Firmware Decrypt

Samsung's BluRay player related hacks.

User avatar
greenhorn
SamyGO Project Donor
Posts: 701
Joined: Wed Feb 15, 2012 3:05 pm
Location: Eastern Europe

Firmware Decrypt

Post by greenhorn »

Trying to decrypt FW, but got this:

Code: Select all

SamyGO Firmware Patcher v0.31Beta (c) 2010-2011 Erdem U. Altinyurt

                   -=BIG FAT WARNING!=-
            You can brick your TV with this tool!
Authors accept no responsibility about ANY DAMAGE on your devices!
         project home: http://www.SamyGO.tv

Firmware:  B-FIRBPEWWC v1013.0

AES Encrytped CI+ firmware detected.
Decrypting with AES...
secret key :  A435HX:d3e90afc-0f09-4054-9bac-350cc8dfc901-7cee72ea-15ae-45ce-b0f
5-611c4f8d4a71
Decrypting AES...

Decrypting with  XOR Key :
Crypto package found, using fast XOR engine.
Traceback (most recent call last):
  File "SamyGO.py", line 1238, in <module>
    Decryptor( sys.argv[2] )
  File "SamyGO.py", line 1073, in Decryptor
    decfile,md5digg,xorkey = xor( encfile )
  File "SamyGO.py", line 95, in xor
    cip_xor = XOR.new( keyData )
ValueError: XOR key cannot be the null string (0 bytes long)
Any idea?
TV: UE40F7000 - T-FXPDEUC-1115.0 - SamyGO Extensions on F series
TV: UE55ES7000S - T-ECPDEUC-2003.4 - SamyGO tool Right from USB - no develop account is needed
TV: UE40C6710 - T-VALDEUC 3011 - Hacking TV over Hotel mode (C650 T-VALDEUC-3009.2)
BD-Player: BD-E6100 - B-FIRBPEWWC 1063.3 - rooted, no more Cin@vi@
NAS: CIFS: MAG250 NFS: Playon!HD
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: Firmware Decrypt

Post by juusso »

bug in script while de-xoring? No xor key used.

edit:
@arris69
wrong aes key used. Isn`t?
oh yes, just checked and here is no B-FIR... inside.

@greenhorn, sorry, you cannot decrypt this firmware using samygo patcher. To feel better, try this:
SamyGO.7z
You do not have the required permissions to view the files attached to this post.
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
User avatar
greenhorn
SamyGO Project Donor
Posts: 701
Joined: Wed Feb 15, 2012 3:05 pm
Location: Eastern Europe

Re: Firmware Decrypt

Post by greenhorn »

I just tried, but got this:
SamyGO Firmware Patcher v0.31Beta (c) 2010-2011 Erdem U. Altinyurt

-=BIG FAT WARNING!=-
You can brick your TV with this tool!
Authors accept no responsibility about ANY DAMAGE on your devices!
project home: http://www.SamyGO.tv

Firmware: B-FIRBPEWWC v1013.0

AES Encrytped CI+ firmware detected.
Decrypting with AES...
Error : Secret AES key cannot be calculated in this version of SamyGO Firmware P
atcher.
TV: UE40F7000 - T-FXPDEUC-1115.0 - SamyGO Extensions on F series
TV: UE55ES7000S - T-ECPDEUC-2003.4 - SamyGO tool Right from USB - no develop account is needed
TV: UE40C6710 - T-VALDEUC 3011 - Hacking TV over Hotel mode (C650 T-VALDEUC-3009.2)
BD-Player: BD-E6100 - B-FIRBPEWWC 1063.3 - rooted, no more Cin@vi@
NAS: CIFS: MAG250 NFS: Playon!HD
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: Firmware Decrypt

Post by juusso »

Yest, thats the truth:
Secret AES key cannot be calculated in this version of SamyGO Firmware Patcher.
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: Firmware Decrypt

Post by juusso »

Where did you download this firmware from? for what bd model it is?

I you need to look into bd firmware, you can use latest samygo patcher (updated today) and any other B-FIR* (FIRURDEUC, FIRBP7WWC and other) firmware, except B-FIRBPEWWC, because it is E series BD player firmware and we don`t have aes key for this (yet.)
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
User avatar
greenhorn
SamyGO Project Donor
Posts: 701
Joined: Wed Feb 15, 2012 3:05 pm
Location: Eastern Europe

Re: Firmware Decrypt

Post by greenhorn »

It's bd-e6100. I downloaded the fw from:
http://www.samsung.com/uk/support/model ... oadName=FM
TV: UE40F7000 - T-FXPDEUC-1115.0 - SamyGO Extensions on F series
TV: UE55ES7000S - T-ECPDEUC-2003.4 - SamyGO tool Right from USB - no develop account is needed
TV: UE40C6710 - T-VALDEUC 3011 - Hacking TV over Hotel mode (C650 T-VALDEUC-3009.2)
BD-Player: BD-E6100 - B-FIRBPEWWC 1063.3 - rooted, no more Cin@vi@
NAS: CIFS: MAG250 NFS: Playon!HD
User avatar
greenhorn
SamyGO Project Donor
Posts: 701
Joined: Wed Feb 15, 2012 3:05 pm
Location: Eastern Europe

Re: BD D-Series Firmware Downgrade (SamyGO Proof of Concept)

Post by greenhorn »

@juuso
Can pls share all firmware ver that you have about B-FIRBPEWWC?
TV: UE40F7000 - T-FXPDEUC-1115.0 - SamyGO Extensions on F series
TV: UE55ES7000S - T-ECPDEUC-2003.4 - SamyGO tool Right from USB - no develop account is needed
TV: UE40C6710 - T-VALDEUC 3011 - Hacking TV over Hotel mode (C650 T-VALDEUC-3009.2)
BD-Player: BD-E6100 - B-FIRBPEWWC 1063.3 - rooted, no more Cin@vi@
NAS: CIFS: MAG250 NFS: Playon!HD
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: Firmware Decrypt

Post by juusso »

I just have v. 1007.0. That`s all.

EDIT: here is the link. But i`m sure you can`t install it normal way.
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
User avatar
greenhorn
SamyGO Project Donor
Posts: 701
Joined: Wed Feb 15, 2012 3:05 pm
Location: Eastern Europe

Re: Firmware Decrypt

Post by greenhorn »

ok. hope it works.
TV: UE40F7000 - T-FXPDEUC-1115.0 - SamyGO Extensions on F series
TV: UE55ES7000S - T-ECPDEUC-2003.4 - SamyGO tool Right from USB - no develop account is needed
TV: UE40C6710 - T-VALDEUC 3011 - Hacking TV over Hotel mode (C650 T-VALDEUC-3009.2)
BD-Player: BD-E6100 - B-FIRBPEWWC 1063.3 - rooted, no more Cin@vi@
NAS: CIFS: MAG250 NFS: Playon!HD
andi
Posts: 40
Joined: Sat Aug 04, 2012 7:14 am

Re: Firmware Decrypt

Post by andi »

Hi,
I am also trying to decode the blu-ray firmware to learn a little more. In my case it is BD-D8900 firmware (B-FIRHRDEUC). The previous samygo patcher didn't work at all. However I managed to modify the latest one to make it run. When I run the script with decrypt_all parameter, the three files exe.img.sec, Image.sec, rootfs.img.sec all finish with CRC Validation passed.
But, when looking at the contents of the decrypted files, only Image contains some readable text strings, the other two exe.img and rootfs.img have no readable text.
Am I missing something? I presume that the images are some kind of filesystem images and therefore I expected some filenames to be readable.

Post Reply

Return to “BluRay Players”