AES Keys for the C Series

[juusso]

Good to hear it.

[arris69]

Eureka!!!

Replacing the last 12 digits of the B series AES key with 0000Xabc2010 gets the AES keys for several C series firmware:

Replace the value of X with the following:

• T-VALDEUC: X = 1 (already found by card2000)
• T-TDT5DAAC: X = 2
• T-MSX5DAAC: X = 4
• T-MSX5DEUC: X = 4
• May be more...

Enjoy!

think this are already all types from c-series, btw. we can reduce it to T-VAL* T-TDT* T-MSX*

curios what firmware has 3
arris

[arris69]

think this are already all types from c-series, btw. we can reduce it to T-VAL* T-TDT* T-MSX*

I vaguely remember someone saying T-VAL5* or T-VAL6* not working with X = 1. Has anyone tried to decrypt one of those?

all ok:

Code: Select all

T-VAL5AUSC/                        T-VAL5AUSC_and_T-MSX6AUSC.exe.txt  T-VAL6DEUC_1016.0.exe
T-VAL5AUSC_and_T-MSX6AUSC.exe      T-VAL6DEUC/                        T-VALDEUC/

so T-VAL* T-TDT* T-MSX* seems match the keys in a correct way

arris