Help for Nagra cak7

There are 2 replies in this Thread which was already clicked 3,558 times. The last Post () by master G.

    Hello everyone

    I'm working on nagra merlin and I would like to know the method to calculate RSAmod1 and RSAmod2 from the dump flash memory.

    I dumped the flash and I search the 5 blocks that will allow me to find mod1 mod2.

    Thanks for your help


    Code
    This 2 0x70 RSAs are a Result of Xoring other 4 blocks of 0x70 bytes stored in STB firmware Flash.

Block 1 XOR Block 2 = RSA_MOD_1 Provider STB manufacturer specific global key ( This key is only used on DT05_00 and DT05_10 RSA decrypt steps for Global Generic Pairing Mode)

Block 3 xor Block 4 = RSA_MOD_2 Provider Specific STB Global RSA key ( This key is Unique for Each Provider and this key is used only for STB using Unique Pairing with CMD DT05_20)

Block 4 xor Block 5 = RSA_MOD88 used for CMD$03 steps


    Thank you for your help

    Edited 2 times, last by satbidule ().

OSCam Support Forum

Configs, discussion, downloads and guides for OSCam Softcam.

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!

Register Yourself Login