So if you want to brute force the mariko_kek, open your partialaes.keys and observe the numbers beneath keyslot 12. The keyslots are as follows, with names recognized by hactool:ġ2 - mariko_kek (not unique - this is used for master key derivation)ġ3 - mariko_bek (not unique - this is used for package1 decryption)ġ4 - secure_boot_key (console unique - this isn't needed for further key derivation than what Lockpick_RCM does but might be nice to have for your records)ġ5 - Secure storage key (console unique - this is not used on retail or dev consoles and there's nothing useful to do with it) User rating: 30 (50) 30 (50) 21 comments SuperLauncher 1.9.4 was available as a giveaway on AugDownload trial SuperLauncher 1.9.4 14. With the tool linked above, enter them in sequence for a given keyslot you want the contents of, for example: PartialAesKe圜rack.exe with the -numthreads=N where N is the number of threads you can dedicate to the brute force. 29.95 EXPIRED Giveaway of the day SuperLauncher 1.9.4 A hot key program launcher, a scheduler and a task reminder. The contents of this file are the keyslot number followed by the result of that keyslot encrypting 16 null bytes. I will test out a userland homebrew for this purpose soon. To get your SBK or the Mariko specific keys (the kek which is used for master key derivation or the bek which is used to encrypt package1 and the BCT), you will need to use the /switch/partialaes.keys file along with a brute forcing tool such as. Thanks loads to CTCaer, SciresM, Shadów, balika011, and averne for information, advice, and help testing! The following section is only for research purposes - all keys needed for normal use are dumped by the program with no further action required

Big release! If you can load payloads on your Mariko or patched Erista console, you can now dump keys with Lockpick_RCM!

Super launcher 1.9.4