How to decrypt .CMK and .SMK files

[mamaich1]

As I'm planning to buy a small TV for placing in a bedroom (probably UE32ES6727) - I've started to study recent firmware for new possibilities. Seems that noone have published keys to decrypt CMK files yet, so here are they:

Code: Select all

   openssl.exe aes-128-cbc -d -K B1D5F122E75D757C79F48886D42F8E1A -in index.html.cmk  -nosalt -iv BFE932F9273DC2A0DFC93F0B8E7AC7C2 -out index.html

Tested on T-MST10PDEUC, firmware 1029. Probably the keys are the same for all models, as I was able to decrypt files in samsung adhub archive downloaded from their site.
Of cause you can encrypt the files back with the same keys.

Edited, to be located in one place. Here is a command to decrypt .SMK files from SDK:

Code: Select all

  openssl.exe aes-128-cbc -d -K 84AA59959849F6DDD4823B90F7913902 -in config.xml.smk -nosalt -iv 1DA76DE2A0EE55C0DBCCEDA772E3684D -out config.xml

Obviously, Samsung would change keys, or (wiser) switch to a non-symmetric algo in next devices, but this would not be a big problem anyway.

[juusso]

Hey, ??????, welcome back! And seems, you`re now not on Trident, but on ES series already

[mamaich1]

Hey, ??????, welcome back! And seems, you`re now not on Trident, but on ES series already

Trident is almost dead (broken hardware, currently in service). ES series are much better - they are ARM, not big-endian mips, so it would be much easier to reverse.
I'll buy UE32ES6727 this or next weekend - currently just studying its ROM dumps.

[nobody]

Any idea on the key used to sign widgets?

[juusso]

Have you tried same key?

SpoilerShow

Code: Select all

openssl aes-128-cbc -e -K 84AA59959849F6DDD4823B90F7913902 -in config.xml  -nosalt -iv 1DA76DE2A0EE55C0DBCCEDA772E3684D -out config.xml.smk

[arris69]

Have you tried same key?

SpoilerShow

Code: Select all

openssl aes-128-cbc -e -K 84AA59959849F6DDD4823B90F7913902 -in config.xml  -nosalt -iv 1DA76DE2A0EE55C0DBCCEDA772E3684D -out config.xml.smk

think he means smthg different stuff, some widgets have signature files inside (maybe this ones can use then also native api)

[dajojo]

Have you tried same key?

SpoilerShow

Code: Select all

openssl aes-128-cbc -e -K 84AA59959849F6DDD4823B90F7913902 -in config.xml  -nosalt -iv 1DA76DE2A0EE55C0DBCCEDA772E3684D -out config.xml.smk

think he means smthg different stuff, some widgets have signature files inside (maybe this ones can use then also native api)

like youtube or you mean the channels /camera/browser ?

[arris69]

Have you tried same key?

SpoilerShow

Code: Select all

openssl aes-128-cbc -e -K 84AA59959849F6DDD4823B90F7913902 -in config.xml  -nosalt -iv 1DA76DE2A0EE55C0DBCCEDA772E3684D -out config.xml.smk

think he means smthg different stuff, some widgets have signature files inside (maybe this ones can use then also native api)

like youtube or you mean the channels /camera/browser ?

think any widget what use native code (*.so files in the widget pack) or use some api's whare you can execute native code (some half documeneted plugin interface)

[kukuku777]

does anyone have keys for Emulator2013_v4 smk/cmk files ??
Thx

[juusso]

SpoilerShow

Code: Select all

2B421CC9A46A67A685873205212007838534CEF9B055FC016824FC01177E4C79