![find my ps3 console id find my ps3 console id](https://i.imgur.com/R3XH5JM.jpg)
But I doubt that any purchased console IDs came with EID root key. Or you can try to replace signatures and console ID inside decrypted EID0 section of your console and then encrypt it back. In such case you can generate a spoofed passphrase but you need some sort of runtime memory patching to replace original passphrase with the new one. But if you have an access to EID root key and EID0 section of another console then you can decrypt its EID0 and grab all neccessary data from it. They didn't made a mistake in ECDSA signature computation for EID0 so we are unable to get a private key to generate custom signatures. If steps above are okay then your console ID is legal. Compare console ID stored in the HTTP GET request with the console ID stored inside the passphrase ģ. Now Sony can use the following simple algorithm on their server to check your console's legality:ġ. Using random header and CBC mode of operation gives them an unique passphrase each time. Besides that, data is hashed with SHA-256 algorithm and encrypted with AES-128-CBC. It includes a random header, your user ID, console ID, two ECDSA signatures from the first section of EID0 (I remind you that the first ECDSA signature used at lv1ldr to check if your console is converted from CEX to DEX manually which causes a brick) and account ID.
![find my ps3 console id find my ps3 console id](https://gbatemp.net/data/avatars/l/266/266257.jpg)
It is encrypted per console data and it is different each time you log into a network. If you'll try to decode it then you'll see that it have a size of 512 bytes which are looks as random data. And now they use two passphrases a new passphrase is encoded with base64 and is sent via custom HTTP header ("X-I-5-Passphrase"). You can remember that they use PSN passphrase to log into their network and you also should know that they are sending your console ID in a HTTP query. Sony did some changes at the algorithm for PSN authorization.
#Find my ps3 console id code
It is compared with the code which some games like "Call of Duty" use to tell Sony that you are using a custom firmware. But now I know that they have introduced a new hidden feature which allows them to determine if you are legal user or not. Okay, let's start.Īt October 23rd, 2012, Sony releases a new firmware for Playstation 3 (version 4.30) which includes only few changes if you've read its changelog. A new algorithm will show you that buying another console ID to use with your console is not safe anymore and I think that all purchased console IDs will be useless soon. So my words can be read as "If I worked at Sony, I would use this information for banning people". Well, it is just a theory but the principle laid in it can be used to ban your spoofed console with 100% probability. Several days ago I've worked on the SSL traffic decryption used in communication with PSN and have got some interesting information regarding the way how can Sony determine consoles with non original console ID.