All the current Switch 'keys' and Released 'tools' you will ever need, in one simple 'plain text' posting!

There been alot of 'scene drama' recently, with people going to great horrible lengths to 'leak' keys, everyone seems to be too scared these days to directly post 'keys', unlike the days of PlayStation 'geohot' fame, so here we go a nice collection of all currently released info, which is purely available for your own Educational and Research needs, as there no way YET to play Warez anyway!

Code:

; NINTENDO SWITCH KEY LIST ; ======================== ; By ub3r1337 on 201804.06 ; Obtainable with TrustZone code execution ; All the other keys are derived with this one ; Which gets updated with each major new firmware ; ; SHA256(master_key_00) = 0EE359BE3C864BB0782E1D70A718A0342C551EED28C369754F9C4F691BECF7CA ; SHA256(master_key_01) = 4FE707B7E4ABDAF727C894AAF13B1351BFE2AC90D875F73B2E20FA94B9CC661E ; SHA256(master_key_02) = 79277C0237A2252EC3DFAC1F7C359C2B3D121E9DB15BB9AB4C2B4408D2F3AE09 ; SHA256(master_key_03) = 4F36C565D13325F65EE134073C6A578FFCB0008E02D69400836844EAB7432754 ; SHA256(master_key_04) = -> (unknown still missing as of 201804.06 / for v5.0.x games) <- ; master_key_00 = c2caaff089b9aed55694876055271c7d master_key_01 = 54e1b8e999c2fd16cd07b66109acaaa6 master_key_02 = 4f6b10d33072af2f250562bff06b6da3 master_key_03 = 84e04ec20b9373818c540829cf147f3d ; Obtainable with Package1LDR code execution ; Allows decrypting (package1) ; Which contains the bootloader, warmboot.bin and TrustZone ; ; SHA256(package1_key_00) = 4543CD1B7CAD7EE0466A3DE2086A0EF923805DCEA6C741541CDDB14F54F97B40 ; SHA256(package1_key_01) = 4A11DA019D26470C9B805F1721364830DC0096DD66EAC453B0D14455E5AF5CF8 ; SHA256(package1_key_02) = CCA867360B3318246FBF0B8A86473176ED486DFE229772B941A02E84D50A3155 ; SHA256(package1_key_03) = E65C383CDF526DFFAA77682868EBFA9535EE60D8075C961BBC1EDE5FBF7E3C5F ; package1_key_00 = f4eca1685c1e4df77f19db7b44a985ca package1_key_01 = c2caaff089b9aed55694876055271c7d package1_key_02 = (missing) package1_key_03 = c32009c8cb268ed053052c9237dfd8bc ; Found in TrustZone .rodata ; Derivable from the master_key_## and package2_key_source ; Allows decrypting (package2) ; Which contains the kernel and builtins ; ; SHA256(package2_key_source) = 21E2DF100FC9E094DB51B47B9B1D6E94ED379DB8B547955BEF8FE08D8DD35603 ; SHA256(package2_key_00) = 94D6F38B9D0456644E21DFF4707D092B70179B82D1AA2F5B6A76B8F9ED948264 ; SHA256(package2_key_01) = 7794F24FA879D378FEFDC8776B949B88AD89386410BE9025D463C619F1530509 ; SHA256(package2_key_02) = 5304BDDE6AC8E462961B5DB6E328B1816D245D36D6574BB78938B74D4418AF35 ; SHA256(package2_key_03) = BE1E52C4345A979DDD4924375B91C902052C2E1CF8FBF2FAA42E8F26D5125B60 ; package2_key_source = fb8b6a9c7900c849efd24d854d30a0c7 package2_key_00 = a35a19cb14404b2f4460d343d178638d package2_key_01 = a0dd1eacd438610c85a191f02c1db8a8 package2_key_02 = 7e5ba2aafd57d47a85fd4a57f2076679 package2_key_03 = bf03e9889fa18f0d7a55e8e9f684323d ; Found in TrustZone .rodata ; Derivable from master_key_## and titlekek_source ; Title Key Encryption Key ; ; SHA256(titlekek_source) = C48B619827986C7F4E3081D59DB2B460C84312650E9A8E6B458E53E8CBCA4E87 ; SHA256(titlekek_00) = C2FA30CAC6AE1680466CB54750C24550E8652B3B6F38C30B49DADF067B5935E9 ; SHA256(titlekek_01) = 0D6B8F3746AD910D36438A859C11E8BE4310112425D63751D09B5043B87DE598 ; SHA256(titlekek_02) = D09E18D3DB6BC7393536896F728528736FBEFCDD15C09D9D612FDE5C7BDCD821 ; SHA256(titlekek_03) = 47C6F9F7E99BB1F56DCDC93CDBD340EA82DCCD74DD8F3535ADA20ECF79D438ED ; titlekek_source = 1edc7b3b60e6b4d878b81715985e629b titlekek_00 = 62a24d6e6d0d0e0abf3554d259be3dc9 titlekek_01 = 8821f642176969b1a18021d2665c0111 titlekek_02 = 5d15b9b95a5739a0ac9b20f600283962 titlekek_03 = 1b3f63bcb67d4b06da5badc7d89acce1 ; Found in TrustZone .rodata ; Seed for GenerateAesKek, usecase + generation 0 ; ; SHA256(aes_kek_generation_source) = FC02B9D37B42D7A1452E71444F1F700311D1132E301A83B16062E72A78175085 ; aes_kek_generation_source = 4d870986c45d20722fba1053da92e8a9 ; Found in SPL .rodata ; Seed for GenerateAesKey ; ; SHA256(aes_key_generation_source) = FBD10056999EDC7ACDB96098E47E2C3606230270D23281E671F0F389FC5BC585 ; aes_key_generation_source = 89615ee05c31b6805fe58f3da24f7aa8 ; Found in FS .rodata ; Derivable from master_key_##, aes generation sources, and key_area_key_application_source ; Seed for Key Area Encryption Key 0 ; ; SHA256(key_area_key_application_source) = 04AD66143C726B2A139FB6B21128B46F56C553B2B3887110304298D8D0092D9E ; SHA256(key_area_key_application_00) = 592957F44FE5DB5EC6B095F568910E31A226D3B7FE42D64CFB9CE4051E90AEB6 ; SHA256(key_area_key_application_01) = C2252A0FBF9D339ABC3D681351D00452F926E7CA0C6CA85F659078DE3FA647F3 ; SHA256(key_area_key_application_02) = 7C7722824B2F7C4938C40F3EA93E16CB69D3285EB133490EF8ECCD2C4B52DF41 ; SHA256(key_area_key_application_03) = AFBB8EBFB2094F1CF71E330826AE06D64414FCA128C464618DF30EED92E62BE6 ; key_area_key_application_source = 7f59971e629f36a13098066f2144c30d key_area_key_application_00 = ef979e289a132c23d39c4ec5a0bba969 key_area_key_application_01 = cdedbab97b69729073dfb2440bff2c13 key_area_key_application_02 = 75716ed3b524a01dfe21456ce26c7270 key_area_key_application_03 = f428306544cf5707c25eaa8bc0583fd1 ; Found in FS .rodata ; Derivable from master_key_##, aes generation sources, and key_area_key_ocean_source ; Seed for Key Area Encryption Key 1 ; ; SHA256(key_area_key_ocean_source) = FD434000C8FF2B26F8E9A9D2D2C12F6BE5773CBB9DC86300E1BD99F8EA33A417 ; SHA256(key_area_key_ocean_00) = AA2C65F0E27F730807A13F2ED5B99BE5183165B87C50B6ED48F5CAC2840687EB ; SHA256(key_area_key_ocean_01) = 860185F2313A14F7006A029CB21A52750E7718C1E94FFB98C0AE2207D1A60165 ; SHA256(key_area_key_ocean_02) = 7283FB1EFBD42438DADF363FDB776ED355C98737A2AAE75D0E9283CE1C12A2E4 ; SHA256(key_area_key_ocean_03) = 9881C2D3AB70B14C8AA12016FC73ADAD93C6AD9FB59A9ECAD312B6F89E2413EC ; key_area_key_ocean_source = 327d36085ad1758dab4e6fbaa555d882 key_area_key_ocean_00 = b33813e4c9c4399c75fabc673ab4947b key_area_key_ocean_01 = c54166efa8c9c0f6511fa8b580191677 key_area_key_ocean_02 = 3061ce73461e0b0409d6a33da85843c8 key_area_key_ocean_03 = 06f170025a64921c849df168e74d37f2 ; Found in FS .rodata ; Derivable from master_key_##, aes generation sources, and key_area_key_system_source ; Seed for Key Area Encryption Key 2 ; ; SHA256(key_area_key_system_source) = 1F17B1FD51AD1C2379B58F152CA4912EC2106441E51722F38700D5937A1162F7 ; SHA256(key_area_key_system_00) = 194CF6BD14554DA8D457E14CBFE04E55C8FB8CA52E0AFB3D7CB7084AE435B801 ; SHA256(key_area_key_system_01) = CE1DB7BB6E5962384889DB7A396AFD614F82F69DC38A33D2DEAF47F3E4B964B7 ; SHA256(key_area_key_system_02) = 42238DE5685DEF4FDE7BE42C0097CEB92447006386D6B5D5AAA2C9AFD2E28422 ; SHA256(key_area_key_system_03) = 1F6847F268E9D9C5D1AD4D7E226A63B833BF02071446957A962EF065521879C1 ; key_area_key_system_source = 8745f1bba6be79647d048ba67b5fda4a key_area_key_system_00 = 6dd02aa15b440d6231236b6677de86bc key_area_key_system_01 = 4ab155e7f29a292037fd147592770b12 key_area_key_system_02 = b7a74adeaf89c2a198c327bdff322d7d key_area_key_system_03 = d5aab1acd23a8aec284a316df859d377 ; Found in FS .rodata ; Seed for Header Key Encryption Key ; ; SHA256(header_kek_source) = 1888CAED5551B3EDE01499E87CE0D86827F80820EFB275921055AA4E2ABDFFC2 ; header_kek_source = 1f12913a4acbf00d4cde3af6d523882a ; Found in FS .data ; Seed for NCA Header Key ; ; SHA256(header_key_source) = 8F783E46852DF6BE0BA4E19273C4ADBAEE16380043E1B8C418C4089A8BD64AA6 ; header_key_source = 5a3ed84fdec0d82631f7e25d197bf5d01c9b7bfaf628183d71f64d73f150b9d2 ; Derivable from master_key_##, aes generation sources, and header sources ; NCA Header Key ; ; SHA256(header_key) = 8E03DE24818D96CE4F2A09B43AF979E679974F7570713A61EED8B314864A11D5 ; header_key = aeaab1ca08adf9bef12991f369e3c567d6881e4e4a6a47a51f6e4877062d542d ; Obtainable/Derivable from 0x120:0x130 in all plaintext XCI cartridge dumps ; XCI Header Key (sometimes referred to as Header IV) ; Once obtained, the key needs to be reversed for proper use ; ; Nights of Azure 2: Bride of the New Moon ; ---------------------------------------- xci_header_key = 01c58fe7002d135ab29a3f69339574b1 ; New Untested Keys ; ----------------- ; ; The Count Lucanor Update = 70DEDA522775E174DCAB7B15B18F3190 ; Decrypted (content key) = 68CF11C4CD6F0FDB888B6FBCC6FE7772 ; ; Yooka-Laylee = F28921A36270C34B5476A384A212FC18 ; Decrypted (content key) = 6DC4DB8FE890821FA24E587510F958F8

The above KEYS.md data is included in attached complete ZIP package with the latest versions of HACTool by @SciresM and HACToolGUI by @simonmkwii, with SHA256 hashes by @robiabla and all included Switch keys have been found by myself with the wonderful help of using Google and the various previous BBB releases and other anonymous leaks out there in the wild, enjoy the our MaxConsole Underground Skull & Crossbones Nintendo Switch Package, and any help in adding to the our purely 'educational research list' would be most welcome!