antonypaul (22nd July, 2023), Col19 (16th December, 2020), Dajan2009 (19th October, 2015), ecumasters (29th April, 2016), giovani (29th August, 2013), mechatronics (6th February, 2016), Talleresmalaga (1st May, 2020), zas010970 (5th June, 2017)
188BE890C3EF778A ? Key is not used
2. D3C455A3FB909B1B ? Key is not used
3. 2FD1E80C0006A1C6 ? Key is not used
4. D3EAFB5E4A82D4E2 ? Key is not used
5. BE1B9027CE8CD574 ? Key is not used
6. 8B99AEF7A9C30B19 ? Key is not used
7. 48C5307FF38E2838 ? Key is not used
8. 0EBEA047C505C683 ? Key is not used
KeySet ID: D0B35485again to compare above the dump
_______________ D3-oToprog _________________
ig : vanos_batam
antonypaul (22nd July, 2023), Col19 (16th December, 2020), Dajan2009 (19th October, 2015), ecumasters (29th April, 2016), giovani (29th August, 2013), mechatronics (6th February, 2016), Talleresmalaga (1st May, 2020), zas010970 (5th June, 2017)
Key_0..Key_3 - used
Key_4..Key_7 - unused
Your Dumps (1D59J = 1D59J_unused) are the same. And where Key_0 ?
Key1,2,3,4 can change to be Not Used by change bit to FF at address 25
Key Status: 25
================
Code--> Status Used KeyNo.
----- -------------------------
FF ---> BLANK (all key Not Used)
00 ---> 0,1,2,3,4,5,6,7 (all key Used)
01 ---> 0,1,2,3,4,5,6 (7-keys used)
03 ---> 0,1,2,3,4,5 (6-keys used)
07 ---> 0,1,2,3,4 (5-keys used)
0F ---> 0,1,2,3 (4-keys used)
etc....etc...
XX = 8421 8421
============
FF = 1111 1111
00 = 0000 0000
01 = 0000 0001
03 = 0000 0011
07 = 0000 0111
0F = 0000 1111
I think with change address 25 to FF dump EIS is blank, so OLD Key can be reused.
But i don't test it.
Any idea about this opinion?
Last edited by bram380; 20th January, 2012 at 12:06 PM.
Col19 (16th December, 2020), giovani (29th August, 2013), hamzadaw2000 (8th September, 2013), mechatronics (6th February, 2016), richard27 (28th February, 2018), sweetsamo (9th February, 2015), zas010970 (5th June, 2017)
In deciding whether a key is used or not, determine the value of Hash_key_0_7, not cell addr.25. Addr.25 shows only information about the keys.
Last edited by Label55; 20th January, 2012 at 01:53 PM.
Here is some basic information:
Old EZS (W202, W208, W210, W220 ..) have two code generators - a key code generator 8 bytes) and generator ECU code (6 bytes).
New (W203, W209, W211, W639 ..) have only the key code generator.
HASH key consists of 8 bytes, that is, the entire table contains 18445618199572250625 codes.
For each key are assigned 196607 codes.
All keys assigned are the same table, except that everyone starts from somewhere else.
|>-----> 18445618199572250625_table_codes->--- .... -->------------->|
|<-<-196607_key_codes-<-<|
For further considerations we need to use the dump, which will generate eight keys (here, no key_0).
This should be good. Could someone generate eight keys to the attached dump?
Last edited by Label55; 23rd January, 2012 at 10:43 PM.
Col19 (16th December, 2020), giovani (29th August, 2013), janjamnicky (4th September, 2016), mcday (16th October, 2014), mechatronics (6th February, 2016), redful (28th April, 2015), zas010970 (5th June, 2017)
what algorithm is used to calculate the hash for key?
sh1? md4? md5?
structure of the key is:
EZS Pass, SSID, Start hash - All this is in the EZS
but how get other hash?
they are derived from Start hash or Start hash + SSID+... ?
Hi andrey3.
Dump "Used corr.bin" nothing has changed. Still 3 keys are used, and the others not. Changed only the starting point of 0,1,2 keys. And this is a serious mistake.
zas010970 (5th June, 2017)
ecumasters (29th April, 2016), mechatronics (6th February, 2016), zas010970 (5th June, 2017)
To file "USED.rar" were generated keys (of which 3 are used, and other not). Many thanks to VANOS, for their providing.
And now, let's change the status of all keys - all used.
For this purpose, we change all the hashes.
Is calculating keys to the this dump, SKC will change the contents of the dumps 8 keys?
Can someone again generate eight keys for the new hashes? (This is the last time).
"ALL_USED.rar" <--- For this file, generate the keys.
I'll explain it later.
Last edited by Label55; 24th January, 2012 at 05:45 PM.
Col19 (16th December, 2020), mcday (10th February, 2016), mechatronics (6th February, 2016), teeone (15th November, 2017), zas010970 (5th June, 2017)
from mcu 192331
KeySS ID: 709DC73C
1. A95FF3AD946F1E78 ? Key used
2. 2721476D7713F302 ? Key used
3. B5581FD5EF5B4C67 ? Key used
4. 1A7BF1890C547AA7 ? Key used
5. EF4CDC86402EE234 ? Key used
6. 1FB7D6F8714E4295 ? Key used
7. FE8ADAEC94B2426B ? Key used
8. 69BDC40EDE6B41B6 ? Key used
again
ecumasters (29th April, 2016), zas010970 (5th June, 2017)
please can you generete key from this dump
Last edited by user2468; 14th January, 2013 at 10:18 PM.
zas010970 (5th June, 2017)
SKC-Continued....
Key Table consist of 196607 codes (from 1 to 196607).
After inserting the key to the EZS, the code counter decreases by 1, and Key sends the latest code from the table. So the codes are sent in the order- from the end to beginning of the table (196607, 196606, 196605...0).
EZS saves only the last four codes, in the order of 1, 3, 7, F, where "F" means the last generated.
After turning the key in the IGN position, recently accepted key code is sent to the ECU (this method is valid after 1999 years.).
For the old solutions (to 1999 year) this is carried out differently.
After turning the key in the IGN position, ECU sends two bytes of code. EZS in response sends six bytes of code (Compatible with ID_ECU_OLD).
zas010970 (5th June, 2017)
How to repair EZS/EIS "HASH ERROR" ?
See detail below:
[ame="http://www.youtube.com/watch?v=l6LU9Gz5-zM"]How to repair Mercedes Benz W210 EZS Hash Error.wmv - YouTube[/ame]
Last edited by bram380; 27th May, 2012 at 03:00 AM.
zas010970 (5th June, 2017)
After trying to discuss about Benz SKC in mid month,
the price Benz SKC (clone) becomes $1,000
Price drops are pretty good...
------------
need more thinking before buy clone...!!!
see report here:
Benz SKC Clone
Last edited by bram380; 26th September, 2012 at 01:17 PM.
Bookmarks