• Kazumara@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    2
    ·
    edit-2
    4 hours ago

    Yeah agreed especially further down when it’s just randomly rehashing old history. It’s also mixing up decryption and verification even in the beginning of the article. First they write:

    BootROM (Level 0): The CPU runs code burned into it at the factory. This code is immutable (cannot be changed). It uses the ROM Keys to verify the signature of the next loader.

    Then just two paragraphs below:

    The ROM Keys change everything. With these keys, hackers can decrypt the Level 1 Bootloader.

    So which is it? Usually bootloaders in a chain hash the next stage. That hash is compared with the signed hash the stage presents, and the signature on the signed hash is cryptographically verified against the locally stored trusted keys. No encryption or decryption takes place. Maybe this is different for the PS5 but then that would be noteworthy, not something you just assume readers to know.

    • 4am@lemmy.zip
      link
      fedilink
      English
      arrow-up
      15
      ·
      4 hours ago

      Maybe I am missing something but I think you answers your own question?

      ROM is Level 0, it has the burned-in, permanent key. It hashes and verifies the Level 1 bootloader, on disk, signed with the ROM key.

      Now that the ROM key is known, anyone can sign a PS5 bootloader; and you can pretty much do whatever you want from there.

      It would seem that all existing PS5s just went up in value.