Hacking CA system challenge *Tandberg [ NO Keys Allowed in Chat Section/s ]*

[nautilus7]

Well, if they updated all the time, it's not an old encryption, right?

Thank to Anubis_Ir and others it's almost cracked in less than 2 months. Not bad I would say.

 

[barney115]

The progress has been outstanding considering the level of difficulty involved in it .
hopefully this last hurdle will be overcome its just a matter of time now i believe and respect and credit to Anubis_IR and @ Siawoosh for their hard work and efforts ,
Cheers !

 

[fiji]

Experiment & test separate file for TB V3 ( Offline stream Smart DVB )
- Add 3 ecm keys 16 + add 1 Aes keys 38
Use Aes keys for this .ts file : :thum:http://www.sat-universe.com/showpost.php?p=2036831927&postcount=1716
Replace in v-Plug folder:v_keys download

( If id 01 index 01 in aes keys then normal same id & index ecm disable in case jus work only Aes keys )

Thanks To Anubis_Ir

 

[morgon]

\ Libs folder within a few files 'aes.h, aes_core.c, des.c' too old need to update it?

 

[tani1]

New feed is up now 10E 10996 H 7120 ARQ-PL9 CLIPS (Tandberg V3)

 

[bigs15]

100.5E ARQ-PL9 CLIPS 3946 V 7120(Tandberg V3)

T 01 02

 

[barney115]

Still no picture here :mecry:

 

[general8080]

STILL NOT Working ;(

 

[barney115]

Each weekend there is 3 sets of working AES Keys Sent to Tandberg Broadcaster boxes
this would be the main reason i believe that there is no picture found ,
So is it possible to find the 3 working sets of AES keys for this weekend ?
13,14,15 October ??
if someone has the valid dump of AES Keys or this weekends XML please pm me .
Thnx

 

[harshy]

Yeah AES keys will be the issue here it has to be

 

[nautilus7]

https://github.com/oscam-emu/oscam-emu/wiki/Tandberg-Config

 

[campag5242]

@harshy - nautilus7 has described the format a few posts up (probably pages by now lol).

The same info is also on the wiki: https://github.com/oscam-emu/oscam-emu/wiki/Tandberg-Config

 

[harshy]

Thanks guys so I knocked off the first two digits and last four digits is that how it’s meant to work in oscam?

 

[campag5242]

Yeah knock off the first two digits, placing them as the key index eg for tonight you need T 02 AES 7F.....

 

[harshy]

strange the first line is T 01 AES but surely that should be at T 00 AES?

 

[barney115]

Tried that but no luck .. Nothing i try so far has worked .
something clearly is not right as yet but not sure what it is ?

 

[harshy]

Tandberg v3 = black screen :-(

 

[harshy]

Yeah knock off the first two digits, placing them as the key index eg for tonight you need T 02 AES 7F.....

What about the last four digits?

 

[campag5242]

Bin them. They are probably a checksum, so not needed for decryption, only to verify the integrity of the message.

I haven't been able thus far to prove that: I've tried the known tandberg block signing routine over index+key, over key alone... likewise a simple uint16_t xor sum. No luck.

 

[morgon]

Everything tonight