Yeah, working here too
PLTV 10? East
Collapse
X
-
any ideas peeps?for those of you who use minicats bundle,
his bundle is already updated...
however i noticed that the key within the minicats bundle is different to the one dick b has posted,
how many different keys is there available to clear the one channel?
from what i read you,
need a nvidia graphics card which i have,
i found the csa rainbow tool no problem,
but i've been searching for that table for ages with no luck,
if anyone knows where to find it, please enlighten us...Dreambox 800hd se/Dreambox 500s, 90cm Solid Dish, Tm2600 Motor, TM-1 Gold LNB!
Comment
-
Why it's a hobby. It's a challenge for someone to make it work and then share that with all.
The last key was well known so I would assume this one will last a bit. It can't be in their interest to keep changing the key only for it to be cracked again.Comment
-
Comment
-
the process is very real and correct. the issue is that time is still required to brute force the actual key hence why the source was written for the nvidia cards with the numerous cores to speed this up to an extent. the process works by examine specific parts of the streamed packets with can only have approx 16777216 different values. look these up in the rainbow tables shows u possible key values which when a+b+c&chsum e+f+g&chsum = 8 byte control word
the weakness is in the CSA word lengths and the packet structure organisation which is pretty static.
colibre had some info on this and even had the rainbow tables listed on his site when i last looked some time since.
i reckon 6-10 hours for correct BISS key :O
best regards
peepoLast edited by peepo; 12 December, 2012, 00:30.Comment
-
So this is how they manage to break any encription software then. Once they know what goes into making up the code they just use similar methods to obtain the right key?
I guess this is why Sky keep changing their method (so I was told) so that someone cant do something similar.Comment
-
hmm 2 different things there my friends. let my try to explain.So this is how they manage to break any encription software then. Once they know what goes into making up the code they just use similar methods to obtain the right key?
I guess this is why Sky keep changing their method (so I was told) so that someone cant do something similar.
first all pay tv CA 'conditional access' work same principals. the whole aim is to end up with a 64 bit key(8bytes) to decrypt the picture using the common scrambling algorithm. the 8 byte key is split and we end up with
byte byte byte CS byte byte byte CS
CS = checksum.
therefore we have to find 6 bytes as we can calculate the checksum. this weakens the strength of the scrambling process.
second the BISS encryption is a rigid type encyption so we can see patterns in the transport stream which enables us to look at predetermined tables which indicate that certain values are a possibility. this again weakens the process and enables a brute force style attack.
if the key changed often then this would cancel out this style attack unless it was possible to determine they key before the change. most CA 're NDS/sky' change the key every 10/20 seconds.
thanksLast edited by peepo; 12 December, 2012, 14:24.Comment
-
-
-
Comment


Comment