Hacking CA system challenge *Tandberg [ NO Keys Allowed in Chat Section/s ]*

[campag5242]

But maybe they use an AES key (or a set of them) that's standard in all receivers in case the customer fails to enter the private key correctly or some major error like that.

If something should go wrong with their distribution of the xml AES key files, they can avoid calamity by not using the AES overcrypt for a particular event: with mode bit 0x20 clear, the EC nano behaves much like the old ED.

 

[harshy]

Does that mean we can watch it but I am guessing we still can’t as our receiver s have something missing chipset wise.

 

[campag5242]

Nope, unless they should clear mode bits 0x40 and 0x80 as well, which I doubt will ever happen.

 

[kebien]

Nope, unless they should clear mode bits 0x40 and 0x80 as well, which I doubt will ever happen.

Found this in my vault (2004-05)
********""Description:
DOS program to filter EMMs for Nagra providers from an EMM-pid log, and
output them in a format suitable for investigation with Caton, or processing
(key updates) with IrdMaster's KeyDecryptor, or Viriato's Sosia.****""
One of your nagEMMex readme.
Have couple versions.

The good old days

 

[campag5242]

... taught myself c to write that, my first ever. Of course the first thing I did when I started with tandberg, was to write a similar logging tool. Log log log....

 

[harshy]

I still think Anubis was very close with this defeated by the post processing, I still think it’s possible to reverse the official firmware on the Ericsson, what do you think?

 

[007.4]

I'm certain the firmware HAS been fully disassembled. The final correct DCWs can be obtained without a problem.
The issue is, how these DCWs are now processed in the descrambler? Without knowing the scrambling algorithm used there can be no progress. This cannot be determined by disassembly.

 

[harshy]

But can the firmware be reversed in an official receiver but not authorised that knows how to deal with the dcw?

 

[sezgin 2]

As a result, there is no one to solve the Tandberg coded channels in this matter. Everyone writes something, but nobody helps solve it.

 

[egydoctor2010]

as now we cannot open this tand v3 can any one have keys release rom keys MK00 and MK01 for IMG3 EU feed

 

[real-madrid]

22.0W 11126 H 17246 8PSK 3/5 DVB-S2
DATANAME: OAD Service HD 50
SID: 65534
0000 01F4 0000 000000 1010 Tandberg Television

 

[egydoctor2010]

img3eu is now tandeberg and oscam not asking for AES key by oscam 11391 r754
(emu) Key not found: T 6A2 01
except after some restart what is the problem?

 

[barney115]

AES key T01 0B Required !!
Tandberg V3 Still in operation as per usual
and unkown Algo therefor nothing changed and still black screen untill Tandberg V3 is broken we will continue to see Dark Screens :mecry:

 

[abra26]

22.0W 11126 H 17246 8PSK 3/5 DVB-S2
DATANAME: OAD Service HD 50
SID: 65534
0000 01F4 0000 000000 1010 Tandberg Television

Only EMM (without 0x83) and ECM (nanoEE with EntitlementID 0002) is present on TP. No channel is using Tandberg (at least atm).

Maybe in future?

 

[harshy]

Only EMM (without 0x83) and ECM (nanoEE with EntitlementID 0002) is present on TP. No channel is using Tandberg (at least atm).

Maybe in future?

Is it Premier League TV?

 

[barney115]

22.0W 11126 H 17250 8PSK 3/5 DVB-S2
only Reuters TV News is broadcasting FTA on this Transponder
No channel is using Tandberg that i can see .
Please keep on Thread Topic & Discuss FTA Channels in correct Thread Topics ,
Thnx

 

[abra26]

22.0W 11126 H 17250 8PSK 3/5 DVB-S2
only Reuters TV News is broadcasting FTA on this Transponder
No channel is using Tandberg that i can see .
Please keep on Thread Topic & Discuss FTA Channels in correct Thread Topics ,
Thnx

but present Tandberg encryption on TP. Yes, only Reuters is broadcasting on that TP but you can see Tandberg's EMM and ECM pids on that TP too.

Thorough no channel is using it as you said.

 

[paytv]

ITS RAS OR tandberg?

 

[BLACKCRUSADER]

ITS RAS OR tandberg?

It shows as Tandberg on Asiasat5 EPL and FA Cup feeds

 

[barney115]

IF THERE IS Something there it most likely will be Tandberg V3 So Still likely a waste of time :mecry: