Nintendo Switch encryption key derivation bare metal RCM payload (originally made by shchmue)

console ecryption keys lockpick lockpick-rcm nintendo nintendo-switch payload prod-keys prodkeys rcm shchmue switch title-keys titlekeys

Go to file

shchmue 34890f0025 Add support for 9.0.0, new Sept, and master_key_09		2019-09-14 21:37:43 -06:00
common	Initial commit	2019-03-04 18:05:42 -05:00
source	Add support for 9.0.0, new Sept, and master_key_09	2019-09-14 21:37:43 -06:00
.gitignore	Fix .gitignore	2019-04-18 13:15:03 -04:00
LICENSE	Initial commit	2019-03-04 18:05:42 -05:00
Makefile	Bump version to v1.3.0	2019-06-19 18:58:42 -04:00
README.md	Update Sept instructions in README	2019-07-04 22:11:49 -06:00

README.md

Lockpick_RCM

Lockpick_RCM is a bare metal Nintendo Switch payload that derives encryption keys for use in Switch file handling software like hactool, hactoolnet/LibHac, ChoiDujour, etc. without booting Horizon OS.

Due to changes imposed by firmware 7.0.0, Lockpick homebrew can no longer derive the latest keys. In the boot-time environment however, there is no such limitation.

Usage

Launch Lockpick_RCM.bin using your favorite payload injector
Upon completion, keys will be saved to /switch/prod.keys on SD
If the console has Firmware 7.x or higher, the /sept/ folder from Atmosphère or Kosmos release zip must be present on SD or else only keyblob master key derivation is possible (ie. up to master_key_05 only)

Building

Install devkitARM and run make.

Massive Thanks to CTCaer!

This software is heavily based on Hekate. Beyond that, CTCaer was exceptionally helpful in the development of this project, lending loads of advice, expertise, and humor.

Known Issues

Chainloading from SX will hang immediately due to quirks in their hwinit code, please launch payload directly