3ds Parental Controls Master Key Generator 2014

Exiting System Settings. Upon exit, the system reboots instead of simply returning to home menu. Parental Controls Reset. The following refers to the functionality which generates the Parental Controls 'Master Key'. Mar 17, 2017  Nintendo Switch: Kids Can Easily Bypass Parental Controls. Parents using the parental controls of the Nintendo Switch may need to keep an extra eye on their kids, after it's revealed that the. Parental Controls Pin Reset Nintendo Support.

  1. 3ds Parental Controls Master Key Generator 2014 Download
  2. Master Key Vietsub
  3. Master Key Ep 1 Eng Sub

System Settings allows you to manage various settings, use System Transfer, and use Data Management.

All applications(CTR/TWL) launched by System Settings are launched via APT:PrepareToDoApplicationJump/APT:DoApplicationJump, such as DS INTERNET and System Transfer.

  • 2Data Management
  • 7ExtData

Accessible services[edit]

ServiceLast seen on version
fs:USERv8202
gsp:Gpuv8202
ndm:uv8202
APT:Av8202
ac:iv8202
act:av8202
am:sysv8202
boss:Pv8202
cam:sv8202
cecd:sv8202
cfg:norv8202
dsp::DSPv8202
frd:av8202
gsp::Lcdv8202
http:Cv8202
mic:uv8202
news:sv8202
nim:uv8202
ns:sv8202
nwm::EXTv8202
nwm::INFv8202
nwm::SOCv8202
ptm:getsv8202
ptm:sysmv8202
soc:Pv8202
soc:Uv8202
ssl:Cv8202
y2r:uv8202
qtm:sv8202
cfg:iv8202
hid:SPVRv8202

Data Management[edit]

3DS[edit]

Here you can manage 3DS extra data, and 3DSWare/'Software'.

When managing 3DS Software installed to the SD Card, the title.db is read by the core receiving AM commands. From the title.db file, AM gets a list of installed titles, title sizes and the name of the '.cmd' file for each title, which is used to check the authenticity of the title data(product code, title version, and if an electronic manaual is used, is also kept for each title, in the title.db, but won't be used by the Data Management Utility). For each title listed, it checks if the title is authentic(via the .cmd file). If the title passes authentication, Data Management decrypts/reads the ICN data from the executable NCCH(CXI) and displays it along with the archived title size. If a title doesn't pass authentication, a placeholder icon(light grey with a '?' in the center), name ('????????') and a size of zero are used. Deleting titles removes the title data from the title.db and import.db, and deletes the directory of the content.

DSiWare[edit]

See DSiWare Exports.

System Format[edit]

Most of the System Format is done with FS:InitializeCtrFileSystem. This command updates the high u64 of the keyY stored in movable.sed. Since this keyY was updated, the data stored on SD card(sdmc/Nintendo 3DS/<ID0>/<ID1>) and the data under nand/data/<ID0> is rendered useless, since that data used the old keyY. Since that data is no longer usable, the system then deletes the two above SD/NAND directories.

When you first enter the System Format menu, it will check if a NNID is linked. If there's a linked-NNID, it will then display: 'Are you ready to connect to the Internet to check whether data can be formatted'? Continuing will only result in connecting to wifi for checking in with Nintendo's servers, which may fail if the console is banned. Once that's done it will continue with the usual system-format messages; proceeding will result in the NNID cookie, potentially still present on NAND backups or multiboot scenarios, being invalidated until the next sign-in (at which point even old sessions will be valid again).

3ds Parental Controls Master Key Generator 2014 Download

System Updater[edit]

The system updater title is identical to the regular system settings, except only system update is accessible with this. On dev units, this title can only be launched under certain conditions.

On retail units, this title is accessible in scenarios where you have to update via the Internet to use certain 3DS software other than the home menu. i.e. using the eShop, on a system version less than the current one. When one selects 'Cancel' from here on retail, the system will shutdown. NS launches SAFE_MODE_FIRM for running this title, when the UPDATEFLAG is set during system boot.

Exiting System Settings[edit]

Upon exit, the system reboots instead of simply returning to home menu.

Parental Controls Reset[edit]

The following refers to the functionality which generates the Parental Controls 'Master Key'.

System version, for the mset titleParental controls reset functionality versionInquiry number lengthNotes
1.0.0-X - 6.3.0-Xv08Mostly inherited from the Wii/DSi algorithm which used CRC-32 (0xEDB88320) with custom XOR-out (0xAAAA). 0x14C1 was added to produce the final result.

For the 3DS algorithm, only constants were changed: the polynomial was changed to 0xEDBA6320 and the addition constant became 0x1657.

The input to either function is an ASCII string of the format '%02u%02u%04u' where the parameters are month, day, and low 4 digits of the inquiry number. The low 5 decimal digits from the output u32 are then used for the master key.

Because of the date being used in the algorithm, this results in the master key only being valid on a particular day, though this is trivially defeated by setting the system time to the correct date that the key was generated on.

This had a minor refactor in 6.0.0-X but is functionally identical.

7.0.0-X - 7.1.0-Xv110Introduced a new scheme using HMAC-SHA-256. The HMAC key is loaded from mset .rodata, and differs between regions.

The inquiry number was bumped from 8 digits to 10 digits, but the same function is used to generate the digits as in v0 (derived from MAC address).

All digits of the inquiry number are now actually used in the master key derivation function, as the string format is now '%02u%02u%010u' (month, day, inquiry number). This buffer is hashed (as above), and a little-endian word is read from the start of the output hash. The low 5 decimal digits of this word are used as the master key.

7.2.0-X - currentv210Extension of v1 featuring a number of changes which serve to obscure the HMAC key used.

The HMAC key is now stored in a separate file stored in the CVer RomFS, called masterkey.bin. This is used to update the key independently of the mset title. In order to make this possible, a scheme was devised to encode the required key within the inquiry number - the first digit denotes region, and the next two digits represent the key version. These values match up with values stored in the masterkey.bin header. For compatibility with v1 (as inquiry number length did not change), the version values begin at 10 - when parsing an inquiry number, a 'version' of less than 10 should be handled as algorithm v1.

The HMAC key is now also encrypted in masterkey.bin. This uses AES-128-CTR using a (normal) key in mset .rodata (which differs between regions), with the initial counter value also stored in masterkey.bin.

At some point, Nintendo chose to 'abandon' the original JPN region ID (0), and moved to region ID 9 instead (which usually doesn't exist). It is unknown why they made this change, as the AES key used for both of these IDs is the same.

ExtData[edit]

The ExtData File System for System Settings is as follows:

Master Key Vietsub

FileDetailsSizeFW IntroducedPlaintext
iconStubbed. Always image 00000002.0x4 Bytesn/a
MsetExt.datDSiWare Exports Management0x960 Bytes2.0.0-2Download
Backup.datSD Savedata Backups Management0xf5a0 Bytes6.0.0-11Download
3ds parental controls master key generator 2014 download

MsetExt.dat[edit]

This keeps a record for the DSiWare Exports for a maximum of 300 exports. Each record is in the format:

OFFSETSIZEDESCRIPTION
04Game Code in Little Endian
0x44Reserved

All unused entries are filled with '0xff'.

Backup.dat[edit]

This keeps a record for the 30 save data backup slots for SD Savedata Backups. Each entry corresponds to an individual backup slot.

Entry:

OFFSETSIZEDESCRIPTION
0x0008Reserved
0x80x800 (0x80*16)16 UTF-16 Title Strings
0x8088Title ID
0x8108Unknown
0x8188Total Save Data Size
0x8200x10Reserved

Launch parameters[edit]

3ds Parental Controls Master Key Generator 2014

System Settings can start at specific menus when certain parameters are given.

* - returns to settings menu instead of rebooting

ValueAction
0x01Initial setup (system not actually formatted, music plays earlier)
0x10Internet Settings -> Connection Settings
0x11Internet Settings -> Other Information
0x6eInternet Settings -> Connection Settings
0x6fParental Controls
0x70Parental Controls birthday entry
0x71Data Management
0x723DS Software Management
0x733DS Extra Data Management
0x74DSiWare Management
0x75StreetPass Management
0x76Internet Settings*
0x77Other Settings, second-to-last page*
0x78Touch Screen calibration
0x79Circle Pad calibration
0x7aSystem Update
0x7bSystem Update
0x7cFormat System Memory*
Retrieved from 'https://www.3dbrew.org/w/index.php?title=System_Settings&oldid=20366'

mkey is a master key generator for the Parental Controls functionality on various consoles from a certain vendor. Currently, this includes the Wii, DSi, 3DS, Wii U and Switch.

This allows resetting Parental Controls (due to being locked out) without having to contact customer support.

If you would just like to use this, with no concern for the code or how it works, visit: https://mkey.salthax.org/

v2 support was initially implemented in October 2015, and has been serving the above page since December 2015. v1 and Wii U support was added in January 2016. v0 support was added in April 2016. v3/Switch support was added in July 2017. v4 support was added in April 2019.

Python and C implementations are available in this repository. These function very similarly.

As of writing, system support is good - all algorithms in use are supported, provided one can extract the necessary keys from the system firmware.

For some algorithm versions (especially 3DS v2) many keys are required from the system firmware in order to generate master keys. These can differ between regions and system versions. The best documentation for these is in the code, which covers the situation on all supported devices.

The v4 algorithm on the Switch and likely any future algorithms also require a console-unique device ID stored on the system that Nintendo can retrieve using the separate, visible serial number one must provide via the support call. The security in this relies upon the device ID being hard to obtain by simply using the device. This would make the generator more of an academic exercise rather than a practical tool.

Some 3DS-specific documentation on the algorithms seen so far can be found at: https://3dbrew.org/wiki/System_Settings#Parental_Controls_Reset

License

mkey is distributed under the AGPLv3 license, see LICENSE.

ctr.c, ctr.h, utils.c and utils.h are taken from ctrtool, which is licensed under MIT, see LICENSE-ctrtool.

Credits

Master Key Ep 1 Eng Sub

  • marcan for the Wii reset tool: https://wii.marcan.st/parental
  • neimod for the 3DS v0 reset tool: https://github.com/3dshax/ctr/commit/bcb3734b9a26d0fe7ef66f7d3814406fee797303
  • SALT greetz: WulfyStylez and Shiny Quagsire (^: