I'm not sure if I can explain this but I think it made sense in my head..
Since boot2 has to be correctly signed on new Wiis, it is not possible to install BootMii as boot2. I was wondering if there's a way to correctly sign it? I'm pretty sure that a correctly signed BootMii/boot2 can't be distributed though as it uses Nintendo's signature, but if there's a way to have the user do it would that be possible at all?
Or is there no possible way to get Nintendo's signature?

Quote
bg4545
there [is] no possible way to get Nintendo's signature?

It's actually a RSA private key.

Oh, so there's no way to get the private key unless you're Nintendo.
Well that makes sense.
I wonder if there's any other exploits in boot1..?

Not that we have found ;)

i think it'd be fine to redistribute a properly signed boot2, but there is no way to get the private key.

If we somehow could get the private key legally, everything would be fine.

Yep, but that's very unlikely. No Wii has the private key, so it would probably HAVE to be a bruteforce, which would take hundreds of years for a key as secure as the Wii's.

For those of you that dont know, here is a bit of info about brute-forcing. Arikadosblog.blogspot.com

Quote
TopGun96
For those of you that dont know, here is a bit of info about brute-forcing. Arikadosblog.blogspot.com

I appreciate you posting the link to my blog, but I think this is a better reference for general information: [en.wikipedia.org]

Ah sorry about that. I tend to walk away from wikipedia....

Not that I would support this idea but I am just curious if this is possible, but there are cpu sharing programs out there where people donate their PC's downtime to a project to do something, such as the pie calculation project.

Would it not be possible to get a group of people to use their PC's in tandom to run multiple bruteforce attacks at the same time in effect multiplying the chances of a hit? Could you make it so that they talk to each other and do not try the same password as each other or the same one twice?

Given the power of most gaming PC's could they not each run numerous attacks each and therefore just getting a few dozen PCs linked say 60, would not the time it would take to get a hit go way down, provided there is not a cap on fails per day?

This is just an idea, I do not support hacking Nintendo and would not volunteer my PC for the project, I am just simply curious. If I want boot2 that bad I will just find and buy a Wii that is old and un-updated off ebay or craigslist. In fact I considered doing that when I got my last Wii but changed my mind as the cost to benefit was just not worth it. Talk to you all later.

Elmoreas

No offense but, If you don't support hacking the wii.... then why are you part of this forum?

I support hacking the Wii just not Nintendos servers that is illegal is it not, if it is not illegal then I am not against it and I misunderstood the post and I am sorry. I am only against illegal stuff and that sounded illegal.

Elmoreas

Quote
elmoreas
I support hacking the Wii just not Nintendos servers that is illegal is it not, if it is not illegal then I am not against it and I misunderstood the post and I am sorry. I am only against illegal stuff and that sounded illegal.

Elmoreas

They were talking about the Wii. Not sure why you think servers are involved.

Cause I am new and stupid. ;) and wrong. So I would support this so ignore my previous bit about not supporting doing it. I would do it as it would be legal. I misunderstood and am sorry. So I guess putting multiple PCs on it is out since it involves hacking a single Wii. Too bad too cause having boot2 would be nice. Again sorry for the noob mistake. Please forgive me.

elmoreas



Edited 1 time(s). Last edit at 01/21/2010 12:18AM by elmoreas.

Just for the info, Boot2 is signed with RSA-2048. Which is currently considered safe against bruteforce attacks.

512 bit RSA keys can be bruteforced in a few weeks with a simple quadcore. But every bit doubles that time if I remember correctly. So with a single quadcore the Boot2 key will take 2.41e+462 times as long as a 512 bit key. I don't think you'll find any working wii anymore when you're done ;-)

Even if every person in the world worked on it, it would still take 1205000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 weeks.

Not feasible yet.

I'm going to play devil's advocate and point out that if you used a randomized bruteforce attack you could quite possibly get the key in 5 seconds. Yes, it's unbelievably extremely unlikely, but it is possible.

Are there any randomized bruteforcers for the wii?

Not that I know of but it's not like it should be too hard to write one.