Vida CEM swapping

solitaire · Post by **solitaire** » 03 May 2021, 01:21

Part Number: 30795115
Searching P/N 30795115 in 49 known CEMs

Candidate PIN 94 53 06 -- -- -- : brute forcing bytes 3 to 5 (3 bytes), will take up to 640 seconds
Progress: 0%..5%..10%..15%..20%..25%..30%..35%..40%..45%..50%..55%..60%..65%..70%..75%..80%..85%..90%..95%..
PIN is NOT cracked in 1220.88 seconds
done
Resetting all ECUs.

first two ok, third - no

94 53 85 25 40 55

Post by **vtl** » 03 May 2021, 04:35

solitaire wrote: ↑03 May 2021, 01:21 Part Number: 30795115
Searching P/N 30795115 in 49 known CEMs

Candidate PIN 94 53 06 -- -- -- : brute forcing bytes 3 to 5 (3 bytes), will take up to 640 seconds
Progress: 0%..5%..10%..15%..20%..25%..30%..35%..40%..45%..50%..55%..60%..65%..70%..75%..80%..85%..90%..95%..
PIN is NOT cracked in 1220.88 seconds
done
Resetting all ECUs.

first two ok, third - no

94 53 85 25 40 55

Thanks. Do you have a dump for that CEM?

Post by **vtl** » 03 May 2021, 05:02

solitaire wrote: ↑03 May 2021, 01:21 first two ok, third - no

94 53 85 25 40 55

Also try with SAMPLES 50.

esbekir · Post by **esbekir** » 03 May 2021, 16:06

hi friend,

The code is working on p2.

vtl

sample 30

bench.

Post by **vtl** » 03 May 2021, 17:28

esbekir wrote: ↑03 May 2021, 16:06 hi friend,

The code is working on p2. vtl

sample 30

bench.

It barely made it, you are lucky

Not confident it can crack that pin reliably with 30 samples.

esbekir · Post by **esbekir** » 03 May 2021, 17:38

here is another p2.

successful.

CPU Maximum Frequency: 600000000
CPU Frequency: 600000000
Execution Rate: 600 cycles/us
PIN bytes to measure: 3
Number of samples: 30
CAN low-speed init done.
Reading part number from ECU 0x40 on CAN_LS
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
Can't find part number on CAN-LS, trying CAN-HS at 500 Kbps
CAN high-speed init done.
Reading part number from ECU 0x50 on CAN_HS
CAN_HS ---> ID=000ffffe data=cb 50 b9 f0 00 00 00 00
Part Number: 30765149
Searching P/N 30765149 in 49 known CEMs
CAN HS baud rate: 500000
PIN shuffle order: 3 1 5 0 2 4
Putting all ECUs into programming mode.
CAN_HS ---> ID=000ffffe data=ff 86 00 00 00 00 00 00
CAN_LS ---> ID=000ffffe data=ff 86 00 00 00 00 00 00
Initialization done.

Calculating bytes 0-2
1000 pins in 639 ms, 1564 pins/s, average response: 86 us, histogram 43 to 129 us
us: 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97
[ 00 -- -- -- -- -- ]: 0 0 0 0 0 0 195 0 1311 0 1325 1 165 0 0 0 0 0 0 0 : latency 131794; std 393.10
[ 01 -- -- -- -- -- ]: 0 0 0 0 0 0 180 0 1292 0 1300 0 228 0 0 0 0 0 0 0 : latency 132152; std 386.89
[ 02 -- -- -- -- -- ]: 0 0 0 0 0 1 140 0 1361 1 1314 0 183 0 0 0 0 0 0 0 : latency 132078; std 398.87
[ 03 -- -- -- -- -- ]: 0 0 0 0 0 0 140 0 1376 0 1305 0 179 0 0 0 0 0 0 0 : latency 132046; std 399.88
[ 04 -- -- -- -- -- ]: 0 0 0 0 0 0 137 0 1419 1 1259 0 181 0 0 0 0 0 0 0 : latency 131840; std 400.07
[ 05 -- -- -- -- -- ]: 0 0 0 0 0 0 156 2 1386 0 1286 0 170 0 0 0 0 0 0 0 : latency 131938; std 398.62
[ 06 -- -- -- -- -- ]: 0 0 0 0 0 0 158 0 1423 1 1236 0 182 0 0 0 0 0 0 0 : latency 131885; std 397.54
[ 07 -- -- -- -- -- ]: 0 0 0 0 0 1 135 0 1422 0 1276 0 163 0 0 0 0 0 0 0 : latency 131802; std 402.86
[ 08 -- -- -- -- -- ]: 0 0 0 0 0 0 140 0 1410 0 1277 1 172 0 0 0 0 0 0 0 : latency 131965; std 401.12
[ 09 -- -- -- -- -- ]: 0 0 0 0 0 0 134 0 1453 0 1251 0 162 0 0 0 0 0 0 0 : latency 131882; std 404.38
[ 10 -- -- -- -- -- ]: 0 0 0 0 0 0 133 0 1375 0 1279 0 213 0 0 0 0 0 0 0 : latency 132144; std 396.20
[ 11 -- -- -- -- -- ]: 0 0 0 0 0 0 118 1 1439 0 1283 0 156 0 0 0 0 0 0 0 : latency 131824; std 406.57
[ 12 -- -- -- -- -- ]: 0 0 0 0 0 0 141 0 1417 0 1263 0 179 0 0 0 0 0 0 0 : latency 131960; std 400.31
[ 13 -- -- -- -- -- ]: 0 0 0 0 0 0 132 0 1447 0 1257 0 164 0 0 0 0 0 0 0 : latency 131906; std 404.24
[ 14 -- -- -- -- -- ]: 0 0 0 0 0 0 145 0 1421 0 1256 0 178 0 0 0 0 0 0 0 : latency 131934; std 399.97
[ 15 -- -- -- -- -- ]: 0 0 0 0 0 0 130 1 1471 0 1244 0 151 0 0 0 0 0 0 0 : latency 131702; std 406.32
[ 16 -- -- -- -- -- ]: 0 0 0 0 0 0 116 0 1445 0 1273 0 166 0 0 0 0 0 0 0 : latency 131978; std 406.18
[ 17 -- -- -- -- -- ]: 0 0 0 0 0 0 127 0 1427 0 1296 0 150 0 0 0 0 0 0 0 : latency 131938; std 406.48
[ 18 -- -- -- -- -- ]: 0 0 0 0 0 0 128 0 1442 2 1262 0 163 0 0 0 0 0 0 0 : latency 131793; std 404.10
[ 19 -- -- -- -- -- ]: 0 0 0 0 0 0 129 1 1476 0 1238 0 156 0 0 0 0 0 0 0 : latency 131841; std 406.34
[ 20 -- -- -- -- -- ]: 0 0 0 0 0 0 159 0 1315 0 1293 0 233 0 0 0 0 0 0 0 : latency 132200; std 389.27
[ 21 -- -- -- -- -- ]: 0 0 0 0 0 0 94 0 1406 0 1229 0 271 0 0 0 0 0 0 0 : latency 132354; std 394.94
[ 22 -- -- -- -- -- ]: 0 0 0 0 0 0 133 0 1433 0 1260 0 171 0 0 0 0 0 0 0 : latency 131809; std 402.43
[ 23 -- -- -- -- -- ]: 0 0 0 0 0 0 106 1 1505 0 1238 0 150 0 0 0 0 0 0 0 : latency 131863; std 411.18
[ 24 -- -- -- -- -- ]: 0 0 0 0 0 0 121 0 1400 0 1295 0 184 0 0 0 0 0 0 0 : latency 132084; std 402.21
[ 25 -- -- -- -- -- ]: 0 0 0 0 0 0 107 0 1517 0 1215 0 161 0 0 0 0 0 0 0 : latency 131860; std 410.18
[ 26 -- -- -- -- -- ]: 0 0 0 0 0 0 120 0 1465 1 1245 0 166 0 0 0 0 0 0 0 : latency 131786; std 405.53
[ 27 -- -- -- -- -- ]: 0 0 0 0 0 0 111 0 1492 0 1254 0 143 0 0 0 0 0 0 0 : latency 131858; std 411.18
[ 28 -- -- -- -- -- ]: 0 0 0 0 0 0 132 1 1454 0 1249 0 164 0 0 0 0 0 0 0 : latency 131889; std 404.25
[ 29 -- -- -- -- -- ]: 0 0 0 0 0 0 99 0 1491 1 1269 1 136 0 0 0 0 0 0 0 : latency 131759; std 413.08
[ 30 -- -- -- -- -- ]: 0 0 0 0 0 0 154 0 1389 0 1252 0 205 0 0 0 0 0 0 0 : latency 132016; std 394.50
[ 31 -- -- -- -- -- ]: 0 0 0 0 0 0 129 0 1439 0 1280 0 152 0 0 0 0 0 0 0 : latency 131910; std 406.13
[ 32 -- -- -- -- -- ]: 0 0 0 0 0 0 112 0 1459 0 1276 0 153 0 0 0 0 0 0 0 : latency 131940; std 408.83
[ 33 -- -- -- -- -- ]: 0 0 0 0 0 0 104 0 1485 0 1259 1 148 0 0 0 0 0 0 0 : latency 131776; std 410.73
[ 34 -- -- -- -- -- ]: 0 0 0 0 0 0 129 0 1415 0 1279 0 177 0 0 0 0 0 0 0 : latency 132008; std 402.25
[ 35 -- -- -- -- -- ]: 0 0 0 0 0 0 129 0 1463 0 1240 0 168 0 0 0 0 0 0 0 : latency 131894; std 404.53
[ 36 -- -- -- -- -- ]: 0 0 0 0 0 1 134 0 1418 1 1287 0 159 0 0 0 0 0 0 0 : latency 131940; std 403.75
[ 37 -- -- -- -- -- ]: 0 0 0 0 0 0 115 0 1458 1 1270 0 153 0 0 0 0 0 0 0 : latency 131794; std 407.81
[ 38 -- -- -- -- -- ]: 0 0 0 0 0 0 133 0 1407 0 1279 0 181 0 0 0 0 0 0 0 : latency 132016; std 401.00
[ 39 -- -- -- -- -- ]: 0 0 0 0 0 0 122 0 1486 0 1231 0 161 0 0 0 0 0 0 0 : latency 131862; std 407.08
[ 40 -- -- -- -- -- ]: 0 0 0 0 0 0 143 1 1320 0 1340 0 193 0 0 0 0 0 0 0 : latency 132036; std 396.65
[ 41 -- -- -- -- -- ]: 0 0 0 0 0 0 137 0 1403 0 1282 0 178 0 0 0 0 0 0 0 : latency 132002; std 400.77
[ 42 -- -- -- -- -- ]: 0 0 0 0 0 0 149 0 1396 0 1283 0 172 0 0 0 0 0 0 0 : latency 131956; std 399.79
[ 43 -- -- -- -- -- ]: 0 0 0 0 0 0 147 2 1356 0 1326 0 169 0 0 0 0 0 0 0 : latency 132032; std 399.82
[ 44 -- -- -- -- -- ]: 0 0 0 0 0 0 159 0 1372 0 1296 0 170 0 0 0 0 0 0 0 : latency 131825; std 397.94
[ 45 -- -- -- -- -- ]: 0 0 0 0 0 0 127 0 1367 0 1324 0 182 0 0 0 0 0 0 0 : latency 132122; std 401.31
[ 46 -- -- -- -- -- ]: 0 0 0 0 0 0 141 0 1364 0 1311 0 184 0 0 0 0 0 0 0 : latency 132076; std 398.93
[ 47 -- -- -- -- -- ]: 0 0 0 0 0 0 136 0 1373 1 1288 0 202 0 0 0 0 0 0 0 : latency 132113; std 397.08
[ 48 -- -- -- -- -- ]: 0 0 0 0 0 0 123 0 1382 0 1311 0 181 0 0 0 0 0 0 0 : latency 131971; std 401.71
[ 49 -- -- -- -- -- ]: 0 0 0 0 0 1 138 0 1384 1 1295 0 181 0 0 0 0 0 0 0 : latency 132036; std 399.64
[ 50 -- -- -- -- -- ]: 0 0 0 0 0 0 127 0 1404 0 1282 0 187 0 0 0 0 0 0 0 : latency 132058; std 400.99
[ 51 -- -- -- -- -- ]: 0 0 0 0 0 1 137 1 1369 1 1323 0 165 0 0 0 0 0 0 0 : latency 131900; std 401.34
[ 52 -- -- -- -- -- ]: 0 0 0 0 0 0 138 0 1344 1 1324 0 193 0 0 0 0 0 0 0 : latency 132145; std 397.84
[ 53 -- -- -- -- -- ]: 0 0 0 0 0 0 140 0 1364 1 1339 0 156 0 0 0 0 0 0 0 : latency 132023; std 402.95
[ 54 -- -- -- -- -- ]: 0 0 0 0 0 0 134 0 1338 0 1368 0 160 0 0 0 0 0 0 0 : latency 132108; std 403.44
[ 55 -- -- -- -- -- ]: 0 0 0 0 0 0 135 0 1373 0 1314 0 175 0 0 0 0 0 0 0 : latency 131929; std 400.72
[ 56 -- -- -- -- -- ]: 0 0 0 0 0 0 146 0 1379 0 1299 0 176 0 0 0 0 0 0 0 : latency 132010; std 399.46
[ 57 -- -- -- -- -- ]: 0 0 0 0 0 0 141 0 1403 0 1275 0 181 0 0 0 0 0 0 0 : latency 131992; std 399.79
[ 58 -- -- -- -- -- ]: 0 0 0 0 0 0 130 1 1418 1 1257 0 193 0 0 0 0 0 0 0 : latency 132026; std 399.68
[ 59 -- -- -- -- -- ]: 0 0 0 0 0 0 139 0 1379 0 1299 0 180 0 0 0 0 0 0 0 : latency 131911; std 399.48
[ 60 -- -- -- -- -- ]: 0 0 0 0 0 0 135 0 1443 1 1231 0 190 0 0 0 0 0 0 0 : latency 131953; std 400.12
[ 61 -- -- -- -- -- ]: 0 0 0 0 0 1 132 1 1329 0 1343 0 194 0 0 0 0 0 0 0 : latency 132194; std 398.43
[ 62 -- -- -- -- -- ]: 0 0 0 0 0 0 113 0 1404 1 1314 0 165 0 0 0 0 0 0 0 : latency 131934; std 405.51
[ 63 -- -- -- -- -- ]: 0 0 0 0 0 1 119 0 1363 0 1340 0 177 0 0 0 0 0 0 0 : latency 132147; std 403.04
[ 64 -- -- -- -- -- ]: 0 0 0 0 0 0 128 0 1392 0 1305 0 175 0 0 0 0 0 0 0 : latency 132054; std 402.35
[ 65 -- -- -- -- -- ]: 0 0 0 0 0 0 141 0 1325 0 1370 0 164 0 0 0 0 0 0 0 : latency 132114; std 401.83
[ 66 -- -- -- -- -- ]: 0 0 0 0 0 0 140 0 1351 0 1346 0 160 0 0 0 0 0 0 0 : latency 131923; std 402.06
[ 67 -- -- -- -- -- ]: 0 0 0 0 0 0 147 0 1316 0 1358 0 179 0 0 0 0 0 0 0 : latency 132138; std 398.73
[ 68 -- -- -- -- -- ]: 0 0 0 0 0 0 154 0 1332 0 1327 0 187 0 0 0 0 0 0 0 : latency 132094; std 396.47
[ 69 -- -- -- -- -- ]: 0 0 0 0 0 0 132 0 1337 0 1356 0 175 0 0 0 0 0 0 0 : latency 132148; std 401.52
[ 70 -- -- -- -- -- ]: 0 0 0 0 0 0 176 0 1348 0 1307 0 166 0 0 0 0 0 0 0 : latency 131797; std 395.90
[ 71 -- -- -- -- -- ]: 0 0 0 0 0 0 133 1 1363 3 1330 0 170 0 0 0 0 0 0 0 : latency 132076; std 401.45
[ 72 -- -- -- -- -- ]: 0 0 0 0 0 0 157 0 1330 1 1332 0 180 0 0 0 0 0 0 0 : latency 132071; std 396.87
[ 73 -- -- -- -- -- ]: 0 0 0 0 0 0 134 0 1369 0 1309 0 185 0 0 0 0 0 0 0 : latency 131961; std 399.42
[ 74 -- -- -- -- -- ]: 0 0 0 0 0 0 134 0 1344 0 1351 0 171 0 0 0 0 0 0 0 : latency 132118; std 401.79
[ 75 -- -- -- -- -- ]: 0 0 0 0 0 0 139 1 1351 0 1329 0 180 0 0 0 0 0 0 0 : latency 132099; std 399.57
[ 76 -- -- -- -- -- ]: 0 0 0 0 0 0 138 0 1374 0 1304 0 184 0 0 0 0 0 0 0 : latency 132068; std 399.45
[ 77 -- -- -- -- -- ]: 0 0 0 0 0 0 118 0 1356 0 1350 0 173 0 0 0 0 0 0 0 : latency 132027; std 403.49
[ 78 -- -- -- -- -- ]: 0 0 0 0 0 0 130 0 1391 0 1328 0 151 0 0 0 0 0 0 0 : latency 132000; std 405.47
[ 79 -- -- -- -- -- ]: 0 0 0 0 0 0 152 0 1344 0 1309 0 195 0 0 0 0 0 0 0 : latency 132094; std 395.66
[ 80 -- -- -- -- -- ]: 0 0 0 0 0 1 144 0 1423 1 1244 0 187 0 0 0 0 0 0 0 : latency 131946; std 398.63
[ 81 -- -- -- -- -- ]: 0 0 0 0 0 0 125 0 1447 1 1226 0 198 0 0 0 0 0 0 0 : latency 131866; std 400.16
[ 82 -- -- -- -- -- ]: 0 0 0 0 0 1 156 0 1428 1 1247 0 167 0 0 0 0 0 0 0 : latency 131848; std 399.78
[ 83 -- -- -- -- -- ]: 0 0 0 0 0 0 130 0 1452 0 1256 0 162 0 0 0 0 0 0 0 : latency 131900; std 404.91
[ 84 -- -- -- -- -- ]: 0 0 0 0 0 0 145 2 1335 0 1329 0 189 0 0 0 0 0 0 0 : latency 132122; std 397.19
[ 85 -- -- -- -- -- ]: 0 0 0 0 0 0 137 0 1322 1 1334 0 203 0 0 0 0 0 0 0 : latency 132078; std 396.11
[ 86 -- -- -- -- -- ]: 0 0 0 0 0 0 152 0 1261 1 1399 0 187 0 0 0 0 0 0 0 : latency 132243; std 397.20
[ 87 -- -- -- -- -- ]: 0 0 0 0 0 0 138 1 1332 0 1355 0 174 0 0 0 0 0 0 0 : latency 132129; std 400.60
[ 88 -- -- -- -- -- ]: 0 0 0 0 0 0 139 0 1337 1 1345 0 175 0 0 0 0 0 0 0 : latency 131984; std 399.84
[ 89 -- -- -- -- -- ]: 0 0 0 0 0 0 135 0 1313 0 1360 0 192 0 0 0 0 0 0 0 : latency 132218; std 398.66
[ 90 -- -- -- -- -- ]: 0 0 0 0 0 0 149 0 1373 0 1316 0 162 0 0 0 0 0 0 0 : latency 131982; std 400.96
[ 91 -- -- -- -- -- ]: 0 0 0 0 0 0 134 1 1281 1 1391 0 192 0 0 0 0 0 0 0 : latency 132282; std 398.79
[ 92 -- -- -- -- -- ]: 0 0 0 0 0 0 129 0 1346 0 1339 0 183 0 0 0 0 0 0 0 : latency 132023; std 400.35
[ 93 -- -- -- -- -- ]: 0 0 0 0 0 1 153 0 1285 0 1386 0 175 0 0 0 0 0 0 0 : latency 132163; std 398.51
[ 94 -- -- -- -- -- ]: 0 0 0 0 0 0 154 0 1333 1 1337 0 175 0 0 0 0 0 0 0 : latency 132067; std 398.05
[ 95 -- -- -- -- -- ]: 0 0 0 0 0 0 131 0 1337 0 1349 0 183 0 0 0 0 0 0 0 : latency 132168; std 400.50
[ 96 -- -- -- -- -- ]: 0 0 0 0 0 0 136 2 1289 0 1379 0 191 0 0 0 0 0 0 0 : latency 132119; std 398.06
[ 97 -- -- -- -- -- ]: 0 0 0 0 0 0 134 1 1323 1 1365 0 176 0 0 0 0 0 0 0 : latency 132166; std 400.78
[ 98 -- -- -- -- -- ]: 0 0 0 0 0 0 130 0 1295 2 1375 0 198 0 0 0 0 0 0 0 : latency 132284; std 398.36
[ 99 -- -- -- -- -- ]: 0 0 0 0 0 0 123 0 1330 0 1339 0 204 0 0 0 0 0 0 0 : latency 132076; std 398.11
best candidates ordered by latency:
0: 21 lat = 132354
1: 98 lat = 132284
2: 91 lat = 132282
3: 86 lat = 132243
4: 89 lat = 132218
...
95: 18 lat = 131793
96: 26 lat = 131786
97: 33 lat = 131776
98: 29 lat = 131759
99: 15 lat = 131702

best candidates ordered by std:
0: 29 std = 413.08
1: 23 std = 411.18
2: 27 std = 411.18
3: 33 std = 410.73
4: 25 std = 410.18
...
95: 21 std = 394.94
96: 30 std = 394.50
97: 00 std = 393.10
98: 20 std = 389.27
99: 01 std = 386.89

lat_k 0.05%, std_k 0.46%
pin[0] choose candidate: 21 based on latency
us: 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97
[ 21 00 -- -- -- -- ]: 0 0 0 0 0 0 107 0 1298 0 1275 0 320 0 0 0 0 0 0 0 : latency 132616; std 385.63
[ 21 01 -- -- -- -- ]: 0 0 0 0 0 0 137 0 1297 0 1267 0 299 0 0 0 0 0 0 0 : latency 132456; std 383.78
[ 21 02 -- -- -- -- ]: 0 0 0 0 0 1 131 1 1257 0 1273 0 337 0 0 0 0 0 0 0 : latency 132628; std 379.56
[ 21 03 -- -- -- -- ]: 0 0 0 0 0 0 133 0 1279 0 1270 0 315 0 0 0 0 0 0 0 : latency 132405; std 381.87
[ 21 04 -- -- -- -- ]: 0 0 0 0 0 0 151 0 1258 0 1270 0 321 0 0 0 0 0 0 0 : latency 132522; std 378.90
[ 21 05 -- -- -- -- ]: 0 0 0 0 0 0 146 0 1256 0 1290 0 308 0 0 0 0 0 0 0 : latency 132520; std 381.30
[ 21 06 -- -- -- -- ]: 0 0 0 0 0 0 144 2 1280 0 1236 0 338 0 0 0 0 0 0 0 : latency 132534; std 377.56
[ 21 07 -- -- -- -- ]: 0 0 0 0 0 0 152 0 1280 1 1254 0 310 0 0 0 0 0 0 0 : latency 132316; std 379.54
[ 21 08 -- -- -- -- ]: 0 0 0 0 0 0 106 0 1305 0 1259 0 330 0 0 0 0 0 0 0 : latency 132626; std 384.59
[ 21 09 -- -- -- -- ]: 0 0 0 0 0 0 94 0 1305 0 1294 0 307 0 0 0 0 0 0 0 : latency 132628; std 389.27
[ 21 10 -- -- -- -- ]: 0 0 0 0 0 0 120 0 1318 0 1251 0 308 0 0 0 0 0 0 0 : latency 132365; std 384.86
[ 21 11 -- -- -- -- ]: 0 0 0 0 0 0 112 1 1336 0 1222 0 329 0 0 0 0 0 0 0 : latency 132535; std 383.99
[ 21 12 -- -- -- -- ]: 0 0 0 0 0 0 130 0 1304 2 1257 0 307 0 0 0 0 0 0 0 : latency 132484; std 383.51
[ 21 13 -- -- -- -- ]: 0 0 0 0 0 0 143 1 1357 0 1226 0 273 0 0 0 0 0 0 0 : latency 132257; std 386.62
[ 21 14 -- -- -- -- ]: 0 0 0 0 0 0 128 1 1284 1 1275 0 308 0 0 0 0 0 0 0 : latency 132397; std 383.17
[ 21 15 -- -- -- -- ]: 0 0 0 0 0 0 114 0 1331 0 1267 0 288 0 0 0 0 0 0 0 : latency 132458; std 388.77
[ 21 16 -- -- -- -- ]: 0 0 0 0 0 0 116 0 1298 0 1319 0 267 0 0 0 0 0 0 0 : latency 132474; std 391.11
[ 21 17 -- -- -- -- ]: 0 0 0 0 0 0 118 0 1257 1 1320 0 304 0 0 0 0 0 0 0 : latency 132621; std 385.93
[ 21 18 -- -- -- -- ]: 0 0 0 0 0 0 129 1 1307 0 1263 0 297 0 0 0 0 0 0 0 : latency 132326; std 384.65
[ 21 19 -- -- -- -- ]: 0 0 0 0 0 0 142 1 1317 0 1268 0 272 0 0 0 0 0 0 0 : latency 132339; std 386.42
[ 21 20 -- -- -- -- ]: 0 0 0 0 0 0 135 0 1274 0 1272 0 319 0 0 0 0 0 0 0 : latency 132550; std 381.51
[ 21 21 -- -- -- -- ]: 0 0 0 0 0 0 139 0 1310 0 1246 1 301 0 0 0 0 0 0 0 : latency 132292; std 382.72
[ 21 22 -- -- -- -- ]: 0 0 0 0 0 0 131 0 1282 1 1298 0 288 0 0 0 0 0 0 0 : latency 132487; std 385.90
[ 21 23 -- -- -- -- ]: 0 0 0 0 0 0 105 0 1334 0 1256 1 304 0 0 0 0 0 0 0 : latency 132521; std 387.98
[ 21 24 -- -- -- -- ]: 0 0 0 0 0 0 125 0 1317 0 1276 0 282 0 0 0 0 0 0 0 : latency 132430; std 387.80
[ 21 25 -- -- -- -- ]: 0 0 0 0 0 0 148 0 1313 0 1251 0 285 0 0 0 0 0 0 0 : latency 132217; std 383.60
[ 21 26 -- -- -- -- ]: 0 0 0 0 0 0 123 0 1315 0 1254 0 308 0 0 0 0 0 0 0 : latency 132494; std 384.82
[ 21 27 -- -- -- -- ]: 0 0 0 0 0 0 157 0 1315 0 1229 0 299 0 0 0 0 0 0 0 : latency 132340; std 381.03
[ 21 28 -- -- -- -- ]: 0 0 0 0 0 0 137 0 1265 0 1308 0 290 0 0 0 0 0 0 0 : latency 132502; std 384.96
[ 21 29 -- -- -- -- ]: 0 0 0 0 0 0 134 0 1382 0 1215 0 266 0 0 0 0 0 0 0 : latency 132097; std 388.96
[ 21 30 -- -- -- -- ]: 0 0 0 0 0 0 126 0 1280 0 1269 0 325 0 0 0 0 0 0 0 : latency 132586; std 382.12
[ 21 31 -- -- -- -- ]: 0 0 0 0 0 1 121 0 1279 2 1296 0 301 0 0 0 0 0 0 0 : latency 132553; std 385.40
[ 21 32 -- -- -- -- ]: 0 0 0 0 0 0 131 0 1280 0 1294 0 295 0 0 0 0 0 0 0 : latency 132506; std 385.16
[ 21 33 -- -- -- -- ]: 0 0 0 0 0 0 145 0 1302 0 1262 0 288 0 0 0 0 0 0 0 : latency 132257; std 383.58
[ 21 34 -- -- -- -- ]: 0 0 0 0 0 0 148 0 1289 1 1274 0 288 0 0 0 0 0 0 0 : latency 132405; std 383.37
[ 21 35 -- -- -- -- ]: 0 0 0 0 0 0 122 0 1354 0 1261 0 263 0 0 0 0 0 0 0 : latency 132330; std 390.99
[ 21 36 -- -- -- -- ]: 0 0 0 0 0 0 147 1 1307 0 1204 0 338 0 0 0 0 0 0 0 : latency 132336; std 377.14
[ 21 37 -- -- -- -- ]: 0 0 0 0 0 0 123 1 1305 0 1275 0 296 0 0 0 0 0 0 0 : latency 132487; std 386.10
[ 21 38 -- -- -- -- ]: 0 0 0 0 0 0 113 0 1278 2 1299 0 308 0 0 0 0 0 0 0 : latency 132606; std 385.90
[ 21 39 -- -- -- -- ]: 0 0 0 0 0 0 132 0 1268 0 1289 1 310 0 0 0 0 0 0 0 : latency 132557; std 382.94
[ 21 40 -- -- -- -- ]: 0 0 0 0 0 0 120 0 1199 0 1334 0 344 0 0 0 0 0 0 0 : latency 132675; std 380.84
[ 21 41 -- -- -- -- ]: 0 0 0 0 0 0 144 0 1217 0 1295 0 344 0 0 0 0 0 0 0 : latency 132678; std 377.31
[ 21 42 -- -- -- -- ]: 0 0 0 0 0 0 124 0 1303 0 1266 1 306 0 0 0 0 0 0 0 : latency 132511; std 384.68
[ 21 43 -- -- -- -- ]: 0 0 0 0 0 0 140 0 1296 1 1250 0 313 0 0 0 0 0 0 0 : latency 132473; std 381.42
[ 21 44 -- -- -- -- ]: 0 0 0 0 0 0 148 0 1330 0 1232 0 287 0 0 0 0 0 0 0 : latency 132187; std 383.53
[ 21 45 -- -- -- -- ]: 0 0 0 0 0 0 129 1 1289 0 1269 0 312 0 0 0 0 0 0 0 : latency 132527; std 383.14
[ 21 46 -- -- -- -- ]: 0 0 0 0 0 0 135 1 1329 0 1246 0 289 0 0 0 0 0 0 0 : latency 132377; std 385.39
[ 21 47 -- -- -- -- ]: 0 0 0 0 0 0 141 1 1313 2 1238 0 302 0 0 0 0 0 0 0 : latency 132274; std 382.01
[ 21 48 -- -- -- -- ]: 0 0 0 0 0 0 145 0 1324 0 1212 0 319 0 0 0 0 0 0 0 : latency 132410; std 380.44
[ 21 49 -- -- -- -- ]: 0 0 0 0 0 0 144 0 1279 1 1273 0 303 0 0 0 0 0 0 0 : latency 132471; std 382.03
[ 21 50 -- -- -- -- ]: 0 0 0 0 0 0 126 0 1294 0 1279 0 301 0 0 0 0 0 0 0 : latency 132510; std 385.15
[ 21 51 -- -- -- -- ]: 0 0 0 0 0 0 136 0 1332 0 1222 0 307 0 0 0 0 0 0 0 : latency 132271; std 382.83
[ 21 52 -- -- -- -- ]: 0 0 0 0 0 0 134 1 1301 1 1250 0 313 0 0 0 0 0 0 0 : latency 132484; std 382.17
[ 21 53 -- -- -- -- ]: 0 0 0 0 0 0 159 0 1288 0 1255 0 298 0 0 0 0 0 0 0 : latency 132384; std 380.66
[ 21 54 -- -- -- -- ]: 0 0 0 0 0 0 139 0 1345 0 1202 0 314 0 0 0 0 0 0 0 : latency 132382; std 382.21
[ 21 55 -- -- -- -- ]: 0 0 0 0 0 0 145 0 1267 0 1284 0 301 0 0 0 0 0 0 0 : latency 132353; std 381.87
[ 21 56 -- -- -- -- ]: 0 0 0 0 0 0 155 0 1289 0 1230 0 326 0 0 0 0 0 0 0 : latency 132454; std 377.80
[ 21 57 -- -- -- -- ]: 0 0 0 0 0 0 140 0 1281 1 1285 0 293 0 0 0 0 0 0 0 : latency 132463; std 383.90
[ 21 58 -- -- -- -- ]: 0 0 0 0 0 0 141 0 1291 0 1252 0 313 0 0 0 0 0 0 0 : latency 132345; std 380.98
[ 21 59 -- -- -- -- ]: 0 0 0 0 0 0 139 0 1322 0 1237 0 302 0 0 0 0 0 0 0 : latency 132404; std 383.30
[ 21 60 -- -- -- -- ]: 0 0 0 0 0 0 141 1 1313 0 1220 0 325 0 0 0 0 0 0 0 : latency 132457; std 379.99
[ 21 61 -- -- -- -- ]: 0 0 0 0 0 0 137 0 1296 0 1272 0 295 0 0 0 0 0 0 0 : latency 132450; std 384.28
[ 21 62 -- -- -- -- ]: 0 0 0 0 0 0 119 0 1263 0 1294 0 321 0 0 0 0 0 0 0 : latency 132505; std 383.26
[ 21 63 -- -- -- -- ]: 0 0 0 0 0 0 129 2 1334 0 1184 0 351 0 0 0 0 0 0 0 : latency 132512; std 378.90
[ 21 64 -- -- -- -- ]: 0 0 0 0 0 0 114 0 1274 0 1288 0 324 0 0 0 0 0 0 0 : latency 132644; std 384.06
[ 21 65 -- -- -- -- ]: 0 0 0 0 0 0 148 0 1279 1 1253 0 319 0 0 0 0 0 0 0 : latency 132487; std 379.44
[ 21 66 -- -- -- -- ]: 0 0 0 0 0 0 137 0 1294 1 1272 0 293 0 0 0 0 0 0 0 : latency 132314; std 383.92
[ 21 67 -- -- -- -- ]: 0 0 0 0 0 0 143 0 1276 0 1282 0 299 0 0 0 0 0 0 0 : latency 132474; std 382.85
[ 21 68 -- -- -- -- ]: 0 0 0 0 0 0 133 0 1292 1 1259 0 315 0 0 0 0 0 0 0 : latency 132513; std 382.18
[ 21 69 -- -- -- -- ]: 0 0 0 0 0 0 140 0 1282 1 1285 0 289 0 0 0 0 0 0 0 : latency 132318; std 383.98
[ 21 70 -- -- -- -- ]: 0 0 0 0 0 0 131 0 1279 1 1290 0 299 0 0 0 0 0 0 0 : latency 132515; std 384.48
[ 21 71 -- -- -- -- ]: 0 0 0 0 0 0 155 0 1279 0 1311 0 255 0 0 0 0 0 0 0 : latency 132332; std 386.89
[ 21 72 -- -- -- -- ]: 0 0 0 0 0 0 147 0 1266 0 1297 0 290 0 0 0 0 0 0 0 : latency 132460; std 383.45
[ 21 73 -- -- -- -- ]: 0 0 0 0 0 0 137 1 1285 0 1238 0 336 0 0 0 0 0 0 0 : latency 132416; std 378.58
[ 21 74 -- -- -- -- ]: 0 0 0 0 0 0 137 1 1248 0 1272 0 342 0 0 0 0 0 0 0 : latency 132637; std 378.23
[ 21 75 -- -- -- -- ]: 0 0 0 0 0 0 123 1 1311 0 1208 0 357 0 0 0 0 0 0 0 : latency 132597; std 378.85
[ 21 76 -- -- -- -- ]: 0 0 0 0 0 0 129 0 1298 0 1280 0 293 0 0 0 0 0 0 0 : latency 132474; std 385.73
[ 21 77 -- -- -- -- ]: 0 0 0 0 0 0 160 1 1310 1 1253 0 272 0 0 0 0 0 0 0 : latency 132145; std 383.18
[ 21 78 -- -- -- -- ]: 0 0 0 0 0 0 135 0 1309 0 1276 0 280 0 0 0 0 0 0 0 : latency 132402; std 386.54
[ 21 79 -- -- -- -- ]: 0 0 0 0 0 0 148 0 1327 0 1220 0 305 0 0 0 0 0 0 0 : latency 132364; std 381.72
[ 21 80 -- -- -- -- ]: 0 0 0 0 0 0 155 0 1263 0 1266 0 316 0 0 0 0 0 0 0 : latency 132486; std 378.93
[ 21 81 -- -- -- -- ]: 0 0 0 0 0 0 128 1 1243 0 1297 0 328 0 0 0 0 0 0 0 : latency 132520; std 380.93
[ 21 82 -- -- -- -- ]: 0 0 0 0 0 0 139 0 1230 0 1260 0 371 0 0 0 0 0 0 0 : latency 132726; std 374.66
[ 21 83 -- -- -- -- ]: 0 0 0 0 0 0 123 0 1262 1 1301 0 313 0 0 0 0 0 0 0 : latency 132609; std 383.95
[ 21 84 -- -- -- -- ]: 0 0 0 0 0 0 148 0 1329 0 1204 0 316 0 0 0 0 0 0 0 : latency 132247; std 380.03
[ 21 85 -- -- -- -- ]: 0 0 0 0 0 0 155 0 1302 1 1237 0 305 0 0 0 0 0 0 0 : latency 132385; std 380.29
[ 21 86 -- -- -- -- ]: 0 0 0 0 0 0 0 0 1294 1 1318 0 387 0 0 0 0 0 0 0 : latency 133185; std 394.42
[ 21 87 -- -- -- -- ]: 0 0 0 0 0 0 138 1 1291 1 1247 0 322 0 0 0 0 0 0 0 : latency 132506; std 380.42
[ 21 88 -- -- -- -- ]: 0 0 0 0 0 0 136 0 1293 1 1244 0 323 0 0 0 0 0 0 0 : latency 132380; std 380.34
[ 21 89 -- -- -- -- ]: 0 0 0 0 0 0 128 0 1339 0 1218 0 315 0 0 0 0 0 0 0 : latency 132440; std 383.54
[ 21 90 -- -- -- -- ]: 0 0 0 0 0 0 147 1 1339 2 1229 0 282 0 0 0 0 0 0 0 : latency 132293; std 384.35
[ 21 91 -- -- -- -- ]: 0 0 0 0 0 0 161 0 1280 0 1282 0 277 0 0 0 0 0 0 0 : latency 132350; std 383.05
[ 21 92 -- -- -- -- ]: 0 0 0 0 0 0 153 0 1286 0 1276 0 282 0 0 0 0 0 0 0 : latency 132245; std 383.13
[ 21 93 -- -- -- -- ]: 0 0 0 0 0 0 133 0 1260 0 1291 0 316 0 0 0 0 0 0 0 : latency 132580; std 382.22
[ 21 94 -- -- -- -- ]: 0 0 0 0 0 0 160 0 1297 0 1228 0 315 0 0 0 0 0 0 0 : latency 132396; std 378.49
[ 21 95 -- -- -- -- ]: 0 0 0 0 0 0 132 0 1309 1 1235 0 319 0 0 0 0 0 0 0 : latency 132311; std 381.39
[ 21 96 -- -- -- -- ]: 0 0 0 0 0 0 144 1 1315 2 1239 0 299 0 0 0 0 0 0 0 : latency 132387; std 382.39
[ 21 97 -- -- -- -- ]: 0 0 0 0 0 0 141 1 1288 0 1267 0 303 0 0 0 0 0 0 0 : latency 132463; std 382.49
[ 21 98 -- -- -- -- ]: 0 0 0 0 0 0 142 0 1271 1 1261 0 325 0 0 0 0 0 0 0 : latency 132539; std 379.56
[ 21 99 -- -- -- -- ]: 0 0 0 0 0 0 131 0 1278 0 1256 0 332 0 0 0 0 0 0 0 : latency 132449; std 380.07
best candidates ordered by latency:
0: 86 lat = 133185
1: 82 lat = 132726
2: 41 lat = 132678
3: 40 lat = 132675
4: 64 lat = 132644
...
95: 92 lat = 132245
96: 25 lat = 132217
97: 44 lat = 132187
98: 77 lat = 132145
99: 29 lat = 132097

best candidates ordered by std:
0: 86 std = 394.42
1: 16 std = 391.11
2: 35 std = 390.99
3: 09 std = 389.27
4: 29 std = 388.96
...
95: 56 std = 377.80
96: 06 std = 377.56
97: 41 std = 377.31
98: 36 std = 377.14
99: 82 std = 374.66

lat_k 0.35%, std_k 0.85%
pin[1] choose candidate: 86 based on latency
us: 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97
[ 21 86 00 -- -- -- ]: 0 0 0 0 0 0 0 0 1202 0 1360 0 438 0 0 0 0 0 0 0 : latency 133472; std 389.63
[ 21 86 01 -- -- -- ]: 0 0 0 0 0 0 0 0 1209 0 1359 0 432 0 0 0 0 0 0 0 : latency 133446; std 390.20
[ 21 86 02 -- -- -- ]: 0 0 0 0 0 0 0 2 1341 0 1236 0 421 0 0 0 0 0 0 0 : latency 133154; std 390.72
[ 21 86 03 -- -- -- ]: 0 0 0 0 0 0 0 1 1269 0 1305 0 422 0 0 0 0 0 0 0 : latency 133168; std 390.02
[ 21 86 04 -- -- -- ]: 0 0 0 0 0 0 0 1 1314 0 1263 0 422 0 0 0 0 0 0 0 : latency 133213; std 390.50
[ 21 86 05 -- -- -- ]: 0 0 0 0 0 0 0 0 1297 0 1251 0 452 0 0 0 0 0 0 0 : latency 133310; std 387.40
[ 21 86 06 -- -- -- ]: 0 0 0 0 0 0 0 0 1339 1 1223 0 434 0 0 0 0 0 0 0 : latency 133054; std 389.10
[ 21 86 07 -- -- -- ]: 0 0 0 0 0 0 0 1 1237 0 1324 0 438 0 0 0 0 0 0 0 : latency 133399; std 388.91
[ 21 86 08 -- -- -- ]: 0 0 0 0 0 0 0 0 1244 0 1317 0 439 0 0 0 0 0 0 0 : latency 133390; std 388.89
[ 21 86 09 -- -- -- ]: 0 0 0 0 0 0 0 1 1284 0 1281 0 434 0 0 0 0 0 0 0 : latency 133297; std 389.10
[ 21 86 10 -- -- -- ]: 0 0 0 0 0 0 0 0 1255 0 1307 0 435 0 0 0 0 0 0 0 : latency 133225; std 388.81
[ 21 86 11 -- -- -- ]: 0 0 0 0 0 0 0 0 1315 1 1240 1 443 0 0 0 0 0 0 0 : latency 133256; std 388.14
[ 21 86 12 -- -- -- ]: 0 0 0 0 0 0 0 1 1354 1 1228 0 416 0 0 0 0 0 0 0 : latency 133120; std 391.43
[ 21 86 13 -- -- -- ]: 0 0 0 0 0 0 0 1 1289 0 1301 0 409 0 0 0 0 0 0 0 : latency 133237; std 391.88
[ 21 86 14 -- -- -- ]: 0 0 0 0 0 0 0 0 1286 0 1285 0 426 0 0 0 0 0 0 0 : latency 133145; std 389.71
[ 21 86 15 -- -- -- ]: 0 0 0 0 0 0 0 0 1291 1 1264 0 444 0 0 0 0 0 0 0 : latency 133305; std 388.04
[ 21 86 16 -- -- -- ]: 0 0 0 0 0 0 0 0 1324 0 1259 0 417 0 0 0 0 0 0 0 : latency 133186; std 391.28
[ 21 86 17 -- -- -- ]: 0 0 0 0 0 0 0 0 1254 0 1291 0 455 0 0 0 0 0 0 0 : latency 133402; std 387.05
[ 21 86 18 -- -- -- ]: 0 0 0 0 0 0 0 0 1317 1 1258 0 421 0 0 0 0 0 0 0 : latency 133072; std 390.21
[ 21 86 19 -- -- -- ]: 0 0 0 0 0 0 0 1 1366 0 1218 0 415 0 0 0 0 0 0 0 : latency 133095; std 391.90
[ 21 86 20 -- -- -- ]: 0 0 0 0 0 0 0 1 1186 0 1395 0 418 0 0 0 0 0 0 0 : latency 133461; std 392.26
[ 21 86 21 -- -- -- ]: 0 0 0 0 0 0 0 0 1334 0 1212 0 450 0 0 0 0 0 0 0 : latency 133052; std 387.44
[ 21 86 22 -- -- -- ]: 0 0 0 0 0 0 0 0 1315 0 1267 0 418 0 0 0 0 0 0 0 : latency 133206; std 391.10
[ 21 86 23 -- -- -- ]: 0 0 0 0 0 0 0 0 1308 0 1237 0 455 0 0 0 0 0 0 0 : latency 133294; std 387.17
[ 21 86 24 -- -- -- ]: 0 0 0 0 0 0 0 0 1274 1 1280 0 445 0 0 0 0 0 0 0 : latency 133341; std 387.91
[ 21 86 25 -- -- -- ]: 0 0 0 0 0 0 0 1 1337 0 1216 1 442 0 0 0 0 0 0 0 : latency 133073; std 388.10
[ 21 86 26 -- -- -- ]: 0 0 0 0 0 0 0 0 1326 0 1244 0 430 0 0 0 0 0 0 0 : latency 133208; std 389.92
[ 21 86 27 -- -- -- ]: 0 0 0 0 0 0 0 0 1288 0 1280 0 432 0 0 0 0 0 0 0 : latency 133288; std 389.48
[ 21 86 28 -- -- -- ]: 0 0 0 0 0 0 0 0 1281 0 1282 0 437 0 0 0 0 0 0 0 : latency 133312; std 388.94
[ 21 86 29 -- -- -- ]: 0 0 0 0 0 0 0 0 1319 1 1243 0 434 0 0 0 0 0 0 0 : latency 133094; std 388.85
[ 21 86 30 -- -- -- ]: 0 0 0 0 0 0 0 1 1255 0 1318 0 426 0 0 0 0 0 0 0 : latency 133339; std 390.10
[ 21 86 31 -- -- -- ]: 0 0 0 0 0 0 0 0 1322 0 1243 0 435 0 0 0 0 0 0 0 : latency 133226; std 389.36
[ 21 86 32 -- -- -- ]: 0 0 0 0 0 0 0 0 1322 0 1233 0 442 0 0 0 0 0 0 0 : latency 133105; std 388.22
[ 21 86 33 -- -- -- ]: 0 0 0 0 0 0 0 1 1253 3 1298 0 445 0 0 0 0 0 0 0 : latency 133378; std 387.48
[ 21 86 34 -- -- -- ]: 0 0 0 0 0 0 0 1 1302 1 1279 0 417 0 0 0 0 0 0 0 : latency 133226; std 390.83
[ 21 86 35 -- -- -- ]: 0 0 0 0 0 0 0 0 1292 0 1266 0 442 0 0 0 0 0 0 0 : latency 133300; std 388.42
[ 21 86 36 -- -- -- ]: 0 0 0 0 0 0 0 0 1313 1 1258 0 425 0 0 0 0 0 0 0 : latency 133088; std 389.75
[ 21 86 37 -- -- -- ]: 0 0 0 0 0 0 0 0 1309 0 1262 0 429 0 0 0 0 0 0 0 : latency 133240; std 389.88
[ 21 86 38 -- -- -- ]: 0 0 0 0 0 0 0 0 1225 0 1320 1 454 0 0 0 0 0 0 0 : latency 133459; std 387.24
[ 21 86 39 -- -- -- ]: 0 0 0 0 0 0 0 0 1325 0 1247 0 428 0 0 0 0 0 0 0 : latency 133206; std 390.12
[ 21 86 40 -- -- -- ]: 0 0 0 0 0 0 0 1 1289 1 1275 0 431 0 0 0 0 0 0 0 : latency 133145; std 388.83
[ 21 86 41 -- -- -- ]: 0 0 0 0 0 0 0 0 1263 0 1312 0 425 0 0 0 0 0 0 0 : latency 133324; std 390.33
[ 21 86 42 -- -- -- ]: 0 0 0 0 0 0 0 0 1309 1 1354 0 336 0 0 0 0 0 0 0 : latency 133053; std 400.61
[ 21 86 43 -- -- -- ]: 0 0 0 0 0 0 0 1 1305 1 1340 0 353 0 0 0 0 0 0 0 : latency 133092; std 398.32
[ 21 86 44 -- -- -- ]: 0 0 0 0 0 0 0 0 1270 0 1379 0 348 0 0 0 0 0 0 0 : latency 133021; std 399.16
[ 21 86 45 -- -- -- ]: 0 0 0 0 0 0 0 0 1312 0 1342 0 346 0 0 0 0 0 0 0 : latency 133068; std 399.50
[ 21 86 46 -- -- -- ]: 0 0 0 0 0 0 0 0 1262 0 1411 0 327 0 0 0 0 0 0 0 : latency 133130; std 402.52
[ 21 86 47 -- -- -- ]: 0 0 0 0 0 0 0 0 1276 1 1355 0 365 0 0 0 0 0 0 0 : latency 133042; std 396.76
[ 21 86 48 -- -- -- ]: 0 0 0 0 0 0 0 0 1297 0 1345 0 358 0 0 0 0 0 0 0 : latency 133122; std 398.08
[ 21 86 49 -- -- -- ]: 0 0 0 0 0 0 0 0 1294 0 1367 0 339 0 0 0 0 0 0 0 : latency 133090; std 400.50
[ 21 86 50 -- -- -- ]: 0 0 0 0 0 0 0 0 1301 0 1294 0 405 0 0 0 0 0 0 0 : latency 133208; std 392.50
[ 21 86 51 -- -- -- ]: 0 0 0 0 0 0 0 0 1286 0 1368 0 343 0 0 0 0 0 0 0 : latency 132979; std 399.61
[ 21 86 52 -- -- -- ]: 0 0 0 0 0 0 0 0 1268 0 1384 0 348 0 0 0 0 0 0 0 : latency 133160; std 399.65
[ 21 86 53 -- -- -- ]: 0 0 0 0 0 0 0 0 1278 0 1368 0 354 0 0 0 0 0 0 0 : latency 133152; std 398.75
[ 21 86 54 -- -- -- ]: 0 0 0 0 0 0 0 0 1304 0 1346 0 350 0 0 0 0 0 0 0 : latency 133092; std 399.04
[ 21 86 55 -- -- -- ]: 0 0 0 0 0 0 0 0 1296 0 1333 0 367 0 0 0 0 0 0 0 : latency 132962; std 396.38
[ 21 86 56 -- -- -- ]: 0 0 0 0 0 0 0 0 1299 0 1350 0 351 0 0 0 0 0 0 0 : latency 133104; std 398.94
[ 21 86 57 -- -- -- ]: 0 0 0 0 0 0 0 1 1329 0 1326 0 344 0 0 0 0 0 0 0 : latency 133027; std 399.55
[ 21 86 58 -- -- -- ]: 0 0 0 0 0 0 0 0 1241 1 1395 0 363 0 0 0 0 0 0 0 : latency 133243; std 397.99
[ 21 86 59 -- -- -- ]: 0 0 0 0 0 0 0 1 1305 0 1341 0 349 0 0 0 0 0 0 0 : latency 132905; std 398.39
[ 21 86 60 -- -- -- ]: 0 0 0 0 0 0 0 0 1314 0 1226 0 460 0 0 0 0 0 0 0 : latency 133292; std 386.73
[ 21 86 61 -- -- -- ]: 0 0 0 0 0 0 0 0 1286 0 1366 0 348 0 0 0 0 0 0 0 : latency 133124; std 399.43
[ 21 86 62 -- -- -- ]: 0 0 0 0 0 0 0 0 1325 0 1340 0 332 0 0 0 0 0 0 0 : latency 132879; std 400.77
[ 21 86 63 -- -- -- ]: 0 0 0 0 0 0 0 0 1261 1 1369 0 369 0 0 0 0 0 0 0 : latency 133215; std 396.89
[ 21 86 64 -- -- -- ]: 0 0 0 0 0 0 0 1 1125 0 1381 0 493 0 0 0 0 0 0 0 : latency 133733; std 385.09
[ 21 86 65 -- -- -- ]: 0 0 0 0 0 0 0 1 1301 1 1378 0 319 0 0 0 0 0 0 0 : latency 133032; std 402.69
[ 21 86 66 -- -- -- ]: 0 0 0 0 0 0 0 0 1295 0 1350 0 352 0 0 0 0 0 0 0 : latency 132979; std 398.39
[ 21 86 67 -- -- -- ]: 0 0 0 0 0 0 0 0 1320 0 1329 0 351 0 0 0 0 0 0 0 : latency 133062; std 398.86
[ 21 86 68 -- -- -- ]: 0 0 0 0 0 0 0 0 1294 0 1323 0 383 0 0 0 0 0 0 0 : latency 133178; std 395.06
[ 21 86 69 -- -- -- ]: 0 0 0 0 0 0 0 1 1341 0 1312 0 346 0 0 0 0 0 0 0 : latency 133007; std 399.33
[ 21 86 70 -- -- -- ]: 0 0 0 0 0 0 0 1 1306 1 1308 0 381 0 0 0 0 0 0 0 : latency 133011; std 394.50
[ 21 86 71 -- -- -- ]: 0 0 0 0 0 0 0 0 1261 0 1404 0 335 0 0 0 0 0 0 0 : latency 133148; std 401.47
[ 21 86 72 -- -- -- ]: 0 0 0 0 0 0 0 0 1285 0 1375 1 339 0 0 0 0 0 0 0 : latency 133109; std 400.42
[ 21 86 73 -- -- -- ]: 0 0 0 0 0 0 0 0 1278 0 1365 0 353 0 0 0 0 0 0 0 : latency 132970; std 398.27
[ 21 86 74 -- -- -- ]: 0 0 0 0 0 0 0 0 1304 1 1337 0 358 0 0 0 0 0 0 0 : latency 133107; std 397.88
[ 21 86 75 -- -- -- ]: 0 0 0 0 0 0 0 0 1255 0 1404 0 341 0 0 0 0 0 0 0 : latency 133172; std 400.78
[ 21 86 76 -- -- -- ]: 0 0 0 0 0 0 0 0 1288 0 1384 0 328 0 0 0 0 0 0 0 : latency 133080; std 401.99
[ 21 86 77 -- -- -- ]: 0 0 0 0 0 0 0 0 1298 0 1339 0 360 0 0 0 0 0 0 0 : latency 132989; std 397.38
[ 21 86 78 -- -- -- ]: 0 0 0 0 0 0 0 0 1281 0 1355 0 364 0 0 0 0 0 0 0 : latency 133166; std 397.46
[ 21 86 79 -- -- -- ]: 0 0 0 0 0 0 0 1 1267 0 1388 0 344 0 0 0 0 0 0 0 : latency 133151; std 400.01
[ 21 86 80 -- -- -- ]: 0 0 0 0 0 0 0 0 1326 0 1251 0 423 0 0 0 0 0 0 0 : latency 133194; std 390.65
[ 21 86 81 -- -- -- ]: 0 0 0 0 0 0 0 0 1295 0 1266 0 436 0 0 0 0 0 0 0 : latency 133147; std 388.64
[ 21 86 82 -- -- -- ]: 0 0 0 0 0 0 0 0 1344 0 1215 0 441 0 0 0 0 0 0 0 : latency 133194; std 389.04
[ 21 86 83 -- -- -- ]: 0 0 0 0 0 0 0 1 1292 0 1267 0 440 0 0 0 0 0 0 0 : latency 133293; std 388.47
[ 21 86 84 -- -- -- ]: 0 0 0 0 0 0 0 0 1311 3 1330 0 356 0 0 0 0 0 0 0 : latency 133087; std 397.77
[ 21 86 85 -- -- -- ]: 0 0 0 0 0 0 0 1 1264 1 1383 0 348 0 0 0 0 0 0 0 : latency 133029; std 398.90
[ 21 86 86 -- -- -- ]: 0 0 0 0 0 0 0 0 1316 1 1333 0 350 0 0 0 0 0 0 0 : latency 133067; std 398.83
[ 21 86 87 -- -- -- ]: 0 0 0 0 0 0 0 0 1298 0 1334 0 368 0 0 0 0 0 0 0 : latency 133140; std 396.85
[ 21 86 88 -- -- -- ]: 0 0 0 0 0 0 0 0 1309 1 1311 0 375 0 0 0 0 0 0 0 : latency 132951; std 395.22
[ 21 86 89 -- -- -- ]: 0 0 0 0 0 0 0 0 1273 0 1411 0 316 0 0 0 0 0 0 0 : latency 133086; std 403.81
[ 21 86 90 -- -- -- ]: 0 0 0 0 0 0 0 3 1307 1 1309 0 380 0 0 0 0 0 0 0 : latency 133136; std 394.72
[ 21 86 91 -- -- -- ]: 0 0 0 0 0 0 0 0 1274 0 1372 0 354 0 0 0 0 0 0 0 : latency 133160; std 398.80
[ 21 86 92 -- -- -- ]: 0 0 0 0 0 0 0 0 1290 0 1363 0 344 0 0 0 0 0 0 0 : latency 132973; std 399.44
[ 21 86 93 -- -- -- ]: 0 0 0 0 0 0 0 0 1301 0 1365 0 334 0 0 0 0 0 0 0 : latency 133066; std 401.08
[ 21 86 94 -- -- -- ]: 0 0 0 0 0 0 0 0 1281 0 1379 0 340 0 0 0 0 0 0 0 : latency 133118; std 400.51
[ 21 86 95 -- -- -- ]: 0 0 0 0 0 0 0 0 1306 0 1351 0 343 0 0 0 0 0 0 0 : latency 133074; std 399.91
[ 21 86 96 -- -- -- ]: 0 0 0 0 0 0 0 0 1271 0 1388 0 338 0 0 0 0 0 0 0 : latency 132999; std 400.45
[ 21 86 97 -- -- -- ]: 0 0 0 0 0 0 0 0 1340 1 1313 0 346 0 0 0 0 0 0 0 : latency 133011; std 399.33
[ 21 86 98 -- -- -- ]: 0 0 0 0 0 0 0 1 1260 0 1394 0 345 0 0 0 0 0 0 0 : latency 133167; std 399.99
[ 21 86 99 -- -- -- ]: 0 0 0 0 0 0 0 0 1294 0 1369 1 336 0 0 0 0 0 0 0 : latency 133085; std 400.72
best candidates ordered by latency:
0: 64 lat = 133733
1: 00 lat = 133472
2: 20 lat = 133461
3: 38 lat = 133459
4: 01 lat = 133446
...
95: 73 lat = 132970
96: 55 lat = 132962
97: 88 lat = 132951
98: 59 lat = 132905
99: 62 lat = 132879

best candidates ordered by std:
0: 89 std = 403.81
1: 65 std = 402.69
2: 46 std = 402.52
3: 76 std = 401.99
4: 71 std = 401.47
...
95: 38 std = 387.24
96: 23 std = 387.17
97: 17 std = 387.05
98: 60 std = 386.73
99: 64 std = 385.09

lat_k 0.20%, std_k 0.28%
pin[2] choose candidate: 64 based on latency
Candidate PIN 21 86 64 -- -- -- : brute forcing bytes 3 to 5 (3 bytes), will take up to 639 seconds
Progress: 0%..5%..10%..15%..20%..done

found PIN: 47 86 89 21 20 64
PIN is cracked in 714.09 seconds
Validating PIN
PIN verified.
done
Resetting all ECUs.
CAN_HS ---> ID=000ffffe data=ff c8 00 00 00 00 00 00
CAN_LS ---> ID=000ffffe data=ff c8 00 00 00 00 00 00

Post by **RickHaleParker** » 03 May 2021, 18:37

Got one done today, the 2005 XC90 T6.

The other one ( Frankenstein ... the V8 conversion ) has some weird stuff going on. Currently Frankenstein is uncrackable. It might be the low battery. I try again after I get the battery back to full charge. You all know how Frankenstein is without his electrons.
Main will does retrieve the CEM part number. Rework returns a value of 0 for the part number.

2005 XC90 T6.

Code: Select all

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
Summary: Both VTL's Main and Rework will crack this CEM-H.
with the latency candidates. None of the standard deviation
candidates where correct.
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\



/////////////////////////////////////////////////////////
2005 XC90 T6. CEM-H 30765643, VTL's Main respostory. 
/////////////////////////////////////////////////////////

CPU Maximum Frequency:   600000000
CPU Frequency:           180000000
Execution Rate:          180 cycles/us
Minimum CEM Reply Time:  30us
Platform:                P2
PIN bytes to measure:    3
Number of samples:       30
Number of loops:         1000

CAN high-speed init done.
CAN low-speed init done.
Initialization done.

Putting all ECUs into programming mode.
---> ID=000ffffe data=ff 86 00 00 00 00 00 00
---> ID=000ffffe data=ff 86 00 00 00 00 00 00
Reading part number from ECU 0x50
---> ID=000ffffe data=50 88 00 00 00 00 00 00
<--- ID=00000003 data=50 8e 00 00 30 76 56 43
Part Number: 000030765643
Calculating bytes 0-2
1000 pins in 657 ms, 1522 pins/s, average response: 86candidate: 93 with latency 
[ 00 -- -- -- -- -- ]: 000 000 000 019 162 148 1209 157 1161 012 132 000 000 000 000 : 260514
.
.
.

[ 99 -- -- -- -- -- ]: 000 000 000 022 152 160 1188 131 1174 023 150 000 000 000 000 : 260618
0: 93 = 261450
1: 61 = 260799
2: 84 = 260741
3: 89 = 260740
4: 95 = 260726
5: 86 = 260721
6: 69 = 260711
7: 87 = 260708
8: 98 = 260689
9: 65 = 260686
10: 85 = 260679
11: 97 = 260677
12: 78 = 260677
13: 72 = 260661
14: 88 = 260644
15: 71 = 260637
16: 53 = 260634
17: 55 = 260623
18: 60 = 260623
19: 99 = 260618
20: 66 = 260615
21: 94 = 260613
22: 92 = 260611
23: 49 = 260610
24: 91 = 260603
pin[0] candidate: 93 with latency 261450
[ 93 00 -- -- -- -- ]: 000 000 000 008 074 142 1156 146 1111 049 314 000 000 000 000 : 261457
.
.
.

[ 93 99 -- -- -- -- ]: 000 000 000 014 095 149 1106 145 1108 039 344 000 000 000 000 : 261473
0: 43 = 261868
1: 87 = 261714
2: 96 = 261711
3: 59 = 261697
4: 85 = 261681
5: 65 = 261679
6: 92 = 261673
7: 89 = 261667
8: 93 = 261661
9: 69 = 261658
10: 63 = 261656
11: 95 = 261643
12: 57 = 261641
13: 91 = 261639
14: 86 = 261634
15: 52 = 261625
16: 71 = 261612
17: 53 = 261608
18: 97 = 261593
19: 72 = 261592
20: 46 = 261578
21: 31 = 261563
22: 45 = 261562
23: 73 = 261550
24: 37 = 261546
pin[1] candidate: 43 with latency 261868
Warning: Selected candidate is very close to the next candidate!
         Selection may be incorrect.
[ 93 43 00 -- -- -- ]: 000 000 000 000 000 148 1125 158 1181 036 352 000 000 000 000 : 261888
.
.
.
[ 93 43 99 -- -- -- ]: 000 000 000 000 000 138 983 158 1261 048 412 000 000 000 000 : 262334
0: 93 = 262559
1: 44 = 262449
2: 91 = 262443
3: 64 = 262428
4: 43 = 262427
5: 59 = 262420
6: 51 = 262406
7: 95 = 262396
8: 61 = 262396
9: 84 = 262385
10: 52 = 262385
11: 49 = 262383
12: 89 = 262380
13: 42 = 262380
14: 69 = 262372
15: 85 = 262370
16: 65 = 262367
17: 54 = 262363
18: 73 = 262361
19: 56 = 262360
20: 86 = 262349
21: 72 = 262346
22: 55 = 262345
23: 99 = 262334
24: 62 = 262332
pin[2] candidate: 93 with latency 262559
Warning: Selected candidate is very close to the next candidate!
         Selection may be incorrect.
Candidate PIN 0x93 0x43 0x93 -- -- -- : brute forcing bytes 3 to 5 (3 bytes), will take up to 657 seconds
Progress: 0%..5%..10%..15%..20%..25%..30%..35%..40%..45%..50%..done

found PIN: 0x25 0x43 0x27 0x93 0x52 0x93
PIN is cracked in 921.60 seconds
Validating PIN
PIN verified.
done
Resetting all ECUs.
---> ID=000ffffe data=ff c8 00 00 00 00 00 00
---> ID=000ffffe data=ff c8 00 00 00 00 00 00


/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
---------------------------------------------------------
\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\



/////////////////////////////////////////////////////////
2005 XC90 T6. CEM-H 30765643, VTL's Rework repository. 
/////////////////////////////////////////////////////////
CPU Maximum Frequency:   600000000
CPU Frequency:           600000000
Execution Rate:          600 cycles/us
PIN bytes to measure:    3
Number of samples:       30
CAN low-speed init done.
Reading part number from ECU 0x40 on CAN_LS
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
Can't find part number on CAN-LS, trying CAN-HS at 500 Kbps
CAN high-speed init done.
Reading part number from ECU 0x50 on CAN_HS
CAN_HS ---> ID=000ffffe data=cb 50 b9 f0 00 00 00 00
Part Number: 30765643
Searching P/N 30765643 in 49 known CEMs
CAN HS baud rate: 500000
PIN shuffle order: 3 1 5 0 2 4
Putting all ECUs on CAN_HS into programming mode.
CAN_HS ---> ID=000ffffe data=ff 86 00 00 00 00 00 00
Initialization done.

Calculating bytes 0-2
1000 pins in 639 ms, 1564 pins/s, average response: 82 us, histogram 41 to 123 us 
                   us:    74    75    76    77    78    79    80    81    82    83    84    85    86    87    88    89    90    91    92    93 
[ 00 -- -- -- -- -- ]:     0     0     0     0     0     0     0     0     0    62    92   135  1195   225   975    47   101     0     0     0 : latency     129655; std 321.81
.
.
.

[ 99 -- -- -- -- -- ]:     0     0     0     0     0     0     0     0     0    79    80   190  1137   367  1004    56    87     0     0     0 : latency     137304; std 319.76

best candidates ordered by latency:
0: 93 lat = 138336
1: 41 lat = 137497
2: 56 lat = 137483
3: 77 lat = 137478
4: 89 lat = 137459

best candidates ordered by std:
0: 77 std = 334.80
1: 39 std = 334.48
2: 11 std = 334.37
3: 09 std = 333.49
4: 27 std = 333.34

lat_k 0.61%, std_k 0.10%
pin[0] choose candidate: 93 based on latency
                   us:    74    75    76    77    78    79    80    81    82    83    84    85    86    87    88    89    90    91    92    93 
[ 93 00 -- -- -- -- ]:     0     0     0     0     0     0     0     0     0    41    64   155  1008   343   969   154   266     0     0     0 : latency     138401; std 295.55
.
.
.
[ 93 99 -- -- -- -- ]:     0     0     0     0     0     0     0     0     0    42    59   182  1096   331   940   133   217     0     0     0 : latency     138052; std 303.93

best candidates ordered by latency:
0: 43 lat = 138820
1: 00 lat = 138401
2: 80 lat = 138359
3: 70 lat = 138284
4: 40 lat = 138273

best candidates ordered by std:
0: 71 std = 314.72
1: 67 std = 313.24
2: 47 std = 310.94
3: 20 std = 310.87
4: 69 std = 310.59

lat_k 0.30%, std_k 0.47%
pin[1] choose candidate: 43 based on latency
                   us:    74    75    76    77    78    79    80    81    82    83    84    85    86    87    88    89    90    91    92    93 
[ 93 43 00 -- -- -- ]:     0     0     0     0     0     0     0     0     0     0     0   165  1121   284   987   181   262     0     0     0 : latency     .
.
.

[ 93 43 99 -- -- -- ]:     0     0     0     0     0     0     0     0     0     0     0   180  1075   363  1075   109   198     0     0     0 : latency     138452; std 322.22

best candidates ordered by latency:
0: 93 lat = 138923
1: 07 lat = 138795
2: 00 lat = 138684
3: 80 lat = 138636
4: 02 lat = 138601

best candidates ordered by std:
0: 54 std = 331.31
1: 88 std = 329.26
2: 76 std = 327.50
3: 94 std = 327.14
4: 63 std = 326.43

lat_k 0.09%, std_k 0.63%
pin[2] choose candidate: 93 based on latency
Candidate PIN 93 43 93 -- -- -- : brute forcing bytes 3 to 5 (3 bytes), will take up to 639 seconds
Progress: 0%..5%..10%..15%..20%..25%..30%..35%..40%..45%..50%..done

found PIN: 25 43 27 93 52 93
PIN is cracked in 913.62 seconds
Validating PIN
PIN verified.
done
Resetting all ECUs.
CAN_HS ---> ID=000ffffe data=ff c8 00 00 00 00 00 00
CAN_LS ---> ID=000ffffe data=ff c8 00 00 00 00 00 00

Post by **vtl** » 03 May 2021, 20:15

RickHaleParker wrote: ↑03 May 2021, 18:37 Got one done today, the 2005 XC90 T6.

The other one ( Frankenstein ... the V8 conversion ) has some weird stuff going on. Currently Frankenstein is uncrackable. It might be the low battery. I try again after I get the battery back to full charge. You all know how Frankenstein is without his electrons.
Main will does retrieve the CEM part number. Rework returns a value of 0 for the part number.

I pushed some commits today.

RickHaleParker wrote: ↑03 May 2021, 18:37 2005 XC90 T6.
Summary: Both VTL's Main and Rework will crack this CEM-H.
with the latency candidates. None of the standard deviation
candidates where correct.

They don't meant to be correct, they ares just the bytes sorted by std.

Here's the case when the code decides std is glaring more than the latency (which normally has the priority):

best candidates ordered by latency:
0: 28 lat = 135466
1: 08 lat = 135450
2: 10 lat = 135436
3: 58 lat = 135394
4: 98 lat = 135346

best candidates ordered by std:
0: 45 std = 379.09
1: 00 std = 374.51
2: 04 std = 370.43
3: 47 std = 370.37
4: 78 std = 370.25

lat_k 0.01%, std_k 1.22%
pin[1] choose candidate: 45 based on std

Post by **RickHaleParker** » 04 May 2021, 06:43

Can anybody spot what is wrong with these settings? No response on a 2005 XC90 T6.
This is CEM-40 (CAN-LS).

: 2021-05-03 (1).png (58.68 KiB) Viewed 1118 times

Post by **RickHaleParker** » 04 May 2021, 06:52

vtl wrote: ↑03 May 2021, 20:15 They don't meant to be correct, they ares just the bytes sorted by std.

I was making a statement of facts for that case. Anything else would be a waste of time ... you don't have a complaint department.

Vida CEM swapping

Re: Vida CEM swapping