Omega Owners Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

Please play nicely.  No one wants to listen/read a keyboard warriors rants....

Pages: 1 2 3 4 5 6 [7] 8 9   Go Down

Author Topic: NCDx security coding  (Read 24616 times)

0 Members and 6 Guests are viewing this topic.

Marks DTM Calib

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • West Bridgford
  • Posts: 34126
  • Git!
Re: NCDx security coding
« Reply #90 on: 14 October 2008, 14:11:47 »
Should have my I2C programmer working this Pm.....so will start to draw some files.
Logged

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107895
  • I Like Lockdown
    • Whatever Starts
Re: NCDx security coding
« Reply #91 on: 14 October 2008, 19:12:05 »
Right, getting along nicely with CDC board that was paired to another unknown setup, and we didn't have the code.  I now know how to put CDC board into delivery mode.

That means I have the following in delivery mode:

NCDC2013 (faulty)
CDC (board only, part of mech missing)
CID (with faulty screen)


I do not (yet) have a telematics in delivery mode.
Logged
Grumpy old man

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107895
  • I Like Lockdown
    • Whatever Starts
Re: NCDx security coding
« Reply #92 on: 14 October 2008, 19:15:59 »
Dave DND - Email sent, see if you can decode the code I paired this CDC with.  If so, that may prove very useful.
Logged
Grumpy old man

Marks DTM Calib

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • West Bridgford
  • Posts: 34126
  • Git!
Re: NCDx security coding
« Reply #93 on: 14 October 2008, 21:23:54 »
Ok, just knocked a ponyprog up.....



....ready to go!
Logged

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107895
  • I Like Lockdown
    • Whatever Starts
Re: NCDx security coding
« Reply #94 on: 14 October 2008, 21:36:27 »
Quote
Ok, just knocked a ponyprog up.....



....ready to go!
I'm using mine so much, I should do it properly, rather than how it is (just component legs soldered together) - it was only a quick and dirty to do traffic master 'repairs'
Logged
Grumpy old man

VXL V6

  • Omega Lord
  • *****
  • Offline Offline
  • Gender: Male
  • Warwickshire
  • Posts: 9908
    • 530D M Sport, 330i Coupe
Re: NCDx security coding
« Reply #95 on: 15 October 2008, 13:09:19 »
Quote
Quote
Ok, just knocked a ponyprog up.....



....ready to go!
I'm using mine so much, I should do it properly, rather than how it is (just component legs soldered together) - it was only a quick and dirty to do traffic master 'repairs'

LOL I seem to remember that!  ::) ;D
Logged

Kevin Wood

  • Global Moderator
  • *****
  • Offline Offline
  • Gender: Male
  • Alton, Hampshire
  • Posts: 36519
    • Jaguar XE 25t, Westfield
Re: NCDx security coding
« Reply #96 on: 15 October 2008, 13:52:27 »
Quote
Quote
Quote
Ok, just knocked a ponyprog up.....



....ready to go!
I'm using mine so much, I should do it properly, rather than how it is (just component legs soldered together) - it was only a quick and dirty to do traffic master 'repairs'

LOL I seem to remember that!  ::) ;D
The birds' nest!

Kevin
Logged
Tech2 services currently available. See TheBoy's price list: http://theboy.omegaowners.com/

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107895
  • I Like Lockdown
    • Whatever Starts
Re: NCDx security coding
« Reply #97 on: 15 October 2008, 18:34:27 »
Quote
Quote
Quote
Quote
Ok, just knocked a ponyprog up.....



....ready to go!
I'm using mine so much, I should do it properly, rather than how it is (just component legs soldered together) - it was only a quick and dirty to do traffic master 'repairs'

LOL I seem to remember that!  ::) ;D
The birds' nest!

Kevin
But it works, despite being crushed under a car jumpstarter (used to power network switch for a while until yet another adapter was acquired) ::)
Logged
Grumpy old man

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107895
  • I Like Lockdown
    • Whatever Starts
Re: NCDx security coding
« Reply #98 on: 15 October 2008, 21:41:33 »
Believe we have found where the code is possibly stored, but unsure, currently, how to decrypt it.
Logged
Grumpy old man

Dave DND

  • Omega Baron
  • *****
  • Offline Offline
  • Gender: Male
  • DND Services Ltd
  • Posts: 4216
    • Paignton, Devon
    • DND Services Ltd
Re: NCDx security coding
« Reply #99 on: 15 October 2008, 23:15:18 »
Quote
Believe we have found where the code is possibly stored, but unsure, currently, how to decrypt it.

I`m going to pass those dumps on to a few tecchie friends of mine to see if we can work out a decryption based on your data - I`ll also chase up a few friends within Siemens/Germany to see if we can make any ground there as well.

For anyone else playing around, only the dumps from the NCDC range of radio / CDC3 combination are applicable to this, and no matter what you know about other CDC3 combo`s, the data is completely irrelavent when used with NCDC. Thanks to TB, this has now been fully proven.

 :-[
Logged
Radio & Decoding Technician
In Car Audio Service Department
www.dndservices.co.uk

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107895
  • I Like Lockdown
    • Whatever Starts
Re: NCDx security coding
« Reply #100 on: 16 October 2008, 20:20:16 »
OK, desperately close to achieving my original aim - being able to get code for my setup in MV6 (code unknown) purely from info gleaned from CDC3.

I believe I can already do it for NCDC2013 type stereos now.  Just need a dump from a CDC, so I can prove on another unit.

Volunteer time! ;)
Logged
Grumpy old man

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107895
  • I Like Lockdown
    • Whatever Starts
Re: NCDx security coding
« Reply #101 on: 16 October 2008, 22:17:12 »
OK, all the codes I have put on my test ncdc2013, I have been able to predict the contents of the flash chip in the cdc.

Hopefully, there is nothing specific about different headunits that cause a variation in the encryption.
Logged
Grumpy old man

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107895
  • I Like Lockdown
    • Whatever Starts
Re: NCDx security coding
« Reply #102 on: 16 October 2008, 22:20:26 »
Additionally, I have done lots of testing with partially paired systems, so I know how to recover from partially depaired systems, or replacing failed components if the original codes are known.
Logged
Grumpy old man

Dave DND

  • Omega Baron
  • *****
  • Offline Offline
  • Gender: Male
  • DND Services Ltd
  • Posts: 4216
    • Paignton, Devon
    • DND Services Ltd
Re: NCDx security coding
« Reply #103 on: 16 October 2008, 23:05:49 »
As TB said, a call to anyone else who can provide a dump or the quick loan of an NCDC set to have a quick play with please.

This is very nearly cracked I think, TB has covered a lot of ground today !!

Oh, and purely as a side issue, TB, the dump you sent for the 2222 pairing has the corrected data for fixing the CDC-SAFE error on the NCDC systems !!!   It would appear that the two data bits causing the error on this particular combination are actually held within the code eeprom on the CDC !!  Rewrite the chip with the clean dump and the error goes away.

 :y
Logged
Radio & Decoding Technician
In Car Audio Service Department
www.dndservices.co.uk

feeutfo

  • Guest
Re: NCDx security coding
« Reply #104 on: 17 October 2008, 00:35:33 »
do i take one step forward or does everyone else take one step back? 2015 though?
Logged
Pages: 1 2 3 4 5 6 [7] 8 9   Go Up
« previous next »
 

Page created in 1.545 seconds with 20 queries.