keys
« Reply #5 on: March 26, 2018 - 07:23:40 »
there is 2 keys missing:
header_kek_source
header_key_source

Offline 1425720626

  • Newbie
  • *
  • Posts: 24
Re: Nintendo Switch Keys
« Reply #6 on: March 26, 2018 - 07:55:31 »
[You are not allowed to view links] Register or Login
there is 2 keys missing:
header_kek_source
header_key_source
They're already on the first post.

Offline simonmkwii

  • Jr. Member
  • **
  • Posts: 99
Re: Nintendo Switch Keys
« Reply #7 on: March 27, 2018 - 09:35:16 »
[You are not allowed to view links] Register or Login
@simonmkwii

in your list you forgot

XCI Header Key: 01C58FE7002D135AB29A3F69339574B1
That's not useful, it's stored as plaintext in every XCI.

Offline wtwatv3th33n

  • Newbie
  • *
  • Posts: 27
Re: Nintendo Switch Keys
« Reply #8 on: March 28, 2018 - 00:00:29 »
[You are not allowed to view links] Register or Login
[You are not allowed to view links] Register or Login
@simonmkwii

in your list you forgot

XCI Header Key: 01C58FE7002D135AB29A3F69339574B1
That's not useful, it's stored as plaintext in every XCI.

I think you confused the XCI Header Key with the Aes128CbcCrypto IV:

#50 Nights.of.Azure.2.Bride.of.the.New.Moon.NSW-BigBlueBox -> bbb-h-adwfb.nfo:
Quote
Aes128CbcCrypto IV is located at 0x120:0x130 in every XCI file all you need to do is reverse it [::-1]

Also, why would BigBlueBox have included the key in their release, if one could get it from the xci file itself?

Offline britheinkling

  • Newbie
  • *
  • Posts: 3
Re: Nintendo Switch Keys
« Reply #9 on: March 28, 2018 - 05:06:16 »
hey I'm not trying to sound like a total idiot. but how do you download the update files from the eshop to datamine? me and a friend have been wondering this.

Offline britheinkling

  • Newbie
  • *
  • Posts: 3
Re: Nintendo Switch Keys
« Reply #10 on: March 28, 2018 - 05:19:07 »
nevermind. lack of sleep caused me to read this wrong. my apologies.

Offline simonmkwii

  • Jr. Member
  • **
  • Posts: 99
Re: Nintendo Switch Keys
« Reply #11 on: March 28, 2018 - 12:20:42 »
[You are not allowed to view links] Register or Login
hey I'm not trying to sound like a total idiot. but how do you download the update files from the eshop to datamine? me and a friend have been wondering this.
As I said in the original post, you need the title key for the update.

Offline simonmkwii

  • Jr. Member
  • **
  • Posts: 99
Re: Nintendo Switch Keys
« Reply #12 on: March 28, 2018 - 12:23:26 »
[You are not allowed to view links] Register or Login
[You are not allowed to view links] Register or Login
[You are not allowed to view links] Register or Login
@simonmkwii

in your list you forgot

XCI Header Key: 01C58FE7002D135AB29A3F69339574B1
That's not useful, it's stored as plaintext in every XCI.

I think you confused the XCI Header Key with the Aes128CbcCrypto IV:

#50 Nights.of.Azure.2.Bride.of.the.New.Moon.NSW-BigBlueBox -> bbb-h-adwfb.nfo:
Quote
Aes128CbcCrypto IV is located at 0x120:0x130 in every XCI file all you need to do is reverse it [::-1]

Also, why would BigBlueBox have included the key in their release, if one could get it from the xci file itself?
The Aes128CbcCrypto IV they're referring to IS the XCI header key.
They included the key in their release just to disclose its location.

Offline pincucee14

  • Newbie
  • *
  • Posts: 25
Re: Nintendo Switch Keys
« Reply #13 on: April 02, 2018 - 07:55:09 »
title key splatoon 2?

Offline Machow8

  • Newbie
  • *
  • Posts: 26
Re: Nintendo Switch Keys
« Reply #14 on: April 02, 2018 - 20:47:31 »
What keys which aren't public yet that can extract the .xci from .nca of Luigi's Baloon World DLC?

I see that Random Talking Bush from [You are not allowed to view links] Register or Login have uploaded some models from Mario Odyssey as we can see here: [You are not allowed to view links] Register or Login

We can see clearly how he says some help could be nice, but doesn't provide any info on how to do that.

Luckily i found someone that helped me on that.

I just need the xci of Luigi's Baloon World DLC to be able to extract it's files to upload there too.

I also got the .nca file of that DLC, but need some keys to be able to rip .xci from it.