Various encryption keys

I recently posted this inside a thread about a opensource XBL alternative, but since this is quite generic XBOX information, it might as well have it's own thread!

Feel free to ask me questions about the original XBOX kernel, and/or things related to the encryption used for disks, i know a few lads that worked on the original XBOX.

Various encryption keys used by Xbox:

EEPROM key:

This key is stored in the boot loader (encrypted by the master key in MCPX).
The boot loader passes it to the kernel on a cold reboot.
The kernel uses it to decrypt the encryption section of the EEPROM
and then throws it away (except that we need to let the manufacturing
program access it during the final system integration stage).

Except.
On DEVKIT box, the data can be either encrypted or unencrypted.
On retail box, it's always encrypted.

NOTE: The XBOX will treat the EEPROM as unencrypted if the confounder
field is all 0's.
​

Hard disk key:

This key is stored in the EEPROM (encrypted by the EEPROM key above).​

LAN key:

This key's raw data is stored in the first XBE that is run from a cold
boot and modified by the CERT key.​

Signature key:

This key's raw data is stored in the first XBE that is run from a cold
boot and modified by the CERT key.​

CERT key:

This key is stored in the boot loader (encrypted by the master key in MCPX).
The boot loader passes it to the kernel on a cold reboot.
It's used to decrypt keys in the title CERT header.​

 

And Chihiro bios?

 

Chihiro devices and devkit units have the same amount of memory, however they all run the same kernel as the normal retail devices, they all just have some minor differences.

 

thanks

With a friend try to edit bios chihiro for boot without mediaboard do you have any idea? RC4 key maybe....

 

The kernel itself requires the mediaboard to be present, you could try tricking the kernel into thinking that you are a devkit device instead of a arcade device.