Nagra Hex block Decryption

Status
Not open for further replies.
N_60
91FFF4B35BF8FB0214D5FF88AFBA4121766B68BC7D4A000081D9EDF738220E851E96DCC2DBBF8567AB8803391A24154EA71EA3B557E2EBC0B6D0674E10628B39E8461DF5D5305E5772FF71A3F9887239E60552BCF102854822905BB489E3FCFD

E_60
1CC32F02F2B88F42AEB625FC589A39E08CC2C64473EE5327C66D178B5F9C9DFDADB40CD3BA94F58421EFCEAABE32A39BA7174AF9265928B560022FC3FE9A2B258D9FBFDCF09F6EE9125CF810C1F7E0D883E88709554216A622ED7D42F82AC9A5


But my question is :
how do we look for the correct keys for mod1, mod2 and data88 ?? thanks
 
Mod1 = Used for RSA decrypt of data DT05_00 and DT05_10 (this 2 cmds are used in smartcards with global pairing, this means card can be swapped to another STB from same provider)

Mod2 = used for RSA decrypt of CMD dt05_20 (This cmd is only available in smartcards with unique pairing table) This gets 50% of the DT05_20 Process done, the other 50% is to generate the MDC2
Signature and also to calculate the Flag58 3DES SW key.
 
N_60
91FFF4B35BF8FB0214D5FF88AFBA4121766B68BC7D4A000081D9EDF738220E851E96DCC2DBBF8567AB8803391A24154EA71EA3B557E2EBC0B6D0674E10628B39E8461DF5D5305E5772FF71A3F9887239E60552BCF102854822905BB489E3FCFD

E_60
1CC32F02F2B88F42AEB625FC589A39E08CC2C64473EE5327C66D178B5F9C9DFDADB40CD3BA94F58421EFCEAABE32A39BA7174AF9265928B560022FC3FE9A2B258D9FBFDCF09F6EE9125CF810C1F7E0D883E88709554216A622ED7D42F82AC9A5


But my question is :
how do we look for the correct keys for mod1, mod2 and data88 ?? thanks

Hi jesuchrist,
Mod1 and Mod2 are in clear in your .rodata file
for Data88 you take the Data88 generic and Data88 provider and you make a xor to get the Data88 to use.
for the addresses it is according to your provider
In addition, this information hangs on the net according to your provider.
 
thanks for helping
I do not have any dumps,I try to look for mod1 and mod2 #950 ,but I can not find the keys for mod1 and mod2
How are keys searched in the bin? Thank you
 
Hi jesuchrist,
Mod1 and Mod2 are in clear in your .rodata file
for Data88 you take the Data88 generic and Data88 provider and you make a xor to get the Data88 to use.
for the addresses it is according to your provider
In addition, this information hangs on the net according to your provider.
Excellent
Thank you
 
Mod1 = Used for RSA decrypt of data DT05_00 and DT05_10 (this 2 cmds are used in smartcards with global pairing, this means card can be swapped to another STB from same provider)

Mod2 = used for RSA decrypt of CMD dt05_20 (This cmd is only available in smartcards with unique pairing table) This gets 50% of the DT05_20 Process done, the other 50% is to generate the MDC2
Signature and also to calculate the Flag58 3DES SW key.

old info i think everyone can read this document
 

Attachments

  • cak7-nagra-merlin-pairing-info.txt.zip
    14 KB · Views: 102
for why ? some peoples work on nagra more as 2 years and you want them to give you the results of own work right away?
try, and play ..
 
for why ? some peoples work on nagra more as 2 years and you want them to give you the results of own work right away?
try, and play ..


I do not need anything I already know he asked a question I directed them on my own documents that I studied at the beginning I ask no solution I ask for advice it is not the same l friends
 
and for what is this thread ?? if not sharing usefull info, exchange skills etc so for what ?
just to read your comments ? not usefull ? pff


and what do you expect? that it will be a thread for Polish users looking for a solution for nc +?
you is very naive .. :cool::p
 
sega24 is correct. This is a forum klivo. What do you think the purpose of this thread is?

yes.. or no all can be free, because nc+ i canal+ and the provider very fact attacked and patched all security holes .. if sega wanted problems on your provider can writed... NC+ on this moment use separate stream for cwpk 18FE as first provider in europe.. on this moment this key is static.. maybe will be better for his if will be dynamic :D
 
and what do you expect? that it will be a thread for Polish users looking for a solution for nc +?
you is very naive .. :cool::p

yes, im expect that, why not ? it's a private forum ? top secret ? thread for vip's ?
yes, polish people looking here solution, but you think that only polish people whants it ? you also search it for polish providers, you forget about it ? you are not from Poland so why you want to have solution for nc+ ? you are from Slovakia so why you are looking solutions for every provider ?

funny or stupid ?

edit:
from where do you know that im also looking for that ?
did i write here to someone any pm ? no
did i ask anywhere about nc+ ? no
read my post before due
 
yes, im expect that, why not ? it's a private forum ? top secret ? thread for vip's ?
yes, polish people looking here solution, but you think that only polish people whants it ? you also search it for polish providers, you forget about it ? you are not from Poland so why you want to have solution for nc+ ? you are from Slovakia so why you are looking solutions for every provider ?

i am no wanted nothing...
yes.. is better for alls comunicate via private forums or secure online comunications..

BTW: from Poland is not a good goat , because it would also be smuggled from Turkish :D
 
Status
Not open for further replies.
Back
Top