Monday, August 21st 2023
NVIDIA BIOS Signature Lock Broken, vBIOS Modding and Crossflash Enabled by Groundbreaking New Tools
You can now play with NVIDIA GeForce graphics card BIOS like it's 2013! Over the last decade, NVIDIA had effectively killed video BIOS modding by introducing BIOS signature checks. With GeForce 900-series "Maxwell," the company added an on-die security processor on all its GPUs, codenamed "Falcon," which among other things, prevents the GPU from booting with unauthorized firmware. OMGVflash by Veii; and NVflashk by Kefinator (forum names), are two independently developed new tools that let you flash almost any video BIOS onto almost any NVIDIA GeForce graphics card, bypassing "unbreakable" barriers NVIDIA put in place, such as BIOS signature checks; and vendor/device checks (cross-flashing). vBIOS signature check bypass works up to RTX 20-series "Turing" based GPUs, letting you modify the BIOS the way you want, while cross-flashing (sub-vendor ID check bypass) works even on the latest RTX 4090 "Ada."
The tools bring back the glory days of video BIOS modding using utilities the likes of NiBiTor (now discontinued). The possibilities of such utilities are endless. You can, for example, flash the BIOS of a premium factory-overclocked graphics card onto your close-to-MSRP graphics card. For cards up to RTX 20-series "Turing," in addition to clock speeds, BIOS modding lets you raise power limits, which have a more profound impact on performance, as they increase boost frequency residency. BIOS modding also gives you control over the graphics card's voltages, cooling performance, and fan-curve, so you can make your card quieter, as long as your cooler can keep the GPU away from thermal limits (which you can adjust, too). With cross-flashing (without modifying the BIOS or disturbing its signature), you are now able to restore a voltage of 1.1 V on your RTX 4090 GPU, if you've got one of the newer models, which ticks at 1.07 V only. You could also flash your FE with a custom-design vBIOS with high power limit, to go beyond NVIDIA's power limits.
OMGVflash author Veii posted a comprehensive thread on the TechPowerUp Forums, which announces the first public beta of the tool, its development history, usage instructions, and some troubleshooting support. Find the thread here. The author has expressed interest in working with TechPowerUp on publishing future versions.
NVflashk author Kefi posted a similar comprehensive thread on TechPowerUp Forums, which can be accessed here.
OMGVflash and NVflashk are independently developed of each other. We've hand-inspected the binary code of both tools and they are free of any viruses or trojans. There's only few code modifications to the original NVFlash tool, to activate the bypass. There's no additional malware payload or anything similar. The file sizes are identical to the unmodified files. VirusTotal also confirms that these patches are legit.
Tampering with the vBIOS will void your graphics card's warranty. As with all modding, graphics card BIOS modding is not without risk, and meant for power users. It is fairly easy to recover from a broken flash, as all current desktop processors come with iGPUs that you can boot from, so you could flash a working BIOS onto the bricked graphics card. Just do remember to back-up your BIOS. You can use either of these tools to extract your current BIOS, or better yet, use GPU-Z for the task.
TechPowerUp editor and author of GPU-Z, W1zzard, will be answering all your questions in the comments section of this post. He has extensive experience with vBIOS internals from his worth with GPU-Z and he has also developed a parser that decodes, processes and organizes the ROM files in our TechPowerUp GPU BIOS Database.
Update 16:44 UTC: Kefi is currently working on a GUI version that makes it easy to backup and flash the BIOS. You can also search our BIOS Collection from within the app and filter on various properties.
Sources:
OMGVflash by Veii, NVflashk by Kefi
The tools bring back the glory days of video BIOS modding using utilities the likes of NiBiTor (now discontinued). The possibilities of such utilities are endless. You can, for example, flash the BIOS of a premium factory-overclocked graphics card onto your close-to-MSRP graphics card. For cards up to RTX 20-series "Turing," in addition to clock speeds, BIOS modding lets you raise power limits, which have a more profound impact on performance, as they increase boost frequency residency. BIOS modding also gives you control over the graphics card's voltages, cooling performance, and fan-curve, so you can make your card quieter, as long as your cooler can keep the GPU away from thermal limits (which you can adjust, too). With cross-flashing (without modifying the BIOS or disturbing its signature), you are now able to restore a voltage of 1.1 V on your RTX 4090 GPU, if you've got one of the newer models, which ticks at 1.07 V only. You could also flash your FE with a custom-design vBIOS with high power limit, to go beyond NVIDIA's power limits.
NVflashk author Kefi posted a similar comprehensive thread on TechPowerUp Forums, which can be accessed here.
OMGVflash and NVflashk are independently developed of each other. We've hand-inspected the binary code of both tools and they are free of any viruses or trojans. There's only few code modifications to the original NVFlash tool, to activate the bypass. There's no additional malware payload or anything similar. The file sizes are identical to the unmodified files. VirusTotal also confirms that these patches are legit.
Tampering with the vBIOS will void your graphics card's warranty. As with all modding, graphics card BIOS modding is not without risk, and meant for power users. It is fairly easy to recover from a broken flash, as all current desktop processors come with iGPUs that you can boot from, so you could flash a working BIOS onto the bricked graphics card. Just do remember to back-up your BIOS. You can use either of these tools to extract your current BIOS, or better yet, use GPU-Z for the task.
TechPowerUp editor and author of GPU-Z, W1zzard, will be answering all your questions in the comments section of this post. He has extensive experience with vBIOS internals from his worth with GPU-Z and he has also developed a parser that decodes, processes and organizes the ROM files in our TechPowerUp GPU BIOS Database.
Update 16:44 UTC: Kefi is currently working on a GUI version that makes it easy to backup and flash the BIOS. You can also search our BIOS Collection from within the app and filter on various properties.
209 Comments on NVIDIA BIOS Signature Lock Broken, vBIOS Modding and Crossflash Enabled by Groundbreaking New Tools
I suppose all threads could be locked by now, I doubt there will be any further development on this
After reading more comments from the creator, it doesn't look like this will except bios created from other programs that you yourself could create and tweak. Only other official nvidia bios. Weren't we already able to take, for example, a pny 4080 and flash it with a gigabyte 4080's bios. I don't understand what we're gaining here.
videocardz.com/newz/chinese-police-make-arrests-in-connection-with-counterfeit-gpu-sales
A common step in the counterfeiting process is editing the GPU's BIOS to change the model that it reports to the system, without regard for stability, if there's enough physical memory present or even if it works at all. BIOS signature restrictions have essentially made this impossible.
Unfortunately you'll find people are more than willing to buy these counterfeits and they won't hesitate to litter tech forums like TPU with their threads demanding BIOS thinking it'll magically fix their scam cards just because they "saved $50 buying this (insert comically bizarre Chinese name) RX 470" and "we shouldn't judge".
As for the article being basically mute, yep. These modified nvflashes can't do much on their own, not all restrictions were removed and with a distinct lack of an editor available, there's not that much you can do with them right now... and it seems everyone involved in developing these tools has disappeared.
www.overclock.net/threads/pascal-bios-editor-any-news.1621789/post-26139322From even longer ago IIRC
Stopped about 5 years ago but still on Github if you want to fork. IIRC there's support for some Turing and a few desktop cards too but only seems functional on mobile which apparently allows broken vbios images as long as flashed by HW SPI programmer. 5$ SPI programmer was always a means to cross flash too and recover while the hacked nvflash being convenient might leave you bricked.
To answer your question, anyone with lack of knowledge can be tricked. And no, they are not "dumbass" as you say, just people with better things to do in their lives than reading countless information before they buy something. A graphics card, a console, a TV, a vacuum cleaner, clothes, shoes, paint, meat....At least those are sold as RX 580s and 480s, not as RX 6600s for example.That GPU-Z was usually the information proving something being fake on eBay. You where looking at a GPU-Z screen saying GTX 970 for example, and the firmware version was the one used on GTX 400 series, again, for example. That was proof that the seller was selling a GTX 400 series card as a GTX 900 series card.