Nokia RSA Private key 195F111A9543A8644E77E1677296AB23 for free...

[karwos]

Those who know how to use it, will use it.
Nokia don't use this key widely in production, but if you have prototype/test/demonstration aka "not for sale" phone....

ROOT Key: 195F111A9543A8644E77E1677296AB23

http://www.**********/195F111A9543A86...230BF60EAD.pem

Enjoy... don't ask how to use it - its for those who knows how to use it, and knows sometihing aobut BB5 architecture, and know what can be signed by Rootkey.

[MOURAD™]

-----BEGIN RSA PRIVATE KEY-----
MIICXAIBAAKBgQCzfpk/p2DhAt2BXFoYGZqW2MRpY9ZrRHNit20o7PITqNgJWfty
IOL6Ws2C75x0RvSeiyB7upMQ/F16f9wJ/glcx8MgQHKCVGN7tEP1IUypJIEAysfA
GnSS0Qb9rHWBMUTwRS3Qmk9335dXlS6AQdYemvqqv/eQaH59pYku8nFdKQIBAwKB
gHepu3/E60Csk6uS5rq7vGSQgvDtOZzYTOx6SMXzTA0bOrDmp6FrQfw8i QH1Evgv
Tb8Hav0nDLX9k6b/6AapW5IQt4z/VuPcrRdrAwzZL0I3AUZw9lJ7ptK8GJmm1zwc
dXg++tM0GmvJxmQNM4FgL/EE4DO/eHgCdZROalgK5JuLAkEA6+PVwxMu+JnHcGJ7
dy7+H6OwKczZmZHQSnf9xqE0dmuyiguzKnIN5ZE/7T2DTlwuK22uNesRhqBh3J4p
/kg2dQJBAMLL9v5c/ZDGESNc5mRWx7JbZveJasdohmxqGWuRcpApCVyp4KG1yEtc
gZQjuuMyBug8rurXyt4tvVNLgOPSPWUCQQCdQo6CDMn7ES+gQa ekyf6/wnVxMzu7
torcT/6Ea3hO8ncGsndxoV6ZC3/zfleJkslySR7OnLZZwEE9vsaphXmjAkEAgd1P
VD3+YIQLbOiZmDnadueZ+luchPBZnZwQ8mD3CsYGPcaVwSPa3O hWYsJ8l3avRX3J
8eUx6XPTjN0Al+F+QwJBAOIz9kOWWdfhDLvGbXg4/q5qBpHTc+crcX/+qio8y0M0
9NkB5qElfcc8cSD262Ug49pbiLBrv0h0PtqdyTCAAOc=
-----END RSA PRIVATE KEY-----

Originally Posted by karwos

Those who know how to use it, will use it.
Nokia don't use this key widely in production, but if you have prototype/test/demonstration aka "not for sale" phone....

ROOT Key: 195F111A9543A8644E77E1677296AB23

http://www.**********/195F111A9543A86...230BF60EAD.pem

Enjoy... don't ask how to use it - its for those who knows how to use it, and knows sometihing aobut BB5 architecture, and know what can be signed by Rootkey.

Posted earlier, use google to find it....

[karwos]

COuld you post exact link?
Finding RSA private keys isn't common on google

Or, maybe you mean key HASH haha

[karwos]

Originally Posted by Mrd07

Posted earlier, use google to find it....

Respond, and not edit your posts like a ...

[MOURAD™]

Or, maybe you mean key HASH haha

maybe hehe ...If we can't distinguish about RSA Private/public keys/Hash...its funny.

Respond, and not edit your posts like a ...

You can ask Zuela about it.

[karwos]

Originally Posted by Mrd07

maybe hehe ...If we can't distinguish about RSA Private/public keys/Hash...its funny.



You can ask Zuela about it.

Still didn't catch purpose of your post.
This is technical subforum, and if you don't have nothing to tell, then leave posts "ask zulea" blabla for yourself.
And again: post link, or leave "use google" comments for yourself.

[MOURAD™]

Originally Posted by karwos

Still didn't catch purpose of your post.
This is technical subforum, and if you don't have nothing to tell, then leave posts "ask zulea" blabla for yourself.
And again: post link, or leave "use google" comments for yourself.

To make change SL data need RSA1024 signature must use this RSA private key................

[karwos]

Originally Posted by Mrd07

To make change of each new SL data need RSA1024 signature, so it need this RSA private key....

Seems you know nothing about BB5 architecture, and moreover you don't know nothing about RSA, or in general public key cryptography. Let me explain few things for you:

1. Each phone having "KEYS" certificate. Inside KEYS you will find
a) Magic, constant
b) ROOT RSA Public Key - it's hashed and must MATCH with "rootkey hash"
c) OEM1, OEM2 Key
d) PA keys, RD Keys and others

This forms one block called KEYS.

Second block is PAPUBKEYS, this consist of keys used in Simlock signature, NPC signature, and in generic Public keys used in PA.
Block KEYS is signed using ROOT KEY Private key.
Block PAPUBKEYS are signed using Public KEYS previously loaded in secure ram from "KEYS" block.
There is only about 8-10 ROOT keys in Nokia.
The 195F... is just hash of Root RSA public key, and it is tightly coupled with phone MCU.
If you can PROPERLY SIGN KEYS block using this ROOT key, that means you can generate your own OEM1, OEM2, PA keys, then you can sign PAPUBKEYS with own Simlock RSA key, then... maybe now it is more clear for you. Or no, i will post even completly steps for you:
1. Read KEYS from your working phone
2. Replace PAPUB key with your own generated RSA1024 key
3. Sign KEYS using RSA ROOT private key
4. Replace Simlock RSA public key in PAPUBKEYS with your 2nd own genrated RSA1024, and sign with previously generated key, which is also stored in KEYS
5. Flash keys and papubkeys
6. Sign simlock with your 2nd generated RSA KEY
Optional steps:
7. Release signed keys and papubkeys for keys which you have acces (for example baf3, 9ddb), so your customers can one-click flash them
8. Hold your generated keys on your HDD
9. Now you can run own Simlock server, or even more IMEI server and calculate NPC for example using YOUR rsa keys
10. Count money



So using ROOT KEY you can properly sign KEYS, which means phone security is completly compromised. Obtainiing any ROOT key means WHOLE phone security is down. Even if just a simlock RSA key would leak - Nokia use diffrent RSA keys for DIFFRENT models... so leaking one key would cause just properly to sign RSA only for one model (papubkey hash...).

I don't know how to explain more, but as I stated in first post - if you don't have knowledge how it works and how to use it - don't post bull****s like "it was posted already" and don't create mess here.

[Bph&co]

Hi,

What is this format ? Base64 with compression ? The data seems 100 or more
bytes short to be private key, but for sure is not just public key. Maybe post
as binary data ?

About the root hash - i am not sure anyone has a proto with such hash.

BR

[karwos]

Originally Posted by Bph&co

Hi,

What is this format ? Base64 with compression ? The data seems 100 or more
bytes short to be private key, but for sure is not just public key. Maybe post
as binary data ?

About the root hash - i am not sure anyone has a proto with such hash.

BR

Use google, there is atleast one user with 6680 with this hash, so i guess there is more of this.
Finding such phone would be great for fun.
Just imagine what can do when sign own keys... Great, even just for R&D.

I will post a example in minute. Last year i've used openssl without bigger problems to sign PA and other stuff.

[karwos]

Openssl accepts this format as long as:

karwosgsm:~# openssl rsa -in factory_195f.pem -pubout
writing RSA key
-----BEGIN PUBLIC KEY-----
MIGdMA0GCSqGSIb3DQEBAQUAA4GLADCBhwKBgQCzfpk/p2DhAt2BXFoYGZqW2MRp
Y9ZrRHNit20o7PITqNgJWftyIOL6Ws2C75x0RvSeiyB7upMQ/F16f9wJ/glcx8Mg
QHKCVGN7tEP1IUypJIEAysfAGnSS0Qb9rHWBMUTwRS3Qmk9335 dXlS6AQdYemvqq
v/eQaH59pYku8nFdKQIBAw==
-----END PUBLIC KEY-----

Converting this to DER format gets

30819D300D06092A864886F70D010101050003818B00308187 02818100B37E993FA760E102DD815C5A18199A96D8C46963D6 6B447362B76D28ECF213A8D80959FB7220E2FA5ACD82EF9C74 46F49E8B207BBA9310FC5D7A7FDC09FE095CC7C32040728254 637BB443F5214CA9248100CAC7C01A7492D106FDAC75813144 F0452DD09A4F77DF9757952E8041D61E9AFAAABFF790687E7D A5892EF2715D29020103

Key from KEYS block, with exponent and RSA power

0300000000004000295D71F22E89A57D7E6890F7BFAAFA9A1ED641802E955797DF774F 9AD02D45F044318175ACFD06D192741AC0C7CA008124A94C21 F543B47B635482724020C3C75C09FE09DC7F7A5DFC1093BA7B 208B9EF446749CEF82CD5AFAE22072FB5909D8A813F2EC286D B76273446BD66369C4D8969A19185A5C81DD02E160A73F997E B3

and of course hash of last block = 195f...

[karwos]

And example signing:

echo 'test data' | /usr/bin/openssl rsautl -encrypt -inkey factory_195f.pem > signed.bin

This gets you valid signed.bin file
For test data of course you need pass BINARY data in PKCS format. But thats' minor things.

[Bph&co]

Originally Posted by karwos

Use google, there is atleast one user with 6680 with this hash, so i guess there is more of this.
Finding such phone would be great for fun.
Just imagine what can do when sign own keys... Great, even just for R&D.

I will post a example in minute. Last year i've used openssl without bigger problems to sign PA and other stuff.

Hehe,

Yes! Linux on 6680 - take that stupid Galaxy S3

On serious note - it is great to R&D, hobby projects,etc. For how long do you
have this ? How did you find and do you have a phone ?

BR

[Bph&co]

Just used Google on the hash, this seems to be a key for the HELEN asic ? So it's just
useful to play with Symbian, not for RAP3 research, correct ?

[karwos]

Originally Posted by Bph&co

Hehe,

Yes! Linux on 6680 - take that stupid Galaxy S3

On serious note - it is great to R&D, hobby projects,etc. For how long do you
have this ? How did you find and do you have a phone ?

BR

Such details shouldn't get public, don't you think ?