Running NXE -> GOD games on a dual nand machine

[Trimesh]

OK, I just modded one of my machines (a trinity) with a Demon board + CR3 lite. It's working really nicely, but there is something that is bothering me. Normally, if you install a game from NXE, it gets flagged as a NXE install and you have to use the original disk to boot it. If you do it from the hacked NAND, then it gets installed to the HDD as a GOD container, and doesn't need the disc to be present to run.

If you do this, is it possible to run the installed games from the retail dash, and if so is it safe to do so?

 

[Taijigamer2]

Installing the game on a jtag/ RGH through NXE is the same as creating a GOD container so they are safe to use online providing your retail disc is in dvd drive. If you installed your game through FSD then the retail side won't recognise it as it won't be in a standard container in \content\0000000000000000. RGH/ Jtag simply removes that security check.

 

[AllyNerd]

Installing the game on a jtag/ RGH through NXE is the same as creating a GOD container so they are safe to use online providing your retail disc is in dvd drive. If you installed your game through FSD then the retail side won't recognise it as it won't be in a standard container in \content\0000000000000000. RGH/ Jtag simply removes that security check.

you 100% about that? I thought it was a god like container similar but not the same exact. I could be wrong though

 

[Taijigamer2]

They are exactly the same. The console rips the game into pieces and places them in a container in the content\0000000000000000. Theonly difference is a retail box has the security check in its NAND that requires the disc to be present while a jtag/RGH has his check removed. Either rip the game in NXE or rip to iso and then convert using iso2god, the end result is the same.

 

[PetrozPL]

100% true. This flag in GOD container tells console that this is installed game, and require DVD retail disk check during startup. It's the only difference. All retail HDD games (XBL Marketplace/Installed/Ripped through ISO2GOD) are in GOD container format. ISO2GOD ripped gamed doesn't have valid sign, so they cannot be used on retail consoles. Installed games have flag to check retail disks, but on RGH consoles this check is disabled - i think it's patched to always return true . It's also a good thing, that installing games from disc while in RGH won't break any sign, so it still can be used on retail console with retail disc.

While I was writing this, I realized one thing. Installing games on HDD makes those games "valid" on retail consoles, so It must be signed in some way, to allow hypervisior to run this code. It can't be on-the-fly signed with master key, because installation works offline and nothing is send/received from M$ servers, so it has to be signed with console key (to make it at least visible as uncorrupted in HDD file browser) just like save games or profiles.

And my thought is : can't it be signed externally with our key and with this retail disk check flag disabled?

Probably it's not that simple and M$ wasn't that stupid to allow self signing with console keys Maybe installed game uses master sign from DVD disc to verify if it's valid, or maybe discs contains valid master sign for GOD container?

Anyone have this kind of knowledge?

 

[gavin_darkglide]

Anyone have this kind of knowledge?

If someone had this kind of knowledge, other than microsoft, then we would not need jtag/rgh/r-jtag to run homebrew. Since the xbox community does not have software to digitally sign an XEX/God Container, this is the only way that we can run unsigned code.

 

[PetrozPL]

hmm... good point. If console key could be used to sign xex/god containers, then homebrew could be signed and run on any console with just a knowledge of a single console key...

Although, still don't know how exactly this whole signing stuff is working. There are "two" keys... master key on M$ side and console specific key. Master key creates signs, and any console key can be used to decrypt/validate this sign? But how about save games and profiles. Those are signed with console key, and can be used on any console...

I'm probably missing here something important ... probably due to lack of deeper knowledge about whole system security and/or cryptography at all.