Diablo 3 Retail - Installer Cracking

[Dullface]

2) Complete mined data from the deciphered retail MPQs in .txt format (assuming people request it)

I'll request it right now. Would love to see those .txt files.

[malloc84]

Are you pulling the data from .MPQE files?

[R3d-Dr4gon]

seems that horadric.ru got the right authentication code

Diablo III - Installation Process - YouTube

[xynoman]

nope they didnt, they had earlier in description that they cant extract files

[malloc84]

I can guarantee with 99.99% that no one in the world managed to crack the installer or extract any files from MPQEs. Nor will they succeed till 15.05.2012.

I had few ideas, tried some stuff and got some info but ultimately - no way to extract the files. Making the installer do things is simple. Pure cosmetics.

Only way to "crack" this is to break the salsa20 key to unlock the MPQE files. Since that is insanely hard task, we will have to wait till release date to get the key.

But, nothing is impossible and 2 months is a long time so maybe something happens but I seriously doubt it.

[Muaziz]

Took me 3 days to crack this and make a bypass installer. The game is just near fully installed now.

So you managed to crack the encryption key or did you use some other technique?

[ktion23]

malloc84: that is really pesimist,
salsa20 is a stream cipher and we know the encripted content of some files.

besides cracking it in a distributed fashion...

what about the torrent?

[xynoman]

en.wikipedia.org/wiki/Stream_cipher_attack

we have 3 messages encrypted with one key(mpqs), cant it be done?

[malloc84]

malloc84: that is really pesimist,
salsa20 is a stream cipher and we know the encripted content of some files.

besides cracking it in a distributed fashion...

what about the torrent?

Not pessimist. Realist. I only said that so readers don't fall for those youtube videos showing the installation and stuff. And I will rather admit that I can't do it with standard cracking than to post how I managed to crack it but won't show anything until 15.05....

I would really want to datamine the MPQs till release but it is impossible without breaking the encryption.

I am not a guru in cryptography but I know a few things and trying to attack this key would need a lot of power and properly made software to make comparisons. Also it might be vulnerable to "zero base" style brute force. Keep in mind that this is a VERY long key.

But the problem is there is nowhere to test the stuff except D3. If there was something smaller encrypted with same encryption then testing would be easier.

This way, you need to code the software that will target specifically Diablo 3 MPQE files or the form itself with your "exploit" or just simple brute force.

We can try to make a brute forcer and let it run. Caps A-Z and 2-9. That is the only viable option.

[KOS0937]

@xynoman: this does not apply here as salsa20 is much more complex than just a xor

@all: give it up. the full salsa20 has not been touched so far (several professionals have tried in the last years). The salsa20/8 (with 8 instead of 20 rounds of encryption) was reduced from a 256 bit problem to a 251 bit problem but even that is far too complicated to be brute-forced.

[assuming you can check 1000 keys per second you have about a 1 in 10^66 chance to break a 251 bit problem before the 15th of may by brute force...]

[EDIT: the key for sc2 that was posted in this thread has about 165 bits of entropy, so that your chances are 1 in 10^40 to guess it before the 15th of may @ 1000 tries per second]

EDIT2: Are there more similar keys anybody knows about? The sc2 key that was posted here appears not to be a random string of the characters A-Z0-9....

last EDIT: Looking at all the sc2 keys I can say with a rather high probability, that they are not random. Too bad I cannot find enough patterns make it realistic to brute force them...

[chuanhsing]

sc2 authenticationcode
enUS 3DH5RE5NVM5GTFD85LXGWT6FK859ETR5
enGB G8MN8UDG6NA2ANGY6A3DNY82HRGF29ZH
esES 8WLKUAXE94PFQU4Y249PAZ24N4R4XKTQ
esMX A34DXX3VHGGXSQBRFE5UFFDXMF9G4G54
deDE Y45MD3CAK4KXSSXHYD9VY64Z8EKJ4XFX
frFR ZG7J9K938HJEFWPQUA768MA2PFER6EAJ
ruRU VHB378W64BAT9SH7D68VV9NLQDK9YEGT
ptBR QA2TZ9EWZ4CUU8BMB5WXCTY65F9CSW4E
itIT NE7CUNNNTVAPXV7E3G2BSVBWGVMW8BL2
zhTW U3NFQJV4M6GC7KBN9XQJ3BRDN3PLD9NE

[R3d-Dr4gon]

no, its something which was already posted on the first site....

and these codes doesn't work

[wetwlly]

Bit confused, is this a crack so you don't actually have to buy the game? would appreciate a short explanation =)

If we figured out the key, it would let you installed. It wouldn't let you on live servers because bnet checks your bnet account with their servers. So it wont be possible to play without buying the game, until an emulator is suitably at the same level of the real servers

[Alisamix]

If someone wants to change the Not-Yet-Released message in the installer:

http://www.ownedcore.com/forums/diab...akey-tool.html ([Release] D3 Mediakey Tool)

[3choes]

Is there any way in which you can actually install Diablo III?