Im trying to decode locks from EEPROM for new Ericsson phones

[palm]

In Ericsson phones - for example A1018 was very simple NCK,NSCK and CCK coding until last time versions.
Locks was storing in 00c7h-00deh EEPROM map (a1018s). Crypting was very simple - every hex byte with
small modyfication
giving us dec code for unlock. There are so many programm, that reading it from EEPROM ;-) .
If someone interested that - ask me. In new models looks like locks still storing in the same eeprom place,
but Ericsson start to use more seriose crypting method. Very strange looking 00c4h byte...May be it using to
crypt
locks ? Any way If you have EEPROM dumps for new Ericsson phones with known NCK,NSCK, CCK locks -
please send it to me, I will try to understand crypting method.
Another way - to disassemble flash . Looks like Ericsson phones using processor very close to good known
Z80.
If I will find solution - I write programm to read locks codes from EEPROM.
Please mail to me at [email protected].