Wouter xesxen

## public_keys.md

      
              1 file
            
          
              2 forks
            
          
              11 comments
            
          
              31 stars
            
          
                SciresM
                / public_keys.md
            
            
              Last active
              April 19, 2024 07:41
            
          
    Nintendo Switch RSA-PKCS#1 Public Key Recovery

This is a short writeup of a fun (but ultimately pretty useless) attack I implemented on the Nintendo Switch a few months ago resulting in the recovery of some otherwise unobtainable RSA public keys. Since public keys aren't private keys, this is pretty useless, apart from letting us validate some signatures on PC. Even so, the attack is a pretty cool one, so I thought I'd write it up.
Every Switch gamecart has a unique certificate (called its "CERT"), storing an RSA signature followed by some kind of unknown but unique encrypted data. I was trying to reverse how these certificates work, and the obvious first step was to try to see how they were validated. However, when I tried looking through the FileSystem (FS) module, which should be responsible for validating these certificates, I found no references to the format at all. The "CERT" magic number was nowhere to be seen, and I couldn't find an RSA modulus that validated the signatures I had. This was in

  
## post-merge
#/usr/bin/env bash
# MIT © Sindre Sorhus - sindresorhus.com
# forked by Gianluca Guarini

changed_files="$(git diff-tree -r --name-only --no-commit-id ORIG_HEAD HEAD)"

check_run() {
  echo "$changed_files" | grep -E --quiet "$1" && eval "$2"
}

## gist:952344

      
              1 file
            
          
              215 forks
            
          
              30 comments
            
          
              742 stars
            
          
                mtigas
                / gist:952344
            
            
              Last active
              April 3, 2024 07:57
            
              
                Mini tutorial for configuring client-side SSL certificates.
              
          
    Client-side SSL

For excessively paranoid client authentication.

Updated Apr 5 2019:
because this is a gist from 2011 that people stumble into and maybe you should AES instead of 3DES in the year of our lord 2019.
some other notes:
	#/usr/bin/env bash
	# MIT © Sindre Sorhus - sindresorhus.com
	# forked by Gianluca Guarini

	changed_files="$(git diff-tree -r --name-only --no-commit-id ORIG_HEAD HEAD)"

	check_run() {
	echo "$changed_files" \| grep -E --quiet "$1" && eval "$2"
	}