Nagra Hex block Decryption
- Thread starter fes_786
- Start date
- Status
how can get it ?
Some friend can decipher blocks 016c and 017c,??since block 0097 has already discovered it.
hugs all
good nagra 2018
Code:
You don't have permission to view the code content. Log in or register now.As for this dump from meo portugal we face new system keys that operate at CPU level, the new lenght of the block (0x886) may give us an idea how complex is the system.
Here another example block for check....
Code:
You don't have permission to view the code content. Log in or register now.
onsitbin
Member ++
- Joined
- Jan 3, 2010
- Messages
- 68
- Reaction score
- 33
onsitbin
Member ++
- Joined
- Jan 3, 2010
- Messages
- 68
- Reaction score
- 33
U-boot Spi nor flash N25qxx to nand Flash by protect Cisco and Samsung devives
¦
ootROM - 1.78
Booting from SPI flash, Secure mode
BootROM: RSA Public key verification PASSED
BootROM: CSK block signature verification PASSED
BootROM: Boot header signature verification PASSED
BootROM: Box ID verification PASSED
BootROM: JTAG is disabled
General initialization - Version: 1.0.0
Detected Device ID 6920
Master bootloder version 1.1c
High speed PHY - Version: 2.0
BoardId = 0x21board SerDes lanes topology details:
| Lane # | Speed| Type |
------------------------------|
| 1 | 0 | SGMII1 |
| 2 | 5 | PCIe1 |
| 4 | 5 | PCIe2 |
| 5 | 0 | SGMII2 |
-------------------------------
:** Link is Gen1, check the EP capability
PCIe, Idx 1: Link upgraded to Gen2 based on client cpabilities
:** Link is Gen1, check the EP capability
PCIe, Idx 2: Link upgraded to Gen2 based on client cpabilities
High speed PHY - Ended Successfully
DDR4 Training Sequence - Ver TIP-0.23.(Sublib 0.8)0
DDR4 Training Sequence - Switching XBAR Window to FastPath Window
DDR4 Training Sequence - Ended Successfully
BootROM: Image checksum verification PASSED
BootROM: Boot image signature verification PASSED
____ _
/ ___|(_) ___ ___ ___
| | | |/ __| / __|/ _ \
| |___ | |\__ \| (__| (_) |
\____||_||___/ \___|\___/
_ _ ____ _
| | | | | __ ) ___ ___ | |_
| | | |___| _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
\___/ |____/ \___/ \___/ \__|
** LOADER **
U-Boot 2013.01-ged7ddad (Jun 07 2017 - 17:31:48) SDK version: 2015_T2.0p10
Board: Barbados-2K
SoC: MV88F6920 Rev A1
running 2 CPUs
CPU: ARM Cortex A9 MPCore (Rev 1) LE
CPU 0
CPU @ 1800 [MHz]
L2 @ 900 [MHz]
TClock @ 250 [MHz]
DDR4 @ 900 [MHz]
DDR4 32 Bit Width,FastPath Memory Access, DLB Enabled, ECC Disabled
DRAM: 1 GiB
NAND: 256 MiB
SF: Detected N25Q32A with page size 64 KiB, total 4 MiB
PCI-e 1 (IF 0 - bus 0) Root Complex Interface, Detected Link X1, GEN 2.0
PCI-e 2 (IF 1 - bus 1) Root Complex Interface, Detected Link X1, GEN 2.0
Map: Code: 0x3feda000:0x3ffae0a0
BSS: 0x3ffefb5c
Stack: 0x3f9c9f20
Heap: 0x3f9ca000:0x3feda000
U-Boot Environment: 0x00100000:0x00110000 (SPI)
Board configuration:
| port | Interface | PHY address |
|--------|------------|--------------|
| egiga1 | SGMII | 0x01 |
| egiga2 | SGMII | 0x00 |
Net: , egiga1, egiga2 [PRIME]
Hit ESC key to stop autoboot: 0
Creating 1 MTD partitions on "nand0":
0x000000200000-0x000010000000 : "mtd=2"
UBI: attaching mtd1 to ubi0
UBIFS: mounted UBI device 0, volume 1, name "part2"
Loading file 'part2/part.bin' to addr 0x02000000 with size 54744129 (0x03435441) ...
Done
SF: Detected N25Q32A with page size 64 KiB, total 4 MiB
Checking image signing.
Image signing verification success, continue to run...
¦
ootROM - 1.78
Booting from SPI flash, Secure mode
BootROM: RSA Public key verification PASSED
BootROM: CSK block signature verification PASSED
BootROM: Boot header signature verification PASSED
BootROM: Box ID verification PASSED
BootROM: JTAG is disabled
General initialization - Version: 1.0.0
Detected Device ID 6920
Master bootloder version 1.1c
High speed PHY - Version: 2.0
BoardId = 0x21board SerDes lanes topology details:
| Lane # | Speed| Type |
------------------------------|
| 1 | 0 | SGMII1 |
| 2 | 5 | PCIe1 |
| 4 | 5 | PCIe2 |
| 5 | 0 | SGMII2 |
-------------------------------
:** Link is Gen1, check the EP capability
PCIe, Idx 1: Link upgraded to Gen2 based on client cpabilities
:** Link is Gen1, check the EP capability
PCIe, Idx 2: Link upgraded to Gen2 based on client cpabilities
High speed PHY - Ended Successfully
DDR4 Training Sequence - Ver TIP-0.23.(Sublib 0.8)0
DDR4 Training Sequence - Switching XBAR Window to FastPath Window
DDR4 Training Sequence - Ended Successfully
BootROM: Image checksum verification PASSED
BootROM: Boot image signature verification PASSED
____ _
/ ___|(_) ___ ___ ___
| | | |/ __| / __|/ _ \
| |___ | |\__ \| (__| (_) |
\____||_||___/ \___|\___/
_ _ ____ _
| | | | | __ ) ___ ___ | |_
| | | |___| _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
\___/ |____/ \___/ \___/ \__|
** LOADER **
U-Boot 2013.01-ged7ddad (Jun 07 2017 - 17:31:48) SDK version: 2015_T2.0p10
Board: Barbados-2K
SoC: MV88F6920 Rev A1
running 2 CPUs
CPU: ARM Cortex A9 MPCore (Rev 1) LE
CPU 0
CPU @ 1800 [MHz]
L2 @ 900 [MHz]
TClock @ 250 [MHz]
DDR4 @ 900 [MHz]
DDR4 32 Bit Width,FastPath Memory Access, DLB Enabled, ECC Disabled
DRAM: 1 GiB
NAND: 256 MiB
SF: Detected N25Q32A with page size 64 KiB, total 4 MiB
PCI-e 1 (IF 0 - bus 0) Root Complex Interface, Detected Link X1, GEN 2.0
PCI-e 2 (IF 1 - bus 1) Root Complex Interface, Detected Link X1, GEN 2.0
Map: Code: 0x3feda000:0x3ffae0a0
BSS: 0x3ffefb5c
Stack: 0x3f9c9f20
Heap: 0x3f9ca000:0x3feda000
U-Boot Environment: 0x00100000:0x00110000 (SPI)
Board configuration:
| port | Interface | PHY address |
|--------|------------|--------------|
| egiga1 | SGMII | 0x01 |
| egiga2 | SGMII | 0x00 |
Net: , egiga1, egiga2 [PRIME]
Hit ESC key to stop autoboot: 0
Creating 1 MTD partitions on "nand0":
0x000000200000-0x000010000000 : "mtd=2"
UBI: attaching mtd1 to ubi0
UBIFS: mounted UBI device 0, volume 1, name "part2"
Loading file 'part2/part.bin' to addr 0x02000000 with size 54744129 (0x03435441) ...
Done
SF: Detected N25Q32A with page size 64 KiB, total 4 MiB
Checking image signing.
Image signing verification success, continue to run...
Last edited:
Manufacturer: Broadcom Corporation
Chipset: BCM73XX
CSD version: NOCS3
Chip revision: A0
Chip Extension: XX
NUID:8B8FCA48
csdGetNuid()
0x8B8FCA48
padded r2rDataIn[16]
0x00000000000000000000000000000000
crcInput
0x00000000000000000000000000000000
CSC checkNum=0xxxxxxxxx
CSCinput
0x00000000000000000000000000000000
CSCcrcInput=
0x00000000000000000000000000000000
NUID checkNum=0xxxxxxxxx
Check number is :xxxxxxxx
Market Segment ID:XXXXXXXX
KeySafe[16]
0x122345778886005566778899aabbccdd
DvrKey[16]
0xd7396aa6de862957ca986f7ad8ef9d0b
DVR Key Value is: d7 39 6a a6 de 86 29 57 ca 98 6f 7a d8 ef 9d b
Boot mode is BOOT_FROM_SPI
SCS Activation Flag is not set
SCS Total Area Size is not supported
STB CA SN:8fd37890
Debug Interface is open
Key ladder is NOT deactivated
********************************************************************
Chipset: BCM73XX
CSD version: NOCS3
Chip revision: A0
Chip Extension: XX
NUID:8B8FCA48
csdGetNuid()
0x8B8FCA48
padded r2rDataIn[16]
0x00000000000000000000000000000000
crcInput
0x00000000000000000000000000000000
CSC checkNum=0xxxxxxxxx
CSCinput
0x00000000000000000000000000000000
CSCcrcInput=
0x00000000000000000000000000000000
NUID checkNum=0xxxxxxxxx
Check number is :xxxxxxxx
Market Segment ID:XXXXXXXX
KeySafe[16]
0x122345778886005566778899aabbccdd
DvrKey[16]
0xd7396aa6de862957ca986f7ad8ef9d0b
DVR Key Value is: d7 39 6a a6 de 86 29 57 ca 98 6f 7a d8 ef 9d b
Boot mode is BOOT_FROM_SPI
SCS Activation Flag is not set
SCS Total Area Size is not supported
STB CA SN:8fd37890
Debug Interface is open
Key ladder is NOT deactivated
********************************************************************
onsitbin
Member ++
- Joined
- Jan 3, 2010
- Messages
- 68
- Reaction score
- 33
isso e como o Ovo qual nasceu Primeiro a galinha ou o OVO ?? Abraço
I know, very easy... but looking for converter. I need to convert a few and takes time. Sure someone handy made a converter
hi,
just do a program to do this for you. I make my in C.
Or If you want, send me your 9882 bin and i will check for you.
Benfica200
DW Member ++
- Joined
- Dec 1, 2013
- Messages
- 280
- Reaction score
- 219
Forget the 9882 block now the game is another!
Paulo, he need help with 9882 and not with "another".
Thanks for your posts, did it by hand...
brzivjetar
Inactive User
- Joined
- Jan 16, 2018
- Messages
- 1
- Reaction score
- 0
What do you use to generate dumps?
also what i need to extract BOX KEY and RSA KEY for nagra merlin cards?
also what i need to extract BOX KEY and RSA KEY for nagra merlin cards?
zzm420363793
Member
- Joined
- Jan 14, 2018
- Messages
- 21
- Reaction score
- 1
anybody help me find rsa/bk/cwpk on this file ? From China
25q032.bin_免费高速下载|百度网盘-分享无限制
25q032.bin_免费高速下载|百度网盘-分享无限制
onsitbin
Member ++
- Joined
- Jan 3, 2010
- Messages
- 68
- Reaction score
- 33
Error Download, Please send your .*bin and mega.nz
pan.baidu.com, is very weak and complicated
- Status
