GSM-Forum - View Single Post - Im trying to decode locks from EEPROM for new Ericsson phones

palm · 11-27-1999, 12:52

In Ericsson phones - for example A1018 was very simple NCK,NSCK and CCK coding until last time versions.
Locks was storing in 00c7h-00deh EEPROM map (a1018s). Crypting was very simple - every hex byte with
small modyfication
giving us dec code for unlock. There are so many programm, that reading it from EEPROM ;-) .
If someone interested that - ask me. In new models looks like locks still storing in the same eeprom place,
but Ericsson start to use more seriose crypting method. Very strange looking 00c4h byte...May be it using to
crypt
locks ? Any way If you have EEPROM dumps for new Ericsson phones with known NCK,NSCK, CCK locks -
please send it to me, I will try to understand crypting method.
Another way - to disassemble flash . Looks like Ericsson phones using processor very close to good known
Z80.
If I will find solution - I write programm to read locks codes from EEPROM.
Please mail to me at [email protected].

11-27-1999, 12:52	#1 (permalink)
palm Junior Member Join Date: Nov 1999 Posts: 4 Member: 673 Status: Offline Thanks Meter: 0	Im trying to decode locks from EEPROM for new Ericsson phones In Ericsson phones - for example A1018 was very simple NCK,NSCK and CCK coding until last time versions. Locks was storing in 00c7h-00deh EEPROM map (a1018s). Crypting was very simple - every hex byte with small modyfication giving us dec code for unlock. There are so many programm, that reading it from EEPROM ;-) . If someone interested that - ask me. In new models looks like locks still storing in the same eeprom place, but Ericsson start to use more seriose crypting method. Very strange looking 00c4h byte...May be it using to crypt locks ? Any way If you have EEPROM dumps for new Ericsson phones with known NCK,NSCK, CCK locks - please send it to me, I will try to understand crypting method. Another way - to disassemble flash . Looks like Ericsson phones using processor very close to good known Z80. If I will find solution - I write programm to read locks codes from EEPROM. Please mail to me at [email protected].