Login Register

Vida CEM swapping

A mid-size luxury crossover SUV, the Volvo XC90 made its debut in 2002 at the Detroit Motor Show. Recognized for its safety, practicality, and comfort, the XC90 is a popular vehicle around the world. The XC90 proved to be very popular, and very good for Volvo's sales numbers, since its introduction in model year 2003 (North America). P2 platform.
Post Reply
urosm
Posts: 29
Joined: 24 May 2012
Year and Model: 2015 Volvo XC70 D5
Location: Montenegro
Has thanked: 10 times

Re: Vida CEM swapping

Post by urosm »

charlie13 wrote: 22 Apr 2022, 03:29
urosm wrote: 22 Apr 2022, 01:15
charlie13 wrote: 21 Apr 2022, 06:12
Still counts. I have a UHDS and an I / 0 terminal. UHDS counts slowly, I / 0 terminal does all CEM P1, P2, P3, SPA. That's why I / 0 is the better tool for me.
But with I/O Terminal you don't have a crack CEM PIN, right?
Just use it to read CEM flash and eeprom thru OBD, but first, you must find the PIN...
Yes. I need a pin for I/0 but SMOK has limited functions. For this, teensy 4.0 complements the I/0 functionality
I agree with you.
I am using IO + Teensy too and works without problem.
Volvo 744 TDIC SOLD, 1989. ; 1997. - 2000.
Volvo 855 GLT + LPG Estate SOLD, 1996. ; 1998. - 2020.
Volvo V70 D5 SOLD, 2004. ; 2013. - 2021.
Volvo XC70 D5 SOLD, 2007. ; 2017. - 2021.
Nissan Pathfinder DRIVING, 2007. ; 2019. -
Volvo XC70 D5 DRIVING, 2015. ; 2021. -
Volvo XC90 D5 DRIVING, 2008. ; 2022. -

h3b
Posts: 5
Joined: 4 May 2021
Year and Model: 2005 XC90 D5 Aut.
Location: Austria

Post by h3b »

Hi, i tried to crack the pin of my 2008 XC90 but i cant get it to work, it restarts after best candidate latency check.
i reduced the measured pins to 2 but it's still not working. What did i do wrong?

Code: Select all

CPU Maximum Frequency:   600000000
CPU Frequency:           180000000
Execution Rate:          180 cycles/us
PIN bytes to measure:    2
CAN low-speed init done.
Reading part number from ECU 0x40 on CAN_LS
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=02c1302a data=01 04 00 c0 13 08 80 00
CAN_LS <--- ID=03200428 data=01 18 10 00 00 00 00 00
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=02510020 data=00 00 00 00 00 00 00 00
CAN_LS <--- ID=03a04004 data=00 20 ff ff ff ff ff ff
CAN_LS <--- ID=01e0162a data=c0 01 00 00 03 00 1d 00
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 88 00 30
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=012173be data=40 01 40 06 00 32 00 00
CAN_LS <--- ID=02616cfc data=00 40 00 00 00 50 00 00
CAN_LS <--- ID=02803008 data=09 04 00 00 00 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=01017ffc data=1a 02 02 02 04 01 01 03
CAN_LS <--- ID=01e0162a data=00 01 00 00 03 00 5d 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=02c1302a data=41 04 00 c0 13 08 80 00
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=012173be data=80 01 40 06 00 32 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=01e0162a data=40 01 00 08 03 00 9d 00
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 08 00 30
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=02006428 data=01 00 00 00 00 00 00 00
CAN_LS <--- ID=02510020 data=00 00 00 00 00 00 00 00
CAN_LS <--- ID=02616cfc data=00 40 00 00 00 50 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=02803008 data=49 04 00 00 00 00 00 00
CAN_LS <--- ID=03200428 data=01 18 10 00 00 00 00 00
CAN_LS <--- ID=03600028 data=00 00 00 20 40 03 de 00
CAN_LS <--- ID=0381526c data=00 01 05 3c 07 ff 36 29
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=01e0162a data=80 01 00 00 03 00 5d 00
CAN_LS <--- ID=012173be data=c0 11 40 06 00 b2 00 00
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=02c1302a data=81 04 00 c0 13 08 80 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=03c01428 data=80 00 40 00 0e 48 00 00
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 28 00 30
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=02616cfc data=00 44 00 00 00 50 00 00
CAN_LS <--- ID=02803008 data=89 04 00 00 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=01e0162a data=c0 01 00 00 03 00 1d 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=012173be data=00 01 40 06 00 32 00 00
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=02510020 data=00 00 00 00 00 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=03200428 data=01 18 10 00 00 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=01e0162a data=00 01 00 00 03 00 9d 00
CAN_LS <--- ID=02c1302a data=c1 00 00 c0 13 08 80 00
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 08 00 30
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=012173be data=40 11 40 06 00 b2 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=02006428 data=01 00 00 00 00 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=02616cfc data=00 40 00 00 00 50 00 00
CAN_LS <--- ID=02803008 data=cb 04 00 00 00 00 00 00
CAN_LS <--- ID=03a04004 data=00 30 ff ff ff ff ff ff
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=01e0162a data=40 01 00 00 03 00 5d 00
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=02510020 data=00 00 00 00 00 00 00 00
CAN_LS <--- ID=012173be data=80 01 40 06 00 32 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=01e0162a data=80 01 00 00 03 00 1d 00
CAN_LS <--- ID=02c1302a data=01 04 00 c0 13 08 80 00
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 08 00 30
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=02616cfc data=00 40 00 00 00 50 00 00
CAN_LS <--- ID=02803008 data=09 04 00 00 00 00 00 00
CAN_LS <--- ID=03200428 data=01 18 10 00 00 00 00 00
CAN_LS <--- ID=03600028 data=00 00 00 20 40 03 de 00
CAN_LS <--- ID=0381526c data=00 01 05 3c 07 ff 36 29
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=01e0162a data=c0 01 00 08 03 00 9d 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=012173be data=c0 11 40 06 00 b2 00 00
CAN_LS <--- ID=03e0004a data=00 00 00 00 1d e0 00 00
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=02c1302a data=41 04 00 c0 13 08 80 00
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 08 00 30
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=01017ffc data=1f 02 02 07 03 02 22 02
CAN_LS <--- ID=01e0162a data=00 01 00 00 03 00 5d 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=02006428 data=01 00 00 00 00 00 00 00
CAN_LS <--- ID=02510020 data=00 00 00 00 00 00 00 00
CAN_LS <--- ID=02616cfc data=00 40 00 00 00 50 00 00
CAN_LS <--- ID=02803008 data=49 04 00 00 00 00 00 00
CAN_LS <--- ID=012173be data=00 01 40 06 00 32 00 00
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=03200428 data=01 18 10 00 00 00 00 00
CAN_LS <--- ID=03c01428 data=c0 80 40 00 0e 48 00 00
CAN_LS <--- ID=01e0162a data=40 01 00 00 03 00 1d 00
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=04900002 data=00 00 00 00 f9 e4 3a cf
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 08 00 30
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=012173be data=40 11 40 06 00 b2 00 00
CAN_LS <--- ID=02616cfc data=00 40 00 00 00 50 00 00
CAN_LS <--- ID=02803008 data=89 04 00 00 00 00 00 00
CAN_LS <--- ID=02c1302a data=81 04 00 c0 13 08 80 00
CAN_LS <--- ID=01e0162a data=80 01 00 00 03 00 9d 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 62 00 00 00 00 3f
CAN_LS <--- ID=02510020 data=00 00 00 00 00 00 00 00
CAN_LS <--- ID=03a04004 data=00 20 ff ff ff ff ff ff
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 66 00 00 00 00 3f
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=012173be data=80 01 40 06 00 32 00 00
CAN_LS <--- ID=01e0162a data=c0 01 00 00 03 00 5d 00
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 08 00 30
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=02006428 data=01 00 00 00 00 00 00 00
CAN_LS <--- ID=02616cfc data=00 44 00 00 00 50 00 00
CAN_LS <--- ID=02803008 data=cb 04 00 00 00 00 40 00
CAN_LS <--- ID=02c1302a data=c1 00 00 c0 13 08 80 00
CAN_LS <--- ID=03200428 data=01 18 10 00 00 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 66 00 00 00 00 3f
CAN_LS <--- ID=03600028 data=00 00 00 20 40 03 de 00
CAN_LS <--- ID=0381526c data=00 01 05 3c 07 ff 36 29
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=01e0162a data=00 01 00 00 03 00 1d 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=012173be data=c0 01 40 06 00 32 00 00
CAN_LS <--- ID=0131726c data=00 0c 66 00 00 00 00 3f
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=02510020 data=00 00 00 00 00 00 00 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=01e0162a data=40 01 00 08 03 00 9d 00
CAN_LS <--- ID=02a0240e data=00 00 00 00 00 08 00 30
CAN_LS <--- ID=00217ffc data=01 4b 00 10 e0 00 00 00
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=0131726c data=00 0c 66 00 00 00 00 3f
CAN_LS <--- ID=02616cfc data=00 40 00 00 00 50 00 00
CAN_LS <--- ID=02803008 data=09 04 00 00 00 00 00 00
CAN_LS <--- ID=02c1302a data=01 04 00 c0 13 08 80 00
CAN_LS <--- ID=012173be data=00 11 40 06 00 b2 00 00
CAN_LS <--- ID=00217ffc data=03 4b 00 10 e0 00 00 00
CAN_LS <--- ID=0131726c data=00 0c 66 00 00 00 00 3f
CAN_LS <--- ID=00e01008 data=03 60 08 00 00 00 4c 00
CAN_LS <--- ID=014034a2 data=00 5b 00 04 89 00 04 00
CAN_LS <--- ID=01601422 data=00 00 00 01 34 90 06 48
CAN_LS <--- ID=01e0162a data=80 01 00 00 03 00 5d 00
CAN_LS ---> ID=000ffffe data=cb 40 b9 f0 00 00 00 00
Can't find part number on CAN-LS, trying CAN-HS at 500 Kbps
CAN high-speed init done.
Reading part number from ECU 0x50 on CAN_HS
CAN_HS ---> ID=000ffffe data=cb 50 b9 f0 00 00 00 00
CAN_HS <--- ID=0042406c data=60 00 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=10400020 data=60 28 02 60 00 00 00 00
CAN_HS <--- ID=11100024 data=00 00 00 00 02 48 00 00
CAN_HS <--- ID=11220028 data=00 00 00 3c 00 00 36 29
CAN_HS <--- ID=11a00020 data=60 00 00 00 00 00 00 00
CAN_HS <--- ID=0042406c data=80 8a 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=01200003 data=09 55 20 20 41 31 39 41
CAN_HS <--- ID=0042406c data=c0 a8 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=01200003 data=4c 63 20 41 41 00 00 00
CAN_HS <--- ID=0042406c data=00 88 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=10400020 data=80 28 42 60 00 00 00 00
CAN_HS <--- ID=0042406c data=40 a8 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=10a2407c data=01 0f f9 e4 3a d1 01 0a
CAN_HS <--- ID=0042406c data=80 88 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=11100024 data=00 00 00 40 02 48 00 00
CAN_HS <--- ID=0042406c data=c0 aa 80 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=10400020 data=c0 28 42 60 00 00 00 00
CAN_HS <--- ID=11220028 data=01 60 00 3c 00 00 36 29
CAN_HS <--- ID=0042406c data=00 88 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=0042406c data=40 a8 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS ---> ID=000ffffe data=cb 50 b9 f0 00 00 00 00
CAN_HS <--- ID=0042406c data=80 88 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=01200003 data=8f 50 f9 f0 00 31 28 24
CAN_HS <--- ID=10400020 data=00 28 42 60 00 00 00 00
CAN_HS <--- ID=0042406c data=c0 aa 00 00 60 00 80 00
CAN_HS <--- ID=01000020 data=00 00 00 00 00 00 00 00
CAN_HS <--- ID=11100024 data=00 00 00 00 02 48 00 00
CAN_HS <--- ID=01200003 data=09 55 20 20 41 31 39 41
Part Number: 31282455
Searching P/N 31282455 in 12 known CEMs
CAN HS baud rate: 500000
PIN shuffle order: 3 1 5 0 2 4
Putting all ECUs into programming mode.
CAN_HS ---> ID=000ffffe data=ff 86 00 00 00 00 00 00
CAN_LS ---> ID=000ffffe data=ff 86 00 00 00 00 00 00
Initialization done.

Calculating bytes 0-1
1000 pins in 646 ms, 1547 pins/s, average response: 0 us, histogram 0 to 0 us 
range 100, samples 10
candidates short list: 00 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49  (+ 50 more)

                   us:    -8    -7    -6    -5    -4    -3    -2    -1     0     1     2     3     4     5     6     7     8     9    10    11 
[ 00 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  1017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 01 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  2017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 02 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  3017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 03 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  4017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 04 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  5017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 05 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  6017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 06 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  7017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 07 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  8017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 08 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242  9017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 09 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 10017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 10 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 11017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 11 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 12017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 12 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 13017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 13 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 14017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 14 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 15017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 15 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 16017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 16 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 17017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 17 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 18017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 18 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 19017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 19 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 20017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 20 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 21017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 21 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 22017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 22 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 23017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 23 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 24017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 24 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 25017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 25 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 26017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 26 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 27017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 27 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 28017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 28 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 29017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 29 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 30017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 30 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 31017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 31 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 32017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 32 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 33017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 33 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 34017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 34 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 35017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 35 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 36017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 36 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 37017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 37 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 38017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 38 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 39017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 39 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 40017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 40 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 41017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 41 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 42017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 42 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 43017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 43 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 44017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 44 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 45017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 45 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 46017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 46 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 47017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 47 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 48017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 48 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 49017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 49 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 50017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 50 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 51017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 51 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 52017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 52 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 53017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 53 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 54017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 54 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 55017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 55 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 56017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 56 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 57017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 57 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 58017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 58 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 59017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 59 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 60017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 60 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 61017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 61 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 62017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 62 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 63017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 63 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 64017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 64 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 65017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 65 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 66017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 66 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 67017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 67 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 68017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 68 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 69017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 69 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 70017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 70 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 71017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 71 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 72017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 72 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 73017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 73 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 74017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 74 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 75017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 75 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 76017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 76 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 77017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 77 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 78017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 78 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 79017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 79 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 80017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 80 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 81017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 81 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 82017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 82 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 83017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 83 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 84017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 84 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 85017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 85 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 86017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 86 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 87017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 87 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 88017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 88 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 89017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 89 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 90017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 90 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 91017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 91 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 92017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 92 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 93017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 93 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 94017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 94 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 95017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 95 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 96017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 96 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 97017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 97 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 98017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 98 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 99017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
[ 99 -- -- -- -- -- ]: 2029776187 2417332490 4123582347 2068379744 3689293813 67403808 3479771242 100017 29762621 2411717299 2484758400  3985 3778036004 2097137203 2133825484 1085602584 684895805 1885473175 3154837491 540160072 : latency          0; std nan
best candidates ordered by latency:
0: 99 lat = 0
1: 01 lat = 0
2: 02 lat = 0
3: 03 lat = 0
4: 04 lat = 0
5: 05 lat = 0
6: 06 lat = 0
7: 07 lat = 0
8: 08 lat = 0
9: 09 lat = 0
10: 10 lat = 0
11: 11 lat = 0
12: 12 lat = 0
13: 13 lat = 0
14: 14 lat = 0
15: 15 lat = 0
16: 16 lat = 0
17: 17 lat = 0
18: 18 lat = 0
19: 19 lat = 0
20: 20 lat = 0
21: 21 lat = 0
22: 22 lat = 0
23: 23 lat = 0
24: 24 lat = 0
25: 25 lat = 0
26: 26 lat = 0
27: 27 lat = 0
28: 28 lat = 0
29: 29 lat = 0
30: 30 lat = 0
31: 31 lat = 0
32: 32 lat = 0
33: 33 lat = 0
34: 34 lat = 0
35: 35 lat = 0
36: 36 lat = 0
37: 37 lat = 0
38: 38 lat = 0
39: 39 lat = 0
40: 40 lat = 0
41: 41 lat = 0
42: 42 lat = 0
43: 43 lat = 0
44: 44 lat = 0
45: 45 lat = 0
46: 46 lat = 0
47: 47 lat = 0
48: 48 lat = 0
49: 49 lat = 0
50: 50 lat = 0
51: 51 lat = 0
52: 52 lat = 0
53: 53 lat = 0
54: 54 lat = 0
55: 55 lat = 0
56: 56 lat = 0
57: 57 lat = 0
58: 58 lat = 0
59: 59 lat = 0
60: 60 lat = 0
61: 61 lat = 0
62: 62 lat = 0
63: 63 lat = 0
64: 64 lat = 0
65: 65 lat = 0
66: 66 lat = 0
67: 67 lat = 0
68: 68 lat = 0
69: 69 lat = 0
70: 70 lat = 0
71: 71 lat = 0
72: 72 lat = 0
73: 73 lat = 0
74: 74 lat = 0
75: 75 lat = 0
76: 76 lat = 0
77: 77 lat = 0
78: 78 lat = 0
79: 79 lat = 0
80: 80 lat = 0
81: 81 lat = 0
82: 82 lat = 0
83: 83 lat = 0
84: 84 lat = 0
85: 85 lat = 0
86: 86 lat = 0
87: 87 lat = 0
88: 88 lat = 0
89: 89 lat = 0
90: 90 lat = 0
91: 91 lat = 0
92: 92 lat = 0
93: 93 lat = 0
94: 94 lat = 0
95: 95 lat = 0
96: 96 lat = 0
97: 97 lat = 0
98: 98 lat = 0
99: 00 lat = 0
...

alevol
Posts: 31
Joined: 4 August 2021
Year and Model: 2005 S60
Location: Finland
Has thanked: 6 times
Been thanked: 3 times

Post by alevol »

You have HW problem it seems, either teensy or connection

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

vtl wrote: 22 Apr 2022, 10:25 The worst case would be a hit with pin 00 99 99 99 99, which would take almost 63 hours at your speed.
Do it in hexadecimal. 256^3 / 445 / 60^2 = 10.47 hours max. Six times faster.
In hexadecimal you will find a PIN in the range of 00 00 00 00 00 to 00 00 FF FF FF.

If you want a BCD PIN you can run the Seed / Key through your Step Hash and find one but you don't need to. You just need something that will produce the correct key and accepted by whatever software the PIN will be used for.

The proof finished running. The 65536 hexadecimal collisions are all valid PINs. The proof ran all 65536 hexadecimal collisions against all 16777216 Seeds. All 65536 hexadecimal collisions produce the same Key for a given Seed. There where zero mismatches.

BCD is a subset of Hexadecimal.
Last edited by RickHaleParker on 24 Apr 2022, 06:36, edited 4 times in total.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

h3b
Posts: 5
Joined: 4 May 2021
Year and Model: 2005 XC90 D5 Aut.
Location: Austria

Post by h3b »

alevol wrote: 24 Apr 2022, 04:20 You have HW problem it seems, either teensy or connection
Okay thanks for the response. I will check the wiring again. And then maybe try it with a new teensy 4.0.

vtl
Posts: 4724
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 604 times

Post by vtl »

RickHaleParker wrote: 24 Apr 2022, 05:55 Do it in hexadecimal. 256^3 / 445 / 60^2 = 10.47 hours max. Six times faster.
Depends on the real pin in flash. The code does not need to iterate over the whole range, it only needs one hit.

My P3 CEM hits the first collision 30% faster in BCD than in HEX, going up starting with all zeroes. I spent a few days looking at how this can be accelerated, like pick up a better starting point, but wasn't able to come up with something meaningful.

vtl
Posts: 4724
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 604 times

Post by vtl »

Power6 wrote: 23 Apr 2022, 13:45 The algorithm is the same yes. How many examples do you need, I got plenty ;-) What would you like to see?
Couple of example of the real pin from flash and seed/key from the real session.
Power6 wrote: 23 Apr 2022, 13:45 I've figured out the algorithm has some properties useful for security hashing that make the result always unique, the set of possible results per seed is maximal with no repeats, in a pseudo random order security of course. So no need to find every PIN match, you can look at a small set and always find a single match. This can be done with just ~17 million possible (2^24)

I see you are doing things a different way, breaking down the hashing, which is beyond my capability, but I am wondering if you have come to the same conclusion, that the actual set of PINs you need to check to find a match is not very large. Rick had been trying to explain your process to me, but I can't quite follow your code...
A staged hashing only makes sense if you crack at high rate. With CAN-bus speeds it doesn't matter, the code may be doing the whole hash every time and see no performance degradation. It is bad already.

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

vtl wrote: 24 Apr 2022, 09:03
Depends on the real pin in flash. The code does not need to iterate over the whole range, it only needs one hit.

My P3 CEM hits the first collision 30% faster in BCD than in HEX, going up starting with all zeroes. I spent a few days looking at how this can be accelerated, like pick up a better starting point, but wasn't able to come up with something meaningful.
Perhaps I should of said the maximum time is lower by a factor of 6. I think the maximum time is a bigger concern then actual time.

If you do it in BCD you will be skipping over valid PINs
Do it in Hex and it does not matter what B0 & B1 are. You will find one valid PIN in in each set of ( B0, B1 ). ( B0 B1 XX XX XX ) every time. You only need to iterate three bytes B2 B3 B4 for one set of ( B0, B1 ).

Attached is a list of 65536 Valid PINs for just one of Power6's SPA CEMs. Look at the pattern.
Attachments
Power6.csv
(8.87 KiB) Downloaded 138 times
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

Power6
Posts: 14
Joined: 7 March 2022
Year and Model: 2019 S60
Location: MA
Has thanked: 1 time
Been thanked: 12 times

Post by Power6 »

vtl wrote: 24 Apr 2022, 09:03 My P3 CEM hits the first collision 30% faster in BCD than in HEX, going up starting with all zeroes. I spent a few days looking at how this can be accelerated, like pick up a better starting point, but wasn't able to come up with something meaningful.
Isn't that probability though? You happen to hit a match, maybe next time you don't.

We've worked out going by consecutive hex, the smallest possible set of unique PINs needed to match. That worked out very nicely in hex, only need to vary the trailing 3 bytes.. No idea what that pattern would be in BCD.

Power6
Posts: 14
Joined: 7 March 2022
Year and Model: 2019 S60
Location: MA
Has thanked: 1 time
Been thanked: 12 times

Post by Power6 »

vtl wrote: 24 Apr 2022, 09:11 Couple of example of the real pin from flash and seed/key from the real session.
Got you. One thing I don't have is the PIN from flash, have not read the CEM, not a hardware guy ;-) So what I don't know is what Volvo has set the CEM 01 PIN to. I've been using the cracked PINs to test and program the car with.
CEMPINReslt.PNG
CEMPINReslt.PNG (9.45 KiB) Viewed 647 times

Code: Select all

0x1A01 - 6657 - CEM000 - brute force PIN 4C4C1934B4
09 C1 FF/14 10 EF - 01/02
BD FA 1A/4C 0E 2B - 01/02
Thanks to Rick for getting us started with the algorithm. I built a tool to take the VIDA log and decrypt the lines with the seed/key exchange, then it brute forces a PIN. That PIN I have used to load CARCFG software files on the car. I have been using Volvo DSA to program the car while I work out the process but would like to build a tool now. I'm not seeing the programming seed/key exchange in DSA logs, but it works. All I got is a shot of my dash display, changed the logo to Polestar ;-) as well as various other tweaks that are now opened up. We've got multiple folks already cracked PINs from VIDA logs and able to load software on the CEM now.
2022-04-22 16.21.15.jpg
2022-04-22 16.21.15.jpg (4.1 MiB) Viewed 647 times
vtl wrote: 24 Apr 2022, 09:11 A staged hashing only makes sense if you crack at high rate. With CAN-bus speeds it doesn't matter, the code may be doing the whole hash every time and see no performance degradation. It is bad already.
OK this makes sense. The need on the SPA is a breakthrough to get around the security timeout, to not require sampling a successful seed/key, and even then if doing a crack over UDS whether CAN or DOIP speed to calculate key each try would likely never be an issue.

Post Reply
  • Similar Topics
    Replies
    Views
    Last post