T-VALDEUC Firmware AES key :)

Ideas and dreaming about C series TV will go this forum.

User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: T-VALDEUC Firmware AES key :)

Post by juusso »

Denny, yes, your way is good! But we need hack TV first to get telnet access. New 3009 firmwares do not allow make hotel mode hack and widget hack is gone too. Then we need somthing new...
Is here a way to run telnet-enabler from widget? Or widget-telnet enabler, makes no sense how do we call it.
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
Denny
Official SamyGO Developer
Posts: 350
Joined: Thu Sep 30, 2010 12:18 pm
Location: Croatia

Re: T-VALDEUC Firmware AES key :)

Post by Denny »

Code: Select all

Denny, yes, your way is good! But we need hack TV first to get telnet access. New 3009 firmwares do not allow make hotel mode hack.

i know what u mean, but dont worry about this , will be also posible to do by widget, just the one point that needs to be done, in code is litelbit fuzzy to reverse it complete but will be done!!! :)

look, if someone alredy update 3009 he even can not do anything with modified firmware coz he can not disable rsa check coz it is in exeDSP and we dont have private key, so no way except widget way and i am 1000% sure it can be done coz i have for cmk private rsa key! :D .

Denny
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: T-VALDEUC Firmware AES key :)

Post by juusso »

coz i have for cmk private rsa key!
God bless (Denny)!
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
Denny
Official SamyGO Developer
Posts: 350
Joined: Thu Sep 30, 2010 12:18 pm
Location: Croatia

Re: T-VALDEUC Firmware AES key :)

Post by Denny »

wortex , yes simple arm_v7_vfp_le


i think if u try #include <openssl/something.h> u will get error, so , simple c standard code , finish :)


@ juuso ^..^

so am now away, let see when i get fw flash routine out, in BD-C6900 asm code was easy, for valdeuc is litelbit fuzzy to trace all.
Last edited by Denny on Thu May 12, 2011 8:11 pm, edited 1 time in total.
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: T-VALDEUC Firmware AES key :)

Post by juusso »

wortex wrote: BTW a good idea to test key with 3009 too...
Yes, i can confirm, it decrypts T-VALDEUC-3009.2 properly. Just done ;)
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: T-VALDEUC Firmware AES key :)

Post by juusso »

k4roshi wrote:Just so you know.. it decrypts t-val6deuc successfully too..
T-VALDAAC-1008.0 as well.

I think the same key is for whole T-VAL**** firmware family.
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
timoo
Posts: 119
Joined: Mon Aug 16, 2010 6:43 pm
Location: Czech Republic
Contact:

Re: T-VALDEUC Firmware AES key :)

Post by timoo »

T-VALDCNC 1011.1
decrypted too :)
mirsev
Posts: 48
Joined: Tue Apr 05, 2011 7:58 pm

Re: T-VALDEUC Firmware AES key :)

Post by mirsev »

card2000 wrote:

Code: Select all

Denny, yes, your way is good! But we need hack TV first to get telnet access. New 3009 firmwares do not allow make hotel mode hack.
i know what u mean, but dont worry about this , will be also posible to do by widget, just the one point that needs to be done, in code is litelbit fuzzy to reverse it complete but will be done!!! :)

look, if someone alredy update 3009 he even can not do anything with modified firmware coz he can not disable rsa check coz it is in exeDSP and we dont have private key, so no way except widget way and i am 1000% sure it can be done coz i have for cmk private rsa key! :D .
Denny
Hi, I don't understand, if you can decrypt and encrypt back firmware, why don't you just install telnetd, ftpd, and/or sshd and their startup scripts on the decrypted rootfs or mtd_exe, build new squashfs, rewrite hashes, encrypt firmware back and flash it by standard way? Is there problem do do that?

Post Reply

Return to “[C] Brainstorm”