Vida CEM swapping

Post by **RickHaleParker** » 10 Jun 2021, 02:03

PowerMatz wrote: ↑09 Jun 2021, 10:43 Hi, here is a new part number:

You are misinterpreting the output. The software found 30786579 in the database. 30786579 is a known CEM.
If a CEM part number is not found in the database the software will output " "Unknown CEM part number XXXXXXXX. Don't know what to do".

Post by **RickHaleParker** » 10 Jun 2021, 02:16

PowerMatz wrote: ↑09 Jun 2021, 14:21 OK, will try tomorrow and send full log. Thanks!

If it still fails try changing the following in the code. You will find it near the top of the code.

#define SAMPLES 30 /* number of samples per sequence, more is better (up to 100) */
#define SAMPLES 100 /* number of samples per sequence, more is better (up to 100) */

SAMPLES 100 will take longer but it might get the PIN.

More SAMPLES is slower but more reliable. Fewer SAMPLES is faster but less reliable.

ricked · Post by **ricked** » 10 Jun 2021, 04:11

im not sure this was asked before but are P3 CEMS supported in the future, i did try 2 of them but i get unknown CEM and script stops

Slav000 · Post by **Slav000** » 10 Jun 2021, 04:33

I think the task was not to crack CEM on the P3 platform. The D5T5 VDASH program makes the crack CEM of the P3 platform in a reasonable time.

Post by **RickHaleParker** » 10 Jun 2021, 04:44

ricked wrote: ↑10 Jun 2021, 04:11 im not sure this was asked before but are P3 CEMS supported in the future, i did try 2 of them but i get unknown CEM and script stops

P1, P2 CEM-L and P2 CEM-H are supported. P2 CEM-B and P3 are not supported.

The side attack used on the P1, P2 CEM-L and P2 CEM-H does not work on the P2 CEM-B.

P3 is a dynamic "PIN". If somebody can get the algorithm for solving the P3 "PIN" challenge and a algorithm for ferreting out the private key ... P3 could be added. Completely different security than the supported CEMS.

Post by **RickHaleParker** » 10 Jun 2021, 10:20

RickHaleParker wrote: ↑10 Jun 2021, 02:03 If a CEM part number is not found in the database the software will output " "Unknown CEM part number XXXXXXXX. Don't know what to do".

Perhaps that should be extended to: "Unknown CEM part number XXXXXXXX. Don't know what to do. Report part number and CEM type to the developers or call Junior Samples at BR-549. "

ricked · Post by **ricked** » 10 Jun 2021, 12:48

ok thanks @RickHaleParker, for infos, in my case all pin extractions are 35 minutes, as for cem-l/h and the p1 cem
running i7 with 64gb of ram win 10 64x

Post by **RickHaleParker** » 10 Jun 2021, 21:27

VTL it looks like there are only four P3-CEM part numbers. Which could be add to the database.
Then if a unsupported P2-CEM-B or P3-CEM is detected. Could output "XXX not supported"
Leave code for unknown CEMs there might be some out there I have not found.

P3 CEM part numbers:
30765624
30686819
31327994
31412971

PowerMatz · Post by **PowerMatz** » 11 Jun 2021, 06:18

RickHaleParker wrote: ↑10 Jun 2021, 02:16
If it still fails try changing the following in the code. You will find it near the top of the code.

#define SAMPLES 30 /* number of samples per sequence, more is better (up to 100) */
#define SAMPLES 100 /* number of samples per sequence, more is better (up to 100) */

SAMPLES 100 will take longer but it might get the PIN.

More SAMPLES is slower but more reliable. Fewer SAMPLES is faster but less reliable.

In my code it is already set to 100.

Here are the two log files I grabbed today

Archiv.zip: Two logfiles of failed crack; (19.63 KiB) Downloaded 135 times

First attempt was directly after stopping the engine and put the key in position 0
Second attempt was after quite a while. Key was in position 0 all the time. The engine was not started.

Matthias

ricked · Post by **ricked** » 12 Jun 2021, 04:35

RickHaleParker wrote: ↑10 Jun 2021, 21:27 VTL it looks like there are only four P3-CEM part numbers. Which could be add to the database.
Then if a unsupported P2-CEM-B or P3-CEM is detected. Could output "XXX not supported"
Leave code for unknown CEMs there might be some out there I have not found.

P3 CEM part numbers:
30765624
30686819
31327994
31412971

30686819 does not exist

Vida CEM swapping

Re: Vida CEM swapping