Login Register

Vida CEM swapping

Post Reply
User avatar
RickHaleParker  
Posts: 7201
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 978 times

Post by RickHaleParker »

PowerMatz wrote: 09 Jun 2021, 10:43 Hi, here is a new part number:
You are misinterpreting the output. The software found 30786579 in the database. 30786579 is a known CEM.
If a CEM part number is not found in the database the software will output " "Unknown CEM part number XXXXXXXX. Don't know what to do".
Active
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
Top
User avatar
RickHaleParker  
Posts: 7201
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 978 times

Post by RickHaleParker »

PowerMatz wrote: 09 Jun 2021, 14:21 OK, will try tomorrow and send full log. Thanks!
If it still fails try changing the following in the code. You will find it near the top of the code.

#define SAMPLES 30 /* number of samples per sequence, more is better (up to 100) */
#define SAMPLES 100 /* number of samples per sequence, more is better (up to 100) */

SAMPLES 100 will take longer but it might get the PIN.

More SAMPLES is slower but more reliable. Fewer SAMPLES is faster but less reliable.
Active
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
Top
ricked
Posts: 38
Joined: 24 May 2021, 06:03
Year and Model: xc90
Location: lowlands
Has thanked: 6 times
Been thanked: 2 times

Post by ricked »

im not sure this was asked before but are P3 CEMS supported in the future, i did try 2 of them but i get unknown CEM and script stops
Top
Slav000
Posts: 1
Joined: 02 May 2021, 23:58
Year and Model: 2006 XC90
Location: Moscow region

Post by Slav000 »

I think the task was not to crack CEM on the P3 platform. The D5T5 VDASH program makes the crack CEM of the P3 platform in a reasonable time.
Top
User avatar
RickHaleParker  
Posts: 7201
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 978 times

Post by RickHaleParker »

ricked wrote: 10 Jun 2021, 04:11 im not sure this was asked before but are P3 CEMS supported in the future, i did try 2 of them but i get unknown CEM and script stops
P1, P2 CEM-L and P2 CEM-H are supported. P2 CEM-B and P3 are not supported.

The side attack used on the P1, P2 CEM-L and P2 CEM-H does not work on the P2 CEM-B.

P3 is a dynamic "PIN". If somebody can get the algorithm for solving the P3 "PIN" challenge and a algorithm for ferreting out the private key ... P3 could be added. Completely different security than the supported CEMS.
Active
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
Top
User avatar
RickHaleParker  
Posts: 7201
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 978 times

Post by RickHaleParker »

RickHaleParker wrote: 10 Jun 2021, 02:03 If a CEM part number is not found in the database the software will output " "Unknown CEM part number XXXXXXXX. Don't know what to do".
Perhaps that should be extended to: "Unknown CEM part number XXXXXXXX. Don't know what to do. Report part number and CEM type to the developers or call Junior Samples at BR-549. "
Active
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
Top
ricked
Posts: 38
Joined: 24 May 2021, 06:03
Year and Model: xc90
Location: lowlands
Has thanked: 6 times
Been thanked: 2 times

Post by ricked »

ok thanks @RickHaleParker, for infos, in my case all pin extractions are 35 minutes, as for cem-l/h and the p1 cem
running i7 with 64gb of ram win 10 64x
Top
User avatar
RickHaleParker  
Posts: 7201
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 978 times

Post by RickHaleParker »

VTL it looks like there are only four P3-CEM part numbers. Which could be add to the database.
Then if a unsupported P2-CEM-B or P3-CEM is detected. Could output "XXX not supported"
Leave code for unknown CEMs there might be some out there I have not found.

P3 CEM part numbers:
30765624
30686819
31327994
31412971
Active
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
Top
PowerMatz
Posts: 7
Joined: 09 Jun 2021, 10:41
Year and Model: 2009 XC 90 3.2l AWD
Location: Germany
Has thanked: 1 time

Post by PowerMatz »

RickHaleParker wrote: 10 Jun 2021, 02:16
If it still fails try changing the following in the code. You will find it near the top of the code.

#define SAMPLES 30 /* number of samples per sequence, more is better (up to 100) */
#define SAMPLES 100 /* number of samples per sequence, more is better (up to 100) */

SAMPLES 100 will take longer but it might get the PIN.

More SAMPLES is slower but more reliable. Fewer SAMPLES is faster but less reliable.
In my code it is already set to 100.

Here are the two log files I grabbed today
Archiv.zip
Two logfiles of failed crack
(19.63 KiB) Downloaded 147 times
First attempt was directly after stopping the engine and put the key in position 0
Second attempt was after quite a while. Key was in position 0 all the time. The engine was not started.

Matthias
Top
ricked
Posts: 38
Joined: 24 May 2021, 06:03
Year and Model: xc90
Location: lowlands
Has thanked: 6 times
Been thanked: 2 times

Post by ricked »

RickHaleParker wrote: 10 Jun 2021, 21:27 VTL it looks like there are only four P3-CEM part numbers. Which could be add to the database.
Then if a unsupported P2-CEM-B or P3-CEM is detected. Could output "XXX not supported"
Leave code for unknown CEMs there might be some out there I have not found.

P3 CEM part numbers:
30765624
30686819
31327994
31412971
30686819 does not exist
Top
Post Reply
  • Similar Topics
    Replies
    Views
    Last post

Return to “XC90 1st gen 2003-2014”