Hi,

I would just like to know your comments on this http://theneoproject.com.

Do you think they will get it and if so, how long do you think it will take ?

They're not even sieving. It's a waste of processing power. Do folding@home.

have you seen the program itself ? The speed difference when minimized is ~10x compared to when in showing the window. what a stupid idea to show every tested itteration ... no matter the algo used it`s a stupid thing to do. Heh goes @ 1work unit/1min on my athlon1667

In order to verify the public key, the private key would be kept within xbox hardware. I think a more feasible attack would be the hardware itself. Although, if private key is extracted I guess one couldnt make as much $ with that as they would selling actual modchips? Already been done imo. (: -Sab

Nope, the private key isn't in there. The public key is. It's used for checking the signature on the code that's being loaded.

What someone needs to do is put an easter-egg in a game that will load arbitrary code and then get the game signed...

Would it not be possible to calculate the private key if you had the unsigned software, the signed software and the pub key?

hi sab,

you got the harware reversing view of things, eh ?????
:-)))))

but as mike said, no private key in the xbox - just
normal signature verify...

cya

mac

Nope (at least not faster than any other way).

If it were possible, then digital signatures wouldn't be worth anything, right?

BTW, anyone know what hash is being used? Because usually, they'll sign a padded hash of the data rather than the data itself.

Hi,

Read this nice article about xbox security:
h**p://xbox-linux.sourceforge.net/articles.php?aid=1&sub=Xbox%20Security%20Concept

AdamA