[PC] DeSTRoi - PVR Content Decrypting (only for C/D series)

Here are software that related with Samsung D series TVs.
Please don't create any new topic here unless you have software to post/release.

geo650
Official SamyGO Developer
Posts: 303
Joined: Wed Oct 07, 2009 12:03 pm

Re: Samsung PVR Content Decrypting tool - final

Post by geo650 »

Hello.
I appreciate your effort creating this cool and highly awaited application. Thanks!

Maybe it is not the right place to ask but I think here I can meet some people deeply initiated into decrypting techniques.
I am looking for a tool to decrypt PVR recordings made by LG TV's. The recordings are stored in directories which consist of such example files:

Code: Select all

BYTES      FILENAME
---------- -------------------
60.736     0000000100000001IDX
51.511.296 0000000100000001STR
261.232    0000000100000001THM
1.448      00000001PIF
Have you any idea how to decrypt this ? ;) I tried: DeSTRoi, xor FF, xor 51, some other xor operations. No luck. :(
BTW, why do they (Samsung, LG) encrypt recorded content? Have somebody asked them? I can not find any provision in the law that requires it.
sbav1
Official SamyGO Developer
Posts: 374
Joined: Fri Jan 15, 2010 10:20 am

Re: Samsung PVR Content Decrypting tool - final

Post by sbav1 »

geo650 wrote: BTW, why do they (Samsung, LG) encrypt recorded content? Have somebody asked them? I can not find any provision in the law that requires it.
While not exactly required by law, re-scrambling non-FTA contents is mandated/implied by CI+ implementation guidelines they are required to follow. But they don't need to scramble FTA streams as well! This, looks like, they are doing purely by their own choice..

Regarding LG, I don't know what cipher/implementation they use to scramble their recordings. In theory, it should be something at least as secure as AES128-CBC (Samsung doesn't follow this guideline to the letter - they are using AES128-ECB, AFAIRC - which is a little bit less "secure", but a whole lot more convenient).

It's probably something relatively simple to implement in hardware (AES, 3DES, .. - whatever given SoC manufacturer decided to include in particular chip). However, I don't expect LG developers to be quite as sloppy as Samsung's ;). I.e., to store decryption key in plaintext (!!!), along with the recordings: what the f**k were they thinking..
geo650
Official SamyGO Developer
Posts: 303
Joined: Wed Oct 07, 2009 12:03 pm

Re: Samsung PVR Content Decrypting tool - final

Post by geo650 »

sbav1 wrote:While not exactly required by law, re-scrambling non-FTA contents is mandated/implied by CI+ implementation guidelines they are required to follow. But they don't need to scramble FTA streams as well! This, looks like, they are doing purely by their own choice..

...to store decryption key in plaintext (!!!), along with the recordings: what the f**k were they thinking..
Maybe they were nervous about Noth Korea plans... ;)
Well, Samsung is trying to meet CI+ guidelines to encrypt the content but probably is not going to complicate their work. LG is encrypting FTA contents as well.
So I have no hope for LG recordings (on quite old but still not rooted LW570S (*), Broadcom BCM35230-based model). I don't even know if that *STR file contains pure TS stream (with equally spaced 0x47 sync bytes that could be used at least to brute-force decryption) or something more. Well, I wish OpenLGTV forum to be as rich and crowded as SamyGO here. See you!

(*) UPDATE 2017: Rooted, DVR recordings decrypted, so almost everything is possible!
Apollo
Posts: 3
Joined: Thu Jul 04, 2013 2:07 pm

Re: Samsung PVR Content Decrypting tool - final

Post by Apollo »

Hello,

i have update the c program a little bit. The attached c program reads also the the inf file to find the name of the recording. There is also a really small bash file to run over a batch of *.srf files.

to use is the bash file:

sh decrypt.sh PATH/TO/CONTENTS/ /OUTPUT/PATH/

use only the c program:

./drmdecrypt /PATH/TO/MOVIE.srf /OUTPUT/PATH/


The output will be: moviename - date.ts in /output/path

Only tested on Linux!! There is a function called basename wich will not work under windows.

Regards, Apollo
You do not have the required permissions to view the files attached to this post.
adiksw
Posts: 2
Joined: Wed Jul 10, 2013 9:34 pm

Re: Samsung PVR Content Decrypting tool - final

Post by adiksw »

I used the program attached to the post above, but generated ts file does not open in vlc. I used ubuntu. I don't know where I have to write key from php script. What did I do wrong?
Apollo
Posts: 3
Joined: Thu Jul 04, 2013 2:07 pm

Re: Samsung PVR Content Decrypting tool - final

Post by Apollo »

You don't have to write any key. The programm find the key self.

simple run:

./drmdecrypt /PATH/TO/MOVIE.srf /OUTPUT/PATH/


in /PATH/TO should be also the "content" files.
adiksw
Posts: 2
Joined: Wed Jul 10, 2013 9:34 pm

Re: Samsung PVR Content Decrypting tool - final

Post by adiksw »

I have the following files:
.PVRPfmChkLog
20130707142503.cip
20130707142503.inf
20130707142503.mdb
20130707142503.mta
20130707142503.srf
20130707142503.ss
NewBoard.ss

I used: ./drmdecrypt 20130707142503.srf ~
After the operation I moved ts file on Windows. But I can't run it in WMP and VLC.

I have: UE46F7000
blubber
Posts: 1
Joined: Tue Aug 13, 2013 12:06 pm

Re: Samsung PVR Content Decrypting tool - final

Post by blubber »

Hi, things work really fine with a ue37c6800!

but last versions of the tool do decode only part of the .ts-file (for a 4.x GB file only 1.x GB ...). The windows destroi version decodes all, the drmdecrypt version of 20111203-1552 does the job too. With the last one, I have to stop the job manually after the lost synk message - but the rest works ... any idea, why the newer version of the tool only decode part of the file?

by the way: renaming the Timeshift.tmp to Timeshift.srf and using also the Timeshift.mdb works too :-)

Greetings :-)
xkoeckiiej
Posts: 8
Joined: Sun Aug 11, 2013 12:19 pm

Re: Samsung PVR Content Decrypting tool - final

Post by xkoeckiiej »

adiksw wrote:I have the following files:
.PVRPfmChkLog
20130707142503.cip
20130707142503.inf
20130707142503.mdb
20130707142503.mta
20130707142503.srf
20130707142503.ss
NewBoard.ss

I used: ./drmdecrypt 20130707142503.srf ~
After the operation I moved ts file on Windows. But I can't run it in WMP and VLC.

I have: UE46F7000
That's because the app does only decrypt up to the D series (a,b,c,d)
the E and F series are not decryptable for the public
i hope someone releases a update for destroi or a new program soon
even though i dont think so since its been more then a year. :(

If someone knows a way to decrypt on ES series please quote me !:D
Thanks in advance
Apollo
Posts: 3
Joined: Thu Jul 04, 2013 2:07 pm

Re: Samsung PVR Content Decrypting tool - final

Post by Apollo »

Well the problem on writing such programs is time ;). Decrypting some unknown stuff is an heavy try and error process. Its not like in movies where someone click three buttons and hack everything :twisted:. Buying some recorder without encryption is in the most cases cheaper and faster.

Post Reply

Return to “[D] Software”