How to convert eCWPK to dCWPK

[starsurfer]

I have dump with following data.
Can someone help me ?

Regards
StarSurfer

SoC is a STi 7105 KUD

Block Header: 000001B1
MAGIC Data:
IRD = 0x 6B79E473
IRD = 1803150451
key(2008) = 67A99088B113A1AF
key(3008) = 5B027997D87596C9
key(3140) == (RSA) = 90C2C427E76113D982F740F65663AC3A684013C707DE3CFF710F327A87CA6E621F4C8A5AA21BFABFCF997F4C9655A07BFD22AD230B499E2D3D3DC373F198BCD5
key(3240) == (RSA) = 9F412CF1ABCA75CD28140E0E267146CBE4FC9D8C0F1C183CF75BD458F943AB632AC896101ABBDF89F13B1F9D60CC8B6B80C06359AC2A3B91DFEBBEAC8F9BF777
key(3310) = F1359B3FAB0258874362EFFC12BECD76
key(3460) = DAB29A61238D766C858CBA46F29F49B8236D8E846F400053529D7505B7EBC26E373B63D4DBE45F6FC8751736FBE41304492936E5CC14308FB3F1D90621E232542ED5A947001CA6607C87F7620CC8B51BE52D5E36B4ADB23727ACCD53B1E35CEF
key(3588) = F80785E27E4C80F7EAFFC74A9A71E4E917A602BC4804B04947E3D0C0BB78D00718DA2FDC54AECFF1B705896E141ACDE34E5AE65DA4F2B6BAD2ABA124E1C2469966D13A83FC7FF5F5999E4514C8C4EE442DC941B0F5A285D714F4056F7F4CC2B177D3B47B6621A78492FB50BEF93A668564D8F45C118D54FB9FEDA30FE76F3138CA2677F32A212E55
key(D008) = E9CE27A73ABE27FF
key(E002) = 0001
key(D008) XOR key(3008) == (BoxKey) = B2CC5E30E2CBB136

LOG Created by:
Crypto Calc & Logger & N@GRA CAK7 Data Finder & CWPK Decrypter


Searching... 0x 000000B3
String was not found in file

Searching... 0x 00000097
String was found at offset 0x40000
String length 0xC0
NUID = 0x B49A27F2
NUID = 3030001650

Block Header: 00000097
NUID = 0x B49A27F2
NUID = 3030001650
0001
Provider ID: 0401
010001
Header CWPK: 0x81
Header CWPK key sizes: 0x10
CWPK0 Encrypted: 93D2559674C5157CE005E94B9C28B09E
CWPK1 Encrypted: C7E7D50437F7B2A52AF6BB8A6B0099AD
CWPK2 Encrypted: 303B250CBC59297555A198C94CBC7055
CWPK3 Encrypted: 57A9229DCD9FA926C5802DF1F529BEEE
CWPK4 Encrypted: 497E701CFFF2B37ADAEFD433D0AF7A41
CWPK5 Encrypted: FA3AF2032EAFC835E9E1B6D4B941B893
CWPK6 Encrypted: 234EC088CAC4A04F2D6A19163EB215AE
CWPK7 Encrypted: D45DA7D8C316A2A7BE223770955EB1EA

 

[Benfica200]

Help in what?

 

[starsurfer]

To get the real nuid and decrypted cpwk

 

[starsurfer]

Here is the dump.
64 MB file on MEGA

 

[Benfica200]

without uart is , and your box use metal_fix_nb= 1, hard to get keys...

 

[terrestrial]

What provider is this?

 

[starsurfer]

Kabel Deutschland Germany

 

[Benfica200]

keys is public, nuid and CK

 

[starsurfer]

And where ?
Greetings Starsurfer

 

[starsurfer]

I think that what you mean is UM02 its not Kabel Deutschland. ;-)

 

[adas]

You need SoC access to calculate dCWPK.

Cau Adas

 

[dognaldo]

I don't know if it serves any purpose .... Do you have an open UART?

 

[starsurfer]

I do not know yet. I have to reball the flash first and that will only happen after my nose surgery. I'll get in touch when I find a UART. Until then, stay healthy.

 

[adas]

Everything is closed in this STB.

Cau Adas

 

[Benfica200]

USB_DEV_Firmware

 

[starsurfer]

@Benfica200 OK, and how does that help us? you said the key was public.

 

[starsurfer]

I don't know if it serves any purpose .... Do you have an open UART?

hi @dognaldo thanks for your picture where does this extract with the S29.bin come from?

Greetings
StarSurfer

 

[dognaldo]

Serious that you don't recognize your own file?
i just rename our S29GL512S10DHI02@BGA64_20210328_204706.BIN to S29.bin !!!

 

[starsurfer]

different filename and the decryptet part just amazed me. how did you get the unencrypted part?

 

[Benfica200]

different filename and the decryptet part just amazed me. how did you get the unencrypted part?

this decrypted key not OK but put this on oscam and your see...