LWN: Comments on "PlayStation 3 code signing cracked (The Register)"

secure until recently

alex — Fri, 07 Jan 2011 15:08:45 +0000

Well according to the presenters it had a lot of fatal flaws in it's crypto but no one was looking until Sony took away OtherOS. From their point of view that removal that started the whole jail-breaking effort off.

PlayStation 3 code signing cracked (The Register)

dgm — Mon, 03 Jan 2011 15:40:51 +0000

They apparently made considerable effort, and I was under the impression that the PS3 was quite secure up until very recently.

PlayStation 3 code signing cracked (The Register)

rilder — Mon, 03 Jan 2011 11:57:39 +0000

Well atleast this should force people into using really random sources for RNG seed. On the other hand, I don't think Sony wanted to secure their PS3 against hacking to that extent.

PlayStation 3 code signing cracked (The Register)

mgedmin — Thu, 30 Dec 2010 23:55:12 +0000

For those who haven't watched the whole 45-minute presentation:

The elliptic curve crypto used for digital signatures on the PS3 has two secret values: k - the private key, and m - a random number used once. If you have two signatures that were computed using the same m value, you can trivially recover the secret key k. Which is exactly what happened here.

PlayStation 3 code signing cracked (The Register)

jengelh — Thu, 30 Dec 2010 20:45:43 +0000

Conspiracy time: I wonder if some clever worker put in a static 'm' on purpose ahead of time, under the suspicion that it would only be a matter of time until management decided to throw out OtherOS.