Page 1 of 3

Firmware Decrypt

Posted: Sat Sep 22, 2012 1:38 pm
by greenhorn
Trying to decrypt FW, but got this:

Code: Select all

SamyGO Firmware Patcher v0.31Beta (c) 2010-2011 Erdem U. Altinyurt

                   -=BIG FAT WARNING!=-
            You can brick your TV with this tool!
Authors accept no responsibility about ANY DAMAGE on your devices!
         project home: http://www.SamyGO.tv

Firmware:  B-FIRBPEWWC v1013.0

AES Encrytped CI+ firmware detected.
Decrypting with AES...
secret key :  A435HX:d3e90afc-0f09-4054-9bac-350cc8dfc901-7cee72ea-15ae-45ce-b0f
5-611c4f8d4a71
Decrypting AES...

Decrypting with  XOR Key :
Crypto package found, using fast XOR engine.
Traceback (most recent call last):
  File "SamyGO.py", line 1238, in <module>
    Decryptor( sys.argv[2] )
  File "SamyGO.py", line 1073, in Decryptor
    decfile,md5digg,xorkey = xor( encfile )
  File "SamyGO.py", line 95, in xor
    cip_xor = XOR.new( keyData )
ValueError: XOR key cannot be the null string (0 bytes long)
Any idea?

Re: Firmware Decrypt

Posted: Sat Sep 22, 2012 3:14 pm
by juusso
bug in script while de-xoring? No xor key used.

edit:
@arris69
wrong aes key used. Isn`t?
oh yes, just checked and here is no B-FIR... inside.

@greenhorn, sorry, you cannot decrypt this firmware using samygo patcher. To feel better, try this:
SamyGO.7z

Re: Firmware Decrypt

Posted: Sun Sep 23, 2012 7:33 am
by greenhorn
I just tried, but got this:
SamyGO Firmware Patcher v0.31Beta (c) 2010-2011 Erdem U. Altinyurt

-=BIG FAT WARNING!=-
You can brick your TV with this tool!
Authors accept no responsibility about ANY DAMAGE on your devices!
project home: http://www.SamyGO.tv

Firmware: B-FIRBPEWWC v1013.0

AES Encrytped CI+ firmware detected.
Decrypting with AES...
Error : Secret AES key cannot be calculated in this version of SamyGO Firmware P
atcher.

Re: Firmware Decrypt

Posted: Sun Sep 23, 2012 7:45 am
by juusso
Yest, thats the truth:
Secret AES key cannot be calculated in this version of SamyGO Firmware Patcher.

Re: Firmware Decrypt

Posted: Sun Sep 23, 2012 12:15 pm
by juusso
Where did you download this firmware from? for what bd model it is?

I you need to look into bd firmware, you can use latest samygo patcher (updated today) and any other B-FIR* (FIRURDEUC, FIRBP7WWC and other) firmware, except B-FIRBPEWWC, because it is E series BD player firmware and we don`t have aes key for this (yet.)

Re: Firmware Decrypt

Posted: Sun Sep 23, 2012 4:54 pm
by greenhorn
It's bd-e6100. I downloaded the fw from:
http://www.samsung.com/uk/support/model ... oadName=FM

Re: BD D-Series Firmware Downgrade (SamyGO Proof of Concept)

Posted: Mon Sep 24, 2012 3:50 pm
by greenhorn
@juuso
Can pls share all firmware ver that you have about B-FIRBPEWWC?

Re: Firmware Decrypt

Posted: Mon Sep 24, 2012 4:24 pm
by juusso
I just have v. 1007.0. That`s all.

EDIT: here is the link. But i`m sure you can`t install it normal way.

Re: Firmware Decrypt

Posted: Mon Sep 24, 2012 5:21 pm
by greenhorn
ok. hope it works.

Re: Firmware Decrypt

Posted: Mon Sep 24, 2012 7:34 pm
by andi
Hi,
I am also trying to decode the blu-ray firmware to learn a little more. In my case it is BD-D8900 firmware (B-FIRHRDEUC). The previous samygo patcher didn't work at all. However I managed to modify the latest one to make it run. When I run the script with decrypt_all parameter, the three files exe.img.sec, Image.sec, rootfs.img.sec all finish with CRC Validation passed.
But, when looking at the contents of the decrypted files, only Image contains some readable text strings, the other two exe.img and rootfs.img have no readable text.
Am I missing something? I presume that the images are some kind of filesystem images and therefore I expected some filenames to be readable.