Nagra Hex Block Decryption Research

[viperx32cwpk]

 

[schnucki]

@viperx32cwpk really interesting post from you
Can you also contribute something qualified ?

 

[schnucki]

Digging I have found just DT08 tool but not the DT06 expand ...

I have studied this tool DT08 and can understand everything.
at the top the first two are converted to the modulus by an xor, then RSA is calculated and then IDEA
many thanks

 

[vladtimmy]

hii all i have vodafone camasame cpu cap210 but change eeprom 95128 and block 016c itis cripto

 

[electron112]

see me in skype

 

[pop_eye]

Hello any kind soul, is it ok to post in this thread about blck decr or need to open a new thread.
I have tsop dump...have identified IRD, but not finding 16c , 9882, IDEA+0303 sequence ..or anything related.

b cm box update from old 2002 tech to the new tech...acquired from provider...tech not older then 2018..
cak7 most probably. is it possible to do or not...where to look ?

already tried decryption ..but right now is like pulling
this is for hobby no commercial...
Not sharing more details...hope by pm someone can take a look.

 

[pachecoso]

Hello any kind soul, is it ok to post in this thread about blck decr or need to open a new thread.
I have tsop dump...have identified IRD, but not finding 16c , 9882, IDEA+0303 sequence ..or anything related.

b cm box update from old 2002 tech to the new tech...acquired from provider...tech not older then 2018..
cak7 most probably. is it possible to do or not...where to look ?

already tried decryption ..but right now is like pulling
this is for hobby no commercial...
Not sharing more details...hope by pm someone can take a look.

send your dump via pm and i will get a look at it, or maybe check if the 16C + 03 03 are not inverted or hex swapped

 

[pop_eye]

send your dump via pm and i will get a look at it, or maybe check if the 16C + 03 03 are not inverted or hex swapped

Thank you kindly, benfica is already looking at this situation.

 

[pachecoso]

Great dude!
Benfica can be your way to find the holy grall hihi

 

[cobramostar]

Tivu Sat Block 0180
what is the key 50 04 and FE 0C ?


20 08 XX XX XX XX XX XX XX XX
30 08 XX XX XX XX XX XX XX XX
31 40 X7 XX XX XX ....... XX XX XX X6 XF XF
33 10 XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX
34 60 X5 XX XX ... .. .. .. .XX XX X6
35 88 X3 XC XX XX XX ... XX XX XX X8
50 04 XX XX XX XX | ???
D0 08 XX XX XX XX XX XX XX XX
E0 02 00 01
FE 0C XX XX XX XX XX XX XX XX XX XX XX XX | ???
A4 40

you have some diferent zero ? ? ?


FE0C000000000000000000000000A440

 

[pop_eye]

hii all i have vodafone camasame cpu cap210 but change eeprom 95128 and block 016c itis cripto

What ird is this ?

Block Header: 000008E3
NUID = 0x C4703993
NUID = 3295689107
0001
Provider ID: 0401
0100080001
Header CWPK: 0x81
Header CWPK key sizes: 0x10
CWPK0 Encrypted: BDA3A761C0B6853346956B8916A1DD8C
CWPK1 Encrypted: 7FC581C73CA2C6394A8B6A03A88F3D73
CWPK2 Encrypted: 342681554BA9350092425B26C75B3168
CWPK3 Encrypted: 5E1B0FB31C3A9E8FF98EE0ED588CFA93
CWPK4 Encrypted: DFD162EC59F3E465580BFEB8BE11F0E2
CWPK5 Encrypted: E1C9ACED7564521D3C161BABC8D2F101
CWPK6 Encrypted: 2239D05D1A6E66085D28D436660D8877
CWPK7 Encrypted: 876D1CC8DE299A40DFC8727183BAD720

 

[cobramostar]

you should see ird in the menu
ci module, and I think that the decrypt block is not possible in both cap102 and cap210

 

[cobramostar]

hii all i have vodafone camasame cpu cap210 but change eeprom 95128 and block 016c itis cripto

for me download not go

• Forums

Oops! We ran into some problems.​

You do not have permission to view this page or perform this action.

 

[cobramostar]

hii all i have vodafone camasame cpu cap210 but change eeprom 95128 and block 016c itis cripto

can you make a picture of that module?

does it have a uart

 

[Tadzik]

my cards black nagra caid 1884, cayman crocodile, c+poland-hotbird13e, works only ultrabox, not works my decoder E2 linux.
not IRD, NUID, cwpk and keys, unique paring, CAS7.
boxkey, rsa........?
dump chip Broadcom BCM7252S, not works oscam.
Help me.

• detected card (Cayman Crocodile) in CAK7 mode
• (reader) NC+ [internal] Rom revision: DNASP450 RevW40
• (reader) NC+ [internal] card needs restart after 36863 CMDs
• (reader) NC+ [internal] Card is starting in UNIQUE mode
• DT05_20 error - check MOD2
• (reader) NC+ [internal] card is not responding to CMD03 - check your data.............................
• detected card (Cayman Crocodile) in CAK7 mode
• (reader) NC+ [internal] Rom revision: DNASP450 RevW40
• NC+ [internal] card is not responding to CMD02/E - check your data
• card system not supported
• card initializing error

 

[Tadzik]

not works 1884 one channels...........

 

[cobramostar]

how name is your box ? ? ?
have you dump ???
see header
10 00 00 00 04 00 FF FF IRD 15 00 00 00 02 00 FF FF PROVIDER ID


00 00 08 E3 NUID 00 01 34 11 08 00 08 00 01 81 10

maybe is some

 

[cobramostar]

this box have
MULTIROOM ? ? ?

Możliwość dołączenia dodatkowych dekoderów - oglądaj różne programy na kilku telewizorach jednocześnie

 

[Tadzik]

caid: 1884, 4K Ultrabox+, ADB- NCP-3670SF. Not multiroom, not dump, only CASN ,numer nuid, numer chipset and numer DVL chipset. projekt 01A002............wersja CAK, wersja DVL.

 

[Tadzik]

4K ULTRABOX+, JADA---information: C2.0.15, version HW: 0x16d:0x45, programs: 0X73EB, 0X79, compliance ID: M.E.01.02_0001.