How to find ASK -> RPL algorithm (part 1) - Page 3 - GSM-Forum

John_Doe · 12-31-2004, 20:43

Quote:

Originally Posted by toddz

So could this file be used to make a TDB-6 box from a TDF-4 box, they seem to be exactly the same box just with different code? Of course I assume that the TDB-6 box would need to be activated, and programmed to support the configuration keys for a specific provider. Also the closing lock password and the security box password would have to be known. Finally you would also have to have a PKD-1SA+.

Todd

tdb-6 hardware is a little bit different than the tdf-4, so it´s not possible just to put tdb-6 mcu inside tdf-4. maybe possible if you make some changes to tdf-4 box hardware and dump, but i´m not sure.
as for the activation and config keys, this dump is working and activated(need external eeprom dump too) and in order to get it working for all providers just need to change 6 bytes inside the dump.
moreover it´s also possible to find out the sec. password and the correct PKD-1 serial number(must also match the box) in order to get it working. if you have this then you can write it to any other pkd-1 and make a 1SA+ out of it.
but the main question is why the heck you want to do this? wouldn´t it be easier to extract the tables or use any other 200usd box/software in order to unlock/lock nokia phones??

regards,

toddz · 01-02-2005, 03:36

It was mainly out of curiosity and the fact that I have a couple TDC-4 boxes (same as TDF-4 but with flash based mcu) which can be easily reprogrammed through the serial port. I though maybe I could convert them but I guess it just isn't that easy. I have some 3rd party unlocker/flasher boxes already but this just sounded like a cool item.

Thanks for the information

Todd

John_Doe · 01-02-2005, 14:46

Quote:

Originally Posted by toddz

It was mainly out of curiosity and the fact that I have a couple TDC-4 boxes (same as TDF-4 but with flash based mcu) which can be easily reprogrammed through the serial port. I though maybe I could convert them but I guess it just isn't that easy. I have some 3rd party unlocker/flasher boxes already but this just sounded like a cool item.

Thanks for the information

Todd

wow, nice stuff, i didn´t even know that something like this(TDC) exists

could you might PM me your email adress? would like to exchange some info´s with you...

regards,

willy · 01-03-2005, 13:11

or todd are talking about for "TDD4" !

regards

toddz · 01-03-2005, 18:20

@willy,

The TDC-4 is actually different than the TDD-4. The TDC-4 has a flash memory mcu and is labled 'COMBOX'. The TDD-4 has a OTP memory mcu and is labled 'DEFAULT SECURITY BOX'. Other than those and a few other features, they are very similar.

Todd

senkron24 · 01-08-2005, 18:31

süüper

what is with part 2 wen coming ??

yousha · 01-09-2005, 14:22

Quote:

Originally Posted by senkron24

süüper

what is with part 2 wen coming ??

PART 2 ALREADY OUT

http://forum.gsmhosting.com/vbb/showthread.php?t=181358

**..::Neo::..** · 01-09-2005, 14:31

oh really when is part 3 , still no usefull information

zulea · 01-13-2005, 22:59

Quote:

Originally Posted by Evil Neo

oh really when is part 3 , still no usefull information

Part 3 is here:

http://forum.gsmhosting.com/vbb/show...752#post989752

Best regards,
Zulea

woodschang · 01-15-2005, 09:26

Good, learn a lot.
Thanks to all masters

BR
Woods

vladutstoian · 03-11-2005, 05:28

whare is part2 I'm waiting

))

NoEnd · 10-04-2005, 20:54

What about TDS-4 dump, anyone has it?

turkgsmteam · 10-04-2005, 22:11

part2 I'm waiting

danilo_nop · 10-14-2005, 19:29

where I can get free deassemler or crack for trace32(t32mh83,www.lauterbach.com) for h8/3002

tega · 10-14-2005, 20:31

Good job,please upload link, can download.

03-11-2005, 05:28	#41 (permalink)
vladutstoian Crazy Poster Join Date: Feb 2004 Age: 38 Posts: 58 Member: 53969 Status: Offline Thanks Meter: 2	whare is part2 I'm waiting))

10-14-2005, 19:29	#44 (permalink)
danilo_nop No Life Poster Join Date: Jun 2003 Location: root Posts: 622 Member: 31049 Status: Offline Thanks Meter: 4	where I can get free deassemler or crack for trace32(t32mh83,www.lauterbach.com) for h8/3002 Last edited by danilo_nop; 10-14-2005 at 19:41.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
thread	Thread Starter	Forum	Replies	Last Post
how to use ASK and RPL on HWK - with image and video tutorial	tarek on	HWK	15	09-10-2010 18:06
how to read ask for rpl?	sandrea	Cyclonebox	1	09-18-2009 10:29
Wanted: Calculator for .ask -> .rpl program	m_dige	Wanted Products	14	09-02-2009 15:38
How to make ASK/RPL calculation to repair dead phones, ASK/RPL server settings	InfinitySupport	Infinity-Box	4	03-20-2008 23:57

01-02-2005, 03:36	#32 (permalink)
toddz Crazy Poster Join Date: Mar 2002 Location: Texas, USA Posts: 56 Member: 10368 Status: Offline Thanks Meter: 0	It was mainly out of curiosity and the fact that I have a couple TDC-4 boxes (same as TDF-4 but with flash based mcu) which can be easily reprogrammed through the serial port. I though maybe I could convert them but I guess it just isn't that easy. I have some 3rd party unlocker/flasher boxes already but this just sounded like a cool item. Thanks for the information Todd

01-03-2005, 13:11	#34 (permalink)
willy No Life Poster Join Date: Mar 2000 Location: inside NOKIA phone Age: 57 Posts: 1,677 Member: 1060 Status: Offline Thanks Meter: 10	or todd are talking about for "TDD4" ! regards

01-03-2005, 18:20	#35 (permalink)
toddz Crazy Poster Join Date: Mar 2002 Location: Texas, USA Posts: 56 Member: 10368 Status: Offline Thanks Meter: 0	@willy, The TDC-4 is actually different than the TDD-4. The TDC-4 has a flash memory mcu and is labled 'COMBOX'. The TDD-4 has a OTP memory mcu and is labled 'DEFAULT SECURITY BOX'. Other than those and a few other features, they are very similar. Todd

01-08-2005, 18:31	#36 (permalink)
senkron24 No Life Poster Join Date: Sep 2002 Location: Türkiye Age: 46 Posts: 1,939 Member: 15880 Status: Offline Sonork: 100.1612155 Thanks Meter: 452	süüper what is with part 2 wen coming ??

01-09-2005, 14:31	#38 (permalink)
..::Neo::.. Administrator Join Date: Jul 2002 Location: E G Y P T Age: 37 Posts: 3,203 Member: 14178 Status: Offline Thanks Meter: 8,613	oh really when is part 3 , still no usefull information

01-15-2005, 09:26	#40 (permalink)
woodschang Freak Poster Join Date: Aug 2002 Posts: 183 Member: 14259 Status: Offline Thanks Meter: 2	Good, learn a lot. Thanks to all masters BR Woods

10-04-2005, 20:54	#42 (permalink)
NoEnd Major Poster Join Date: May 2004 Posts: 43 Member: 65486 Status: Offline Thanks Meter: 0	What about TDS-4 dump, anyone has it?

10-04-2005, 22:11	#43 (permalink)
turkgsmteam Freak Poster Join Date: May 2007 Posts: 455 Member: 501877 Status: Offline Thanks Meter: 495	part2 I'm waiting

10-14-2005, 20:31	#45 (permalink)
tega Freak Poster Join Date: Apr 2005 Age: 50 Posts: 266 Member: 141054 Status: Offline Thanks Meter: 1	Good job,please upload link, can download.