Nag 3 next areas

[TheCoder]

Originally Posted by timetrex

Coder do peeps or yourself have any idea to look for the rsa key? is t just pot luck? It has been in the south of Ireland for a while, im not sure what revison of card they have but im sure they are attempting it with no luck?

The IRD_N can be stored in a variety of ways but normally its stored as multiple entries which are then algorithmically combined to generate the full key. This can make it fairly difficult to find but its always possible, even if you end up disassemblg the whole box firmware.

You will probably have problems with boxes like the 2110 where there is no jtag or easy method of dumping the box firmware.

Ireland used Rom142RevG02 which is an older version of the card. Afaik, its still based on the ST chipset rather than the Atmel chipset of the Rom180.

As for the Irish IRD_N, well, it only takes a little bit of application to get this data if you really want it. As I said above, its only ever as far away as a disassembly !

[TheCoder]

Originally Posted by bb5

is it possible to get the rsa key from the sagem icd 60 from ireland ?

If you can jtag it or otherwise easily dump its flash chip then yes, you can get the details. Its just up to someone to take the time to discover the location of the relevant data.

Ok, not easy but a hell of a lot more do-able than opening the cards

[TheCoder]

@Mods.

I should really of made my above post a seperate thread with an appropriate title to encourage people in Leeds and affected areas to experiment a little and post up the results so we can see whats what !

Any chance of you duplicating somewhere and perhaps making it a sticky with a nice snappy title like "N3 affected people - Look here !" or something along those lines (not really very good at snappy titles)

[Analoguesat]

Three posts removed. Please dont post stuff with lots of keys of any sort in it from software dumps - it only encourages people to post the current decryption keys - and that could get the forum closed down..

[bb5]

Originally Posted by TheCoder

@Mods.

I should really of made my above post a seperate thread with an appropriate title to encourage people in Leeds and affected areas to experiment a little and post up the results so we can see whats what !

Any chance of you duplicating somewhere and perhaps making it a sticky with a nice snappy title like "N3 affected people - Look here !" or something along those lines (not really very good at snappy titles)

no problem dumping the flash already done have ird and bk from flash and did work with ird and bk from dump until n3 hit where would i start looking for the rsa as i have the dump from the box already?

[Robbo]

Off topic posts moved to here

From original thread Nag 3 next areas

[rick1019]

Thx robbo

[thospot]

Originally Posted by TheCoder

If you can jtag it or otherwise easily dump its flash chip then yes, you can get the details. Its just up to someone to take the time to discover the location of the relevant data.

Ok, not easy but a hell of a lot more do-able than opening the cards

will the IRD_N key be incrypted in the flash ?? .

also if i get my IRD_N key and my DT08 what software do i need to create my CAM_N key .

[TheCoder]

Originally Posted by thospot

will the IRD_N key be incrypted in the flash ?? .

That will likely depend on the individual boxes. The manufacturers will be free to encrypt or not as they choose although I think that, at the very least, they will be obfuscated in some way. The most likely way of hiding them is simply to store them in small chunks. A 64 byte key could easily be stored in 16 seperate memory words anywhere within 4Megabytes of flash. The trick to finding what you want will be to DISASSEMBLE and, to some degree, understand the stb code.

also if i get my IRD_N key and my DT08 what software do i need to create my CAM_N key .

Once you've fathomed out how to get the IRD_N key you will likely know more than enough to be able to use it to generate a CAM_N key. It would probably be quite difficult to extract the IRD_N without knowing exactly what it is and how its used.

[mario212]

hi just , i got a message on my box to let in form me my new card is on its way (watford) so enjoy what time you have left