FlashAuthorityID calculation Algorithm

[Invisible]

hi,

I can´t confirm this since I haven´t take a look at new DCT4 phones but Dejan promissed us that in 6 months he will give it for free.<br />I think that if faid will be so closer it won´t be for free.

best regards,<br />Invisible

[Invisible]

hi,<br />--------------------------------------<br />1000737D push 0<br />1000737F call FLS1GetAuthorityID &lt;--*<br />10007384 and eax, 7FFFFFFFh<br />10007389 jnz short loc_10007399<br />1000738B lea edx, [esp+20h+faid]<br />1000738F push edx<br />10007390 push esi<br />10007391 call flashidsetdct4<br />---------------------------------------<br />just another dissambling of a dongle call,<br />we can´t determine how closer are the algorithms<br />if they are stored in the dongle.<br />By the way, FLS-1 is clonable from DK dongle?, any info?,

best regards,<br />Invisible

[GsMen]

[quote]Originally posted by Bph&Co:<br /><strong>

<br />Strange on their pages there are no details about their Dongles. The same time everyone know that they don't have the manpower to develop such a soution - so obvious reason is they buy cracked PIC's for that. Just ask them <img src="smile.gif" border="0">

<br />Best Regards, Alex</strong><hr></blockquote>

So If I buy a JIC box I can use DEJAN too cause it has a cracked pic in it (or visa versa??)

GsMen

[Bph&co]

Hi,

Sorry but never seen it ! A lot of members sell this - probably will take them less than a minute to see what's inside and give you a clue <img src="smile.gif" border="0">

BR

[maxxnskk]

Ok guyz what do you say about link <br /><a href="http://www.net.yu/~dejan/download/src_104.zip" target="_blank">http://www.net.yu/~dejan/download/src_104.zip</a><br />on this page?<br /><a href="http://users.net.yu/~dejan/flasher/flasher.html" target="_blank">http://users.net.yu/~dejan/flasher/flasher.html</a>

[emix]

link does not work sori!!

[maxxnskk]

But look on the flasher page.<br />It modified.<br />I already have sources, but I download it from polishgsm.com and thought that it is fake.<br />Now I see that Dejan modifid his page.<br />May be time is come

[maxxnskk]

Maybe all Dejan's pic and hex is only as blind?

[Invisible]

hi,

dk2sendandrecive is the important part, calculation of the faid is done inside dongle, wintesla only full buffer and seed dongle, so as you see is more that a simple xor encription.<br />Also FLS dongle uses Des in comunication to avoid being simulate. Once calculation is done (dk2sendandrecive) the software updates it.<br />I see three ways to attack it:<br />1.- Scratch list, slow since Des in involved<br />2.- Dongle reverse, unafortunaly I don´t have one<br />3.- Flash dissamble, no coments

please correct me if I am wrong,

best regards,<br />Invisible

[Bph&co]

Hi guys,

As I see you are reffering to the old FLS-2D device.

But inside you can find AVR and DK3 ASIC. The<br />FAID calcultion performed by the AVR got nothing<br />to do with calls to DES ASIC. They just use common interface - control port of the LPT.

DES ASIC is used for read and write eeprom calls -to encrypt the data in the eeprom and EncriptionThru calls.

AVR does the calculation of FAID. That's why for <br />example if you don't have FLS device, but only PKD-1 you can't update eeprom.

Best Regards

[dito]

Is the new PDK based on a DK3?

Best regards!

[Bph&co]

Hi dito,

PKD1 uses DES2ACS for encryption, but FLS-2D use<br />DES3ACS which is the ASIC from DK3 dongle.

Best Regards

[dito]

But you don't need a PDK-1 when you got a FLS-2 right?

Best regards!

[smoother]

Bph&Co, i think ist's more easy if u give ALL<br />FAID recalculation alghoritm! <img src="wink.gif" border="0"> <br />Don't u think so?

Keep your Good WorkZ, Mate!

[Invisible]

hi,

Bph&Co is right, comunication is done with DES as far as I get it from Deskey manuals.<br />Calculation is done by mcu inside.<br />About PKD-1, Bph&Co, could you tell me if it´s based on a DK2 or a DK12?, I have one DK2 and would like to have PKD-1 updating x25020 eeprom. <br />Also if I updated eeprom successfull how does I know dongle password (I have package from Saras but not complete).<br />I don´t have FLS-1 so I can´t give more info,

best regards,<br />Invisible

<FONT COLOR="#ffff00" SIZE="1">[ 14 December 2001 18:57: Message edited by: Invisible ]</font>