Nagra Hex block Decryption

Status
Not open for further replies.
no problem jimmy

cultive the peace is the best

so i need help for sti 7105 juc / jud - i have two model french manufactured by pace im search open uart

thanks for ...................
 
I have a dump from my upc cablecom 1862 ci modulo. Can never help me ecwpk to dcwpk calculate?
 
hello guys, can be obtained from CAM MODULE the RSA + CWPK keys ?? The CAM is not paired with the card.
 
may be im alone want work about fr box or fr worker wait a solution ............................................
 
i have read 2 cam+ ups nagra ic 45db161e and 1 cam+ rds nagra ic 45db161d
i nead find rsa and bk

UPC CARD

ATR = 3FFF9500FF918171FE4700444E415350313432205265764730 3612
VER.= DNASP142 RevG06

SERIAL HEX = 3EF17BD2
SERIAL DEC = 1056013266-70

-----------Prov. info------------

SYSTEM TYPE= 6C 11
IRD = 6B 31 B6 DF (1798420191-109)
DATE IRD = 14.03.2017
ULT. EMM = 13.02.2017

----------Card info-----------

ATR = 3FFF9500FF918171FE4700444E415350313432205265764730 3612
VER.= DNASP142 RevG06

SERIAL HEX = 3EF241A1
SERIAL DEC = 1056063905-10

-----------Prov. info------------

SYSTEM TYPE= 6C 11
IRD = 6B 31 BF 15 (1798422293-109)
DATE IRD = 09.08.2017
ULT. EMM = 14.07.2017


GirlShare - Download upc + rds nagra3.rar

thanx alll
 
IRD:
6B31BF15
BK:
7FA296F581A4A99B
RSA:
ACA012AD1CB5F645CFBBEC4BF882D2A5D33D4EC7FF770822DA621B53C8BDE6BACACC340BE55D095931580D750A2ECD5D4317E62F07E789F18082C9D6707FAD7D
IDEA3310:
68C7762C7F3BEAD9C049A1806FC2A7D7
RSA3460:
B1C44B6FAEBE98CAB3603F4E7F11B8105B91B1C31457F901B9906AD3C0C0883F216D4D3141E262C4611F0EA901E7B6EBF418303C3CC2AB24ABBF651BB46B605AA47729AE9248C90DD3751190B512491058F1B7922830FA7BF7A08A2C24C97C43
RSA3588:
C747143E0B7D6E742B78B76D43CE6123A28B8CD80013540E1C7BBE93B21B9CFA5AFFE642C59BB6EB96FA5864B6CFB597EF1A6C889A467F0AA166AC4A465632180BC2E04308A5F3A2AD07C867AC27464DBA2C754984FC7F479D22F94F81C859ADA79BAFC248B9BB51A772C3B404C6ADD5BEB7993014C5BB9504DE09665B2EEABE5C19D7CB7A3D8FBF
 
receiver box kaon na1000 mx25l3255
i finde 017c and 0097
only rsa bk no cak7
thanx
 

Attachments

  • boxhd.rar
    864.2 KB · Views: 48
Any help rsa and box find ?

Probably offset for encrypted block @ 003A0000

Check entropy with 3des:
DB1C472E91F8DF51
DB1C472E91F8DF51

And later AES:
10A5069E7D56F8C710A5069E7D56F8C7
10A5069E7D56F8C710A5069E7D56F8C7 => what could be either 00s or FFs padding

Just get bootloader in plain from RAM and disassembly code then get generic key for decrypt this flash content...and most stb flashes.
 
Last edited:
IRD:
6B31BF15
BK:
7FA296F581A4A99B
RSA:
ACA012AD1CB5F645CFBBEC4BF882D2A5D33D4EC7FF770822DA621B53C8BDE6BACACC340BE55D095931580D750A2ECD5D4317E62F07E789F18082C9D6707FAD7D
IDEA3310:
68C7762C7F3BEAD9C049A1806FC2A7D7
RSA3460:
B1C44B6FAEBE98CAB3603F4E7F11B8105B91B1C31457F901B9906AD3C0C0883F216D4D3141E262C4611F0EA901E7B6EBF418303C3CC2AB24ABBF651BB46B605AA47729AE9248C90DD3751190B512491058F1B7922830FA7BF7A08A2C24C97C43
RSA3588:
C747143E0B7D6E742B78B76D43CE6123A28B8CD80013540E1C7BBE93B21B9CFA5AFFE642C59BB6EB96FA5864B6CFB597EF1A6C889A467F0AA166AC4A465632180BC2E04308A5F3A2AD07C867AC27464DBA2C754984FC7F479D22F94F81C859ADA79BAFC248B9BB51A772C3B404C6ADD5BEB7993014C5BB9504DE09665B2EEABE5C19D7CB7A3D8FBF

N60 for 6B31BF15 =>A9042F01B4A87B6235187EA4DA15A0F0CBF56EE8CAF5F46C18576C277CBEDF836E8AB93402301D7B2084FA5190F05527C07707B3C0FCC2B05B248E5B511FAA58968F16D266C844940840F8EF8A870B66743074B3CB204ECDF1E49A0F9AE0A67D
 
Status
Not open for further replies.
Back
Top