Not found c8 in hvec feeds

[dvlajkovic]

and another strange file with 0x1FFF PID not transmitted, but video is enc.
must be biss i not have key and idk can be found or not again brute force need

Google Drive - Virus scan warning

drive.google.com

It is biss and I've found the key for your file ENC_F1_4K_M noevent 20180403_191243 #1_ecrypted_no_key.
CW = 3F DB 5B 75 B1 54 C4 C9

 

[klickklack]

F1 testcard nice THX

Video: HEVC 3840x2160 50fps [V: hevc main 10, yuv420p10le, 3840x2160]
Audio: MPEG Audio 48000Hz stereo 384kbps [A: mp2, 48000 Hz, stereo, 384 kb/s]
Audio: 0x001c 48000Hz stereo 2305kbps [A: s302m, 48000 Hz, stereo, s20, 2305 kb/s]
Audio: MPEG Audio 48000Hz stereo 384kbps [A: mp2, 48000 Hz, stereo, 384 kb/s]
Audio: MPEG Audio 48000Hz stereo 384kbps [A: mp2, 48000 Hz, stereo, 384 kb/s]
Audio: MPEG Audio 48000Hz stereo 384kbps [A: mp2, 48000 Hz, stereo, 384 kb/s]
but we see in pics lot of dropped packets , so no pic is good ,this happen cause Mbit too high for this tuner/receiver!

 

[klickklack]

the peaks r totally normally @ F1-testcard-feed ,but tuner/receiver going @ dead only in this

 

[dvlajkovic]

I have recorded before year file, where was feed, but idk how was encrypted, when i analyze say "Scrambled PID without ECMs". Cannot see crypt info in the PMT (usually you would find eg CAID 0x2600 for BISS1 there).

In CSA show some cryp8 like real, but i cannot find key.

Here is file:

Google Drive - Virus scan warning

drive.google.com

if someone want to analyze and try find CW.

@sattechtips & @klickklack

Do not waist your time in with HEVC_encrypted.ts. It is powervu without ECM!!

There are many feeds that transmit Constant CW using Hidden CAS.

From time to time my post are usucefull. here I try again.

1) encryption Block Size is 8 byte
2) every stream uses different keys

so conclusion HEVC_encrypted.ts CAS is Powervu

@cayoenrique can you help us decrypt this powervu file from @sattechtips ?
Is there a way to pull out full cycle of EMM PID from his file?

 

[cayoenrique]

At the moment I am busy. I will look again to the file latter. But from what I recall there is no ECM nor EMM. So no way to decrypt ECM Key as there is no ECM.

Now you can take a PUSY TS and brute force DES encryptiion. It will take about 128 time more time that what you did with Tandberg! as the last 7 bits are not going to be 0.

And you need to do this with each separate stream, as each of then should have different keys. So you need to do it at least twice, one for video one for audio.

 

[klickklack]

about HEVC-file search
as you can see in .ts-file is good C8 inside!

106.81 MB file on MEGA

mega.nz

with RBT-V1 search:
Search Crypt8 in TS Start
TS file: C:\!Records\7.0E_12681,662_H_17146_(2023-11-28 13.28.38)_dump.ts
Using all PIDs
Using file limit: 4096 MByte
File length: 106 MByte
UsingFileLen: 112001000 bytes
Reading file ...
Searching ...
Using payload size: 184
PID: 200h B8h-Crypt8:0A 25 D5 2C EE DA 6F 52 [E] Count:40
PID: 200h B8h-Crypt8:25 DD 91 D0 BF B7 01 EC [E] Count:40
PID: 200h B8h-Crypt8:33 D2 6E F9 07 4B 96 6B [E] Count:40
PID: 200h B8h-Crypt8:4C D9 FC CA 30 8C CD 98 [E] Count:40
PID: 200h B8h-Crypt8:4E 0D 09 23 AD FF B8 2A [E] Count:40
PID: 200h B8h-Crypt8:7D 2E 48 82 82 AE 68 3B [E] Count:40
PID: 200h B8h-Crypt8:85 6C B1 CC DB BC 77 16 [E] Count:40
PID: 200h B8h-Crypt8:95 D4 0E 36 14 C0 E9 5F [E] Count:40
...

PID:1010h B8h-Crypt8:11 3F EB 15 0E EE FD 79 [E] Count:4189
PID:1010h B8h-Crypt8:EB 4D 04 26 88 DD 6C 53 [E] Count:2095
PID:1010h B8h-Crypt8:F6 2F AA 9D E5 B7 73 71 [E] Count:2095
PID:1010h B8h-Crypt8:42 21 2C 96 95 96 58 48 [E] Count:2094

PID:1020h B8h-Crypt8:11 3F EB 15 0E EE FD 79 [E] Count:4189
PID:1020h B8h-Crypt8:EB 4D 04 26 88 DD 6C 53 [E] Count:2095
PID:1020h B8h-Crypt8:F6 2F AA 9D E5 B7 73 71 [E] Count:2095
PID:1020h B8h-Crypt8:42 21 2C 96 95 96 58 48 [E] Count:2094

PID:1040h B8h-Crypt8:11 3F EB 15 0E EE FD 79 [E] Count:4188
PID:1040h B8h-Crypt8:EB 4D 04 26 88 DD 6C 53 [E] Count:2096
PID:1040h B8h-Crypt8:42 21 2C 96 95 96 58 48 [E] Count:2095
PID:1040h B8h-Crypt8:F6 2F AA 9D E5 B7 73 71 [E] Count:2095

Time for searching Crypt8 = 0 sec.
with RBT-V2 search:
11 3F EB 15 0E EE FD 79 #[E] PID:1010h

11 3F EB 15 0E EE FD 79 #[E] PID:1020h

11 3F EB 15 0E EE FD 79 #[E] PID:1040h

 

[dog-man]

4F 97 62 48 5D 7B F6 CE