"GoodCBC" - LET'S DO IT! (Codebreaker Day1 set decrypted and recompiled into RAW cbcs

[misfire]

And here's the new cb2util v1.5 release...

Changelog:
https://github.com/mlafeldt/cb2util/...15-jul-17-2012

Download of Windows and Linux builds:
https://github.com/mlafeldt/cb2util/downloads

Updated project site documenting the new compile feature:
http://mlafeldt.github.com/cb2util

Need to go to bed now.

[bfoos]

-c, --check
check RSA signature

from http://mlafeldt.github.com/cb2util/

You need to add the compile stuff there and reflect that the former -c, --check is now -v, --verify

[misfire]

Reload the site and search for "-c". All matches are related to --compile.

That change is also in the HISTORY.md file.

[bfoos]

Yup saw that.

Just compiled 1.5. Going to try...

$ for file in day1_txt/*.txt; do ./cb2util cbc --compile "$file" > "${file%txt}cbc"; done

That should compile all text files in day1_txt to filename.cbc, correct?

Crap, nope, sure doesn't.

[root670]

Will proper encryption of v8+ CBCs ever be possible? "Proper" meaning you wouldn't need to use CB 9.2 with the RSA fix.

bfoos: I haven't tried this, but I think the > symbol isn't needed.

[bfoos]

Oh crap, you are correct!

GoodCBC compiled!

First post updated with a link to the compiled GoodCBC set.

[misfire]

Will proper encryption of v8+ CBCs ever be possible? "Proper" meaning you wouldn't need to use CB 9.2 with the RSA fix.

Nope. Unless someone can factorize that number or tortures CMX to get the private key.

(And in case you haven't noticed, there's a message in all CBC files at the place where the RSA signature is supposed to be. )

[bfoos]

I vote for the torturing CMX option and hereby nominate LiquidManZero to do the deed, as he lives the closest.

Can I get that seconded?

[Pyriel]

Seconded, thirded, fourthed, and you'll probably actually need torture because I wouldn't be shocked if he's used the same private key elsewhere.

[Lazy Bastard]

That would be pretty terrible security.

Despite his probable dislike of misfire, someone might actually be successful in simply asking CMX for the private key (assuming Pyriel's theory is wrong, heh); it's possible that he no longer cares about it.

[root670]

He might still have some contract from Pelican preventing him from doing this. I bet people would pay good money if he released the whole source for CodeBreaker, if licensing issues wouldn't prevent him. I can only dream... Of course we'd all like it for free too haha

[Pyriel]

I imagine Skiller still chats with him every now and again. I think I'm still sworn to secrecy about some of the help CMX provided Skiller back in the day. Although, I can say, without divulging anything specific, that I always thought there had to be some reason why CMX refused to divulge the private key, create a server-side script for generating Day 1 files, or just let Skiller have access to a tool that could sign files. It didn't make sense to have such security on those files in the first place. That was proven when he released upgrade files that removed the signature check. It just seems like there has to be some dark secret or contractual obligation keeping that thing under lock and key.

Of course, it also could be that he just doesn't give a damn. The man used me for free* customer support for years, and I don't think he ever seriously entertained any of my requests for help making that easier. I had to try to break the CB7 encryption myself after that came out. I got about half done and gave up because the next step involved math that I barely remembered once having an inkling of. Misfire did more to make customer service possible on that site than CMX did, honestly.

*OK, so he once offered me a free CodeBreaker when a new version came out. I'm sure it's still on his desk somewhere, waiting for a shipping label.

[bfoos]

All of that shhhh I have a secret stuff Skiller used to do, drove me crazy. I have a special PS2 someone made me. Szalay has one too, shhhhh.

Anyway, LiquidManZero... You have some torturing to do.

As an aside, GoodCBC is officially complete from start to finish. Every cbc file the GH Day1 modded ELF files pulls will contain nothing but glorious RAW codes.

Thanks to all who made this possible!

[bfoos]

(And in case you haven't noticed, there's a message in all CBC files at the place where the RSA signature is supposed to be. )

CFU.NO U! Yeah, wonder what the CFU is about. Cheat file utility? Is he saying fuck you to himself? But yeah, I noticed your message. I was tempted to release a full set with a message of my own, but decided against it...

sartcon.cbc

Tryin to catch me compilan dirty.

[root670]

CBSs have the same CFU header at the top