TNT Sat (030B00) CRISTOR & MORESAT Keys Format

Sat-Dz TeaM

Registered
Messages
6
Extraction method such as keys TNT Sat and irdeto within emu Moresat & cristor kyng team
Keys c + nl and viaccess keys and Aes Private and encrypted.
Codes c + nl, and have the same Aes_Keys Logarithm and the decryption key, where is the key to decrypt the key Plogartm 3des_cbc and located inside the mcu.
Directory:nana:
- Thise keys for aes TNT SAT was encrypted within emu cristor & mancode smt new devices:

Code:
44363E209D195C1A22E09BB6D1594F33
84784C7403A3B676A728D8E7615604F7
E35329CDC7A6D0265FD30E9EA993F348

Thise keys TNT SAT as it was encrypted in the cas Data:

Code:
FB9A38CE699755F696FFFCDA6EF8D237 
BFDF66B90B4DA6E4B06EFE850A6B935F 
D5FF2910D8A68C44E4E1B16C2BD1A104 
9F59AF7B9AA16EEC3CDAA95BA43D876D 
C52818398D9FDA0BD4F8A5531CE18412 
1BCA9E886D4EBD52DA1610613C4805C1 
E7864DC3514FC39E8819BE691BD507C2 
29091E70A9392C67A394DB9B707F1E7C

After decryption keys and op_keys aes_keys we can use

Code:
->Prov_ID : 030B00
->KeyIdx : 09 = CC72AAFE5265D6D04608E832CEB9EC4D
->Aes Key Idx: 1 = A79AC0DBEC9C9251D1915F058862AF26
->ECM Date : 10/8/2011
->CW : B5788FBBFD7D6297F8FD3094545CE3BC
->CW After AES Decrypt: A22EEE9E15648EEAB62EFA39A10979B8
=-=-=-=-=-=-=-=-=- DW0 -=-=-=-=-=-=-=-=-=
processDw->inputdcw: A22EEE9E15648EEA
Via3x_Core->init indata: 15648EEA00000000
Via3x_Core->postinit indata: 9E4D864400000000
Via3x_Core->prefinal indata: 9E4D86443DE4641B
Via3x_Core->final indata: 9E4D8644DC270395
Via3x_Fct1: 9E4D8644DC950327
Via3x_Core->init indata: 7EBBEDB9DC950327
Via3x_Core->postinit indata: 470BFDA3DC950327
Via3x_Core->prefinal indata: 470BFDA3327164A7
Via3x_Core->final indata: 470BFDA386F603B1
Via3x_Fct2: 470BFDA386F6B103
Via3x_dcw After data mixing: 93923FE97EBBEDB9
dcw->After 3Des: CA2C8E829808B814
Via3x_Core->init indata: 9808B81486F6B103
Via3x_Core->postinit indata: A1B8A80E86F6B103
Via3x_Core->prefinal indata: A1B8A80E58B2C016
Via3x_Core->final indata: A1B8A80E50EE88B4
Via3x_Fct2: A1B8A80E50EEB488
Via3x_Core->init indata: 9AC23A0A50EEB488
Via3x_Core->postinit indata: 11EB32A450EEB488
Via3x_Core->prefinal indata: 11EB32A4C0E31B59
Via3x_Core->final indata: 11EB32A4887B9528
Via3x_Fct1: 11EB32A48828957B
Via3x_dcw After data mixing: 10202D6F9AC23A0A
DW0: 10202D6F9AC23A0A
:clapping:
Code:
=-=-=-=-=-=-=-=-=- DW1 -=-=-=-=-=-=-=-=-=
processDw->inputdcw: B62EFA39A10979B8
Via3x_Core->init indata: A10979B88828957B
Via3x_Core->postinit indata: 2A2071168828957B
Via3x_Core->prefinal indata: 2A20711625F3BAF2
Via3x_Core->final indata: 2A207116E434C73A
Via3x_Fct1: 2A207116E43AC734
Via3x_Core->init indata: 52143D0DE43AC734
Via3x_Core->postinit indata: 6BA42D17E43AC734
Via3x_Core->prefinal indata: 6BA42D17D6489370
Via3x_Core->final indata: 6BA42D176970C378
Via3x_Fct2: 6BA42D17697078C3
Via3x_dcw After data mixing: C879017B52143D0D
dcw->After 3Des: 147B1C41A5C9C520
Via3x_Core->init indata: A5C9C520697078C3
Via3x_Core->postinit indata: 9C79D53A697078C3
Via3x_Core->prefinal indata: 9C79D53A27542977
Via3x_Core->final indata: 9C79D53A53D06A32
Via3x_Fct2: 9C79D53A53D0326A
Via3x_Core->init indata: 47AB2E2B53D0326A
Via3x_Core->postinit indata: CC82268553D0326A
Via3x_Core->prefinal indata: CC8226854B7FF370
Via3x_Core->final indata: CC822685B9C23478
Via3x_Fct1: CC822685B97834C2
Via3x_dcw After data mixing: 1CB1F1E247AB2E2B
DW1: 1CB1F1E247AB2E2B

And the result is clear before you

Code:
->DW after Doing XOR: EC1C727A4D628E3DBE9F1F7C52CFA0C1
->Decrypt DW Ok !:thum:
This explanation is simple gift from me to all the experts Club
 
Last edited:
Top