-
-
@elhefe
Did you get anywhere with those ImagesComment
-
ive tried using rqcs on a pli blank image as this seemed to fit the bill as much as possibe but still no proper reading of the card im working on this via another website so as soon as i have any news ill postComment
-
hi guys at the moment its not looking at all good for rq cam im afraid
he's why
"
the format of your boxkey is correct, what i meant is that for whatever reason, that's not the correct married boxkey for your card.
You sure the RSA key might be needed?
AFAIK elhefe has the correct boxkey.
ok, i know what the problem is. unfortunately, in rqcs the dt08 method will only work with the NA providers. this is because certain key which is specific to each provider is needed to successfully perform session key negotiation using the dt08 method. rqcs does not know that key for the provider elhefe is trying to use.
"
i dont think im going to have a choice but to organise a newer cablebox with an rsa and start again this no rsa is becoming a major pain now im open to ideas
cheers
elhefeComment
-
Try gbox and a nagra file like this one:
# ... IRD .................. Boxkey
B: { AA BB CC DD { 11 22 33 44 55 66 77 88 }} Card1Comment
-
-
People in Ireland can get the RSA key from N2 cards but for that to happen the card need to be glitched. The scripts for these are not public.Comment
-
im not sure if its much help have a 500c that im using newcs+mgcamd with a polsat card works with out a problem if its any use i can send a back up to anyone that wants itComment
-
maybe just your cfg. file, with your details edited of course
anyway it seems like the kryptview team have beaten us too it
apparently they have cs sorted for rom180
well done and good luck to them
Comment
-
What is needed here is people willing to share info but not in open threads you know their watching
PM me if you are willing to help in any way. No info will be made public without the owners permission.
Here is what we are up against:Originally Posted by ginman
IRD-CAM Session/Video Encryption Explained
2 forms of encryption are used to get video.
RSA.
P and Q are large random prime numbers (kept secret).
0N = (P - 1) * (Q - 1) (kept secret)
N = P * Q (N = RSA public Key)
D = E ^ -1 mod 0N (D = RSA private exponent, kept secret).
E = D ^ -1 mod 0N (E = RSA public exponent)
C = M ^ E mod N (C = encrypted message)
M = C ^ D mod N (M = decrypted message)
IDEA (International Data Encryption Algorithm).
More complicated.
For our purposes there is a function that we will call IdeaEncrypt that returns a encrypted text message given an idea key to encrypt with.
There is also a function that will call IdeaDecrypt that returns the decrypted message give the same idea key.
There is a function IdeaSign that will return an 8 byte idea signature given a data string and
If Using DT08 (0a) on the card :
The Dt08 (0a datatype on card) is created by the provider and sent to the card at sub time.
The dt08 contains the Cam N public rsa key along with ird/boxkey.
The dt08 is IDEA encrypted with the Idea Key made from ird/boxkey/inverted ird.
The dt08 is RSA encrypted using Ird N (public rsa key) and Ird D (private key and uknown by anyone but provider).
Ird N = N1 xored N2
Ird N1= A4E9B585932F90282FD70C908176E8605E6B2CE629335A0FC1 5B31DAB0BFC6FEEB88CFC69649994CD3FE039C9965C620C4D5 828E9153998EE4AE0E8C25644DF3 xor
Ird N1= 237280AAB36BE4B21FC71FBF08218E532A545E744D7B007FF8 69BA426831C4AC653F3825ADE9358FCD1F0239EC447CBC2765 CC0AEBE437AF2270FC461C2FA042
Ird N = 879B352F2044749A3010132F89576633743F729264485A7039 328B98D88E02528EB7F7E33BA0ACC31EE101A57521BA9CE3B0 4E847AB7AE21C6DEF2CA394BEDB1
The Ird N1,N2,Ideakey exist in the tsop.
Ird E = 3
Ird D = UKNOWN, this is the reason you can't create your own dt08 without changing the N1/N2 on the tsop, you must know Ird D.
DT08 (0A) = IdeaEncrypt(CamN/Ird#/Boxkey/Idea Signature,Ird_Ideakey) ^ D mod Ird N.
Ird requests DT08.
Card sends back the dt08 (0a)
Ird decrypts the dt08.
Decrypted dt08 = IdeaDecrypt(DT08,Ird_IdeaKey) ^ 3 mod Ird N.
It checks the ird # and boxkeys in the Decrypted 08 if they match what is on ird,
it stores the Cam N in the decrypted 08 in ird memmory.
If Using Secondary Key (SK) on the Ird.
Ird checks for SK exists on the ird, if it does, the dt08 will never be requested/ignored from the card.
Ird validates the SK with idea signature in the SK (using IIIIIIII01924314051647990A9C4E1 where I = irdnumber).
Ird takes the Cam N in the SK and puts it in ird memmory
Note : Cam N is not even encrypted in the sk, very weak method compared to dt08.
Later, establish session key (0C datatype on the card):
Ird requests 2a data from card.
Random 2a is sent from card to ird.
Ird performs some Idea signing (leave it to you to look up 2a/2b routines)
Ird comes up with session key from the 2a message sent from Cam.
Ird encrypts the session key with rsa.
Encrypted 2B = (2B data with 16 byte session idea key) ^ 3 mod Cam N.
Sends encrypted data back to card in 2b message.
Cam decrypts 2B with Cam N, Cam D. Decrypted 2B = (Encrypted 2B) ^ Cam D mod Cam N.
If valid, store session key in ram and on card for later use.
This all happens as ird boots.
When you select a channel.
Ird sends Cmd 07 ECM message with control words encrypted.
Cam decrypts the control words rencrypts them with Idea encryption using the session key established above.
The ird then requests the control words.
The Cam sends them back in the 1C response.
The ird decrypts the control words with with Idea encryption using the session key established above.
Sends the control words to the mpeg decoder.
8 seconds of video.
Repeat 07/1C process over and over.
This is all done from memmory, excuse any oversites/exclusions/errors.
Not exhaustive on each step by any means, just a quick overview.Comment
-
By using an r232 cable and using the PC to act as an emulator to decrypt the channels from the cs server. Its been done with sat boxes I don't see any reason why it can't be done with cable boxes.
They also have the option to use an r232 to ethernet adapter to get cs working either way it will be using the r232 port no doubt.
Once cs is enabled I suspect the box will act as a client only and not able to host the card itself. Even the sat scene hasn't got that far yet with non linux boxes.Comment
-
Dan what you have quoted is associated with N2 as opposed to N3, it has some relevance as a base. But you are right about not posting in open threads regards moving forward.
Notice I never mentioned CS once
I refuse to answer that question on the grounds that I don't know the answer. - Douglas AdamsComment
Comment