kosu
15th January, 2020, 12:05 PM
Can someone tell me which tools are capable of cracking a set of completely unknown security bytes on a HC908? I see various tools have lists and presmubly try each of them, but can't figure out which ones can break unknown ones from their descriptions and looking at youtube videos.
I have an HC908 that I'd like to read and have tried all lists I can find and then brute forced simple patterns like 8x same value counting up/down, 4 pairs of values, etc, but there's no way I can brute force the whole keyspace. Next I'll try other approaches like glitching and power analysis, but would be useful to see what currently does what.
I have a zif socket and built a little monitor circuit and can put a bunch of MCUs in it as well as use an unprogrammed one. I know everything is working fine as I can read ROM on all of them and they're identical, and I can read/write flash on my unrprogrammed one.
I have an HC908 that I'd like to read and have tried all lists I can find and then brute forced simple patterns like 8x same value counting up/down, 4 pairs of values, etc, but there's no way I can brute force the whole keyspace. Next I'll try other approaches like glitching and power analysis, but would be useful to see what currently does what.
I have a zif socket and built a little monitor circuit and can put a bunch of MCUs in it as well as use an unprogrammed one. I know everything is working fine as I can read ROM on all of them and they're identical, and I can read/write flash on my unrprogrammed one.