PlayStation 5 ROM keys may be out in the wild, opening new possibilities for emulation

Alfonso Maruccia

Posts: 2,511   +934
Staff
What we know so far: Over the past few days, unknown hackers have leaked the security keys Sony uses to safeguard the PlayStation 5's chain of trust. Known as BootROM keys, the data could – at least in theory – dramatically accelerate the PS5 hacking scene, cracking open what has long been a black box of custom hardware logic and tightly controlled encryption methods.

The new year is already delivering an unexpected jolt for emulation and console modding fans. According to multiple reputable sources, the PS5's most deeply buried secret keys have surfaced online, potentially offering developers and researchers a powerful new foundation for future experimentation.

A report from The CyberSec Guru traces the alleged leak to two well-known figures in the console hacking scene: BrutalSam_ and Shadzey1. BrutalSam_ reportedly posted information about the keys on X, where the content was swiftly taken down. Shadzey1 later corroborated the leak, further lending credibility to the claims.

The PS5 ROM keys are now out in the wild, circulating on both legit sites such as the PS5 Developer wiki, and shady corners of the internet such as 4chan. The keys are essentially part of the PS5's innermost hardware components, and are accessed by the CPU almost immediately after the system powers on.

Their role is fundamental: the keys verify the digital signature of the boot loader, which then initializes the PS5 operating system's kernel. Only after this verification chain is complete does the console allow users to launch their legally purchased games and applications.

Until now, hackers and modders have focused primarily on attacking the PS5's OS kernel or its WebKit-based browser operating in userland – efforts that have produced limited results.

With access to the BootROM keys, researchers can now dig much deeper, gaining clearer insight into how the PS5's hardware functions. The ninth-generation console is based on a custom SoC design developed by AMD, with CPU and GPU elements derived directly from the x86 PC world.

As The CyberSec Guru explains, the leaked keys effectively dismantle a critical layer of the PS5's security architecture. Armed with this information, modders can pursue more powerful exploits, work toward permanent custom firmware, and improve Linux support on PS5 hardware.

The discovery could even hint at a return to a so-called "golden age" of PlayStation piracy, back when GeoHot was doing some very wicked things with the PS3 hardware. In response, Sony may eventually be forced to release a new PS5 hardware revision, rotating the compromised keys without disrupting the core functionality of millions of consoles already in use.

Beyond exploits and custom firmware, the BootROM leak could ripple through the broader modding and emulation ecosystem. Developers now have the opportunity to examine how the PS5 – and even the PS4 – differs from standard PC hardware, from low-level system features to proprietary GPU graphics calls. As a result, emulation projects like shadPS4 could see meaningful gains in compatibility and performance on PC, potentially bringing long-coveted exclusives such as Bloodborne closer to full playability.

Permalink to story:

 
With nearly all ps5 games being available on pc, there is nothing exciting about it.
IKR? PS used to be my to go gaming platform, but now... no exclusives, whatever they had left already released for the PC, for VR the Quest is more convenient to use, and they won't even release Astro Bot, the best VR game ever for the PSVR2. Oh and it's all locked down, of course. For instance, on the Quest I can just copy custom songs for Synth Riders without sideloading or anything, literally just plug in via USB-C, copy in File Explorer, done. On the PS, outta luck buddy!

Not to mention that backing up saves to the cloud requires a PS Plus sub, which is like crazy expensive now. The PS4 had an option to back up to USB, of course they removed it with the PS5. I might as well add that on the Xbox you get free cloud saves for free.

Whenever the PS6 releases, I'll have to seriously reevaluate my gaming environment for sure.
 
Everyone’s hyped about piracy, but the real winner here is the Bloodborne-at-60fps-on-PC crowd. If this ends with PS5 Linux running better than Sony’s own UI, that would be the most PlayStation outcome imaginable.
 
Everyone’s hyped about piracy, but the real winner here is the Bloodborne-at-60fps-on-PC crowd. If this ends with PS5 Linux running better than Sony’s own UI, that would be the most PlayStation outcome imaginable.
So… maybe 7 people benefit from that? Whereas countless thousands benefit from a jailbreak? Yeah… Bloodborne @60fps on a pc is the winner…
 
Its known with DRM or such security, that sales of original copy's of games are usually not hurt.

Meaning; the PS5 is about to end it's lifespan anyway with the PS6 coming next year. The security features where tough enough for them to have a console secure for the last 5 years since release.

 
Isn't Moore's law coming to an end soon? How long until there's a computer that can run a PS5 emulator at full speed?
 
Isn't Moore's law coming to an end soon? How long until there's a computer that can run a PS5 emulator at full speed?
You don’t need “emulation” to run x86 code on x86 hardware. Both current PCs and the Ps5 are x86. AMD APU with marginal adjustments.
 
You don’t need “emulation” to run x86 code on x86 hardware. Both current PCs and the Ps5 are x86. AMD APU with marginal adjustments.
The OG xbox would like a word with you. Just because both are x86 doenst mean that running the code is a trivial task.
IKR? PS used to be my to go gaming platform, but now... no exclusives, whatever they had left already released for the PC, for VR the Quest is more convenient to use, and they won't even release Astro Bot, the best VR game ever for the PSVR2. Oh and it's all locked down, of course. For instance, on the Quest I can just copy custom songs for Synth Riders without sideloading or anything, literally just plug in via USB-C, copy in File Explorer, done. On the PS, outta luck buddy!

Not to mention that backing up saves to the cloud requires a PS Plus sub, which is like crazy expensive now. The PS4 had an option to back up to USB, of course they removed it with the PS5. I might as well add that on the Xbox you get free cloud saves for free.

Whenever the PS6 releases, I'll have to seriously reevaluate my gaming environment for sure.
This was my opinion when I got a PS4, and I never got a PS5 as a result. Compared to the 2 and 3, Sony's exclusive library is pathetic.

Maybe Microsoft is onto something with making their consoles fully PC capable....
 
The OG xbox would like a word with you. Just because both are x86 doenst mean that running the code is a trivial task.
I never said it's "trivial".

I said it's not about emulation. Or computational limitations. x86 automatically runs on x86 hardware, period. There's nothing to be "emulated". It's just a matter of runtimes and APIs. That's not emulation. Cerny picked the core / CU count and clock speeds and whatnot, that's all the "customization" they did.

The limitations that are in place are 100% artificial. It's a software lockdown around commodity off the shelf x86 hardware. They even purposefully use their own exclusive graphics API, unlike the Xbox that uses plain DX. They could've used Vulkan for universal compatibility, but nope, you want PS sales, you use our API.

But I don't see a single reason why GNM(X) couldn't be translated into DX. Or Vulkan. In fact, that's precisely the method that Steam on Linux does already with Proton, translate DX to Vulkan. It's not magic.
 
I never said it's "trivial".

I said it's not about emulation. Or computational limitations. x86 automatically runs on x86 hardware, period. There's nothing to be "emulated". It's just a matter of runtimes and APIs. That's not emulation. Cerny picked the core / CU count and clock speeds and whatnot, that's all the "customization" they did.

The limitations that are in place are 100% artificial. It's a software lockdown around commodity off the shelf x86 hardware. They even purposefully use their own exclusive graphics API, unlike the Xbox that uses plain DX. They could've used Vulkan for universal compatibility, but nope, you want PS sales, you use our API.

But I don't see a single reason why GNM(X) couldn't be translated into DX. Or Vulkan. In fact, that's precisely the method that Steam on Linux does already with Proton, translate DX to Vulkan. It's not magic.
There is much more than x86 to be worry about. Ps5 cpu have its own microcode and dedicated instructions set. Sure, 95 pct of instructions are taken directly from amd, but many other ones ps5 specific has been implemented as well. And those has to be emulated as standard amd apu simply do not have implemented them into their hardware. This is issue now and was main issue with ps4 which is as well x86 at core yet not so easy to emulate.
 
I don't think so.

I never owned a PS4 or PS5. I'm using ShadPS4 to experience Bloodborne right now for the first time (started playing it on January 1st). It requires a few patches and mods, but once you set it up properly, seems to be a flawless experience so far. I'm playing it at 60fps with 1080p internal rendering, and it's running very smoothly.

In fact, I wasn't expecting it to perform so well. PS4 emulation seems to be better optimized than PS3 which can still bring my PC to its knees sometimes, maybe because the PS4 uses x86 instructions (I know it's not that simple like others pointed out, but probably still less demanding than emulating the mess that the PS3's Cell CPU is).
 
I never owned a PS4 or PS5. I'm using ShadPS4 to experience Bloodborne right now for the first time (started playing it on January 1st). It requires a few patches and mods, but once you set it up properly, seems to be a flawless experience so far. I'm playing it at 60fps with 1080p internal rendering, and it's running very smoothly.

In fact, I wasn't expecting it to perform so well. PS4 emulation seems to be better optimized than PS3 which can still bring my PC to its knees sometimes, maybe because the PS4 uses x86 instructions (I know it's not that simple like others pointed out, but probably still less demanding than emulating the mess that the PS3's Cell CPU is).

If the game needs multiple patches and mods and fixes to barely run, albeit in a satisfying way on a powerful enough PC, the game is NOT considered to be generally playable.

The developers say so. Mind you: I'm actively tracking the latest changes coming to advanced emulators such as shadPS4, so I know pretty well that you can actually play Bloodborne on PC already. I'm eventually planning to do so myself, if I can stop being obsessed with Elden Ring sometime in the future :-D
 
There is much more than x86 to be worry about. Ps5 cpu have its own microcode and dedicated instructions set. Sure, 95 pct of instructions are taken directly from amd, but many other ones ps5 specific has been implemented as well. And those has to be emulated as standard amd apu simply do not have implemented them into their hardware. This is issue now and was main issue with ps4 which is as well x86 at core yet not so easy to emulate.

I do not believe the ps5 has any custom instructions, do you have a link to confirm this? Even if it does this is not a barrier, you would just run a patching algorithm on loading the binary and patch them out into a function call to emulate them.

Things like microcode also do not matter at all.

The X86 code of ps5 games can almost certainly run virtually untouched. The hard work will be in implementing a proton style translation layer so the system calls all work. Once that is done, performance should not be a huge problem. Just look at SteamOS.
 
I do not believe the ps5 has any custom instructions, do you have a link to confirm this? Even if it does this is not a barrier, you would just run a patching algorithm on loading the binary and patch them out into a function call to emulate them.

Things like microcode also do not matter at all.

The X86 code of ps5 games can almost certainly run virtually untouched. The hard work will be in implementing a proton style translation layer so the system calls all work. Once that is done, performance should not be a huge problem. Just look at SteamOS.
Oh first thing on my list is kraken, then you have io modification, fp pipes, coherency engine, pssr. I'm sure if you get deeper you'd find more hardware level modification, which actually resulting in sillicone changes. Kraken is part of custom io SOC. I'm sure there are much more changes, all the audio stuff is hardware as well and is in soc.
 
IKR? PS used to be my to go gaming platform, but now... no exclusives, whatever they had left already released for the PC, for VR the Quest is more convenient to use, and they won't even release Astro Bot, the best VR game ever for the PSVR2. Oh and it's all locked down, of course. For instance, on the Quest I can just copy custom songs for Synth Riders without sideloading or anything, literally just plug in via USB-C, copy in File Explorer, done. On the PS, outta luck buddy!

Not to mention that backing up saves to the cloud requires a PS Plus sub, which is like crazy expensive now. The PS4 had an option to back up to USB, of course they removed it with the PS5. I might as well add that on the Xbox you get free cloud saves for free.

Whenever the PS6 releases, I'll have to seriously reevaluate my gaming environment for sure.

Astro Bot, Astro’s Playroom, Gran Turismo 7, Demon Souls Remake, Bloodborne, Infamous Second, Infamous First Light, Resogun, The Last Guardian, The Order 1886, Shadows of the Colossus, Ico, Tearway Unfolded, Concrete Genie, The Uncharted Collection, Little Big Planet 3, Dreams, Gravity Rush 2, Ratchet & Clank 2016,
Flower, Journey, Knack, Killzone Shadow Falls..etc
 
Astro Bot, Astro’s Playroom, Gran Turismo 7, Demon Souls Remake, Bloodborne, Infamous Second, Infamous First Light, Resogun, The Last Guardian, The Order 1886, Shadows of the Colossus, Ico, Tearway Unfolded, Concrete Genie, The Uncharted Collection, Little Big Planet 3, Dreams, Gravity Rush 2, Ratchet & Clank 2016,
Flower, Journey, Knack, Killzone Shadow Falls..etc
I believe Flower and Journey are no longer PS exclusives....
 
Astro Bot, Astro’s Playroom, Gran Turismo 7, Demon Souls Remake, Bloodborne, Infamous Second, Infamous First Light, Resogun, The Last Guardian, The Order 1886, Shadows of the Colossus, Ico, Tearway Unfolded, Concrete Genie, The Uncharted Collection, Little Big Planet 3, Dreams, Gravity Rush 2, Ratchet & Clank 2016,
Flower, Journey, Knack, Killzone Shadow Falls..etc
How many of those are PS5 exclusives? Pretty certain most of those are PS4/PS3 games.
 
I believe Flower and Journey are no longer PS exclusives....

I have flower on PS3, and also bought it on Steam. Journey is also available on Steam. I have that too.
In fact many previous PS3 games are now legit PC purchases, and usually low price. Even Uncharted.
 
Astro Bot, Astro’s Playroom, Gran Turismo 7, Demon Souls Remake, Bloodborne, Infamous Second, Infamous First Light, Resogun, The Last Guardian, The Order 1886, Shadows of the Colossus, Ico, Tearway Unfolded, Concrete Genie, The Uncharted Collection, Little Big Planet 3, Dreams, Gravity Rush 2, Ratchet & Clank 2016,
Flower, Journey, Knack, Killzone Shadow Falls..etc
None of those except astro bot requires ps5 emulation.
 
Back