Related to this, every ROM needs a "boot loader" that has to be signed and is verified by the lockout chip.
replyNintendo's boot code is under copyright and thus cannot be used. So the boot code distributed with Libdragon is signed by finding a hash collision with a brute force tool running on the GPU[1]. Fun stuff!
[1] https://github.com/DragonMinded/libdragon/tree/trunk/boot#bu...
The “development” version of that is even crazier: it's a very tiny signed bootloader that does nothing but copies the “real” bootloader into memory, then trampolines into it, such that even developing your own IPL3 doesn't require having to re-brute-force the signature for every build.
replyAnd on top of that, libdragon's IPL3 doesn't just blindly copy the first megabyte of ROM code into RDRAM like the official Nintendo one does, but actually expects the ROM data after it to be a full-blown ELF executable, which it parses out and copies pieces of to the specified places.
Pretty slick stuff.
Fairly recently the chip was studied in detail and replicated. But like most systems of that era, I believe it was circumvented fairly quickly by pirates. The easiest way would be to piggyback a licensed cartridge - unlike the NES, it has to be one with the same region and bootloader as there are several lockout chip variants, but that basic technique still works.
replyI never saw a piggyback cartridge at the time though, or one that was obviously unlicensed. Of course, this could have more to do with Nintendo's legal pressure than with technological possibility.
replyThe main pirating route at the time (a device (oh which there were several) that sat under the N64 and had either an Iomega Zip drive or a CD drive for holding ROMs), had a port for inserting a real cartridge to use its lockout chip.
replyYeah, though piracy is not the same as publishing unlicensed original games (bootlegs) like Xibalba 64.
replyAs far as Nintendo's concerned, it is. Their method of piracy prevention at this point was putting a lockout chip on every cartridge, and attaching their license fee to the lockout chip. Your homebrew cartridge needs one too.
replyI think a lot of the early flashcarts were piggybacks. I was never into that scene though.
reply