Login Register

Vida CEM swapping

Post Reply
oscilloscope
Posts: 285
Joined: 20 May 2022, 16:12
Year and Model: 2005
Location: uk
Has thanked: 27 times
Been thanked: 11 times

Post by oscilloscope »

dikidera wrote: 11 Mar 2023, 16:12 You are taking the hard approach to learning programming, I've been there waaay way back in 2007 and then later on in 2011 with C then with Java(Android flavor).

I also very long ago, wrote an Android program...on my phone when I had no access to a PC. https://bitcointalk.org/index.php?topic=101612.0 it was one of my more ambitious projects at the time but with enough patience the code will, one way or another, start making sense.

My most recent ambitious project was writing my own control flow graph generator in Java(in order to re-learn java as I had not used it for over 8 years!), it worked semi-ok. But semi-ok because I tested it on obfuscated code.

Point is, trial&error on some things. It's not efficient, but everyone has a way of learning things.
certainly do , that is why i' using chatgpt i know its not prefect , and i know the code isn't going to work , but i save ones that almost do and then i edit it where i think its going to work , and i have got really close but the code on here doesn't really work on python. it doesn't understand what the ^ (i // 7) is ment to mean , if i remove it entirely from the code and use a XOR cipher and then implement a crypto key array , of 0x3d, 0x55, 0x7f, 0x9d, 0xa5, 0xbb, 0xc3, 0xdf, 0xe it gets super close , but still not dice! , I'm going to pack it in for tonight. its already close 1pm here

coormis
Posts: 8
Joined: 24 Jan 2023, 07:53
Year and Model: 2014
Location: lt
Has thanked: 2 times

Post by coormis »

vtl wrote: 10 Mar 2023, 08:53
coormis wrote: 10 Mar 2023, 08:48 Are you talking about the 120 ohm resistor on the SN65HVD230?
By the way, the latency numbers in your log are totally off, they make no sense. That's why I suspected the hw implementation.
I cheked today my shield. its no jumper, its connected directly to vp230 6,7 pin. 120 omh resistor i removed from shield. maybe china chips is broken.

oscilloscope
Posts: 285
Joined: 20 May 2022, 16:12
Year and Model: 2005
Location: uk
Has thanked: 27 times
Been thanked: 11 times

Post by oscilloscope »

coormis wrote: 12 Mar 2023, 08:24
vtl wrote: 10 Mar 2023, 08:53
coormis wrote: 10 Mar 2023, 08:48 Are you talking about the 120 ohm resistor on the SN65HVD230?
By the way, the latency numbers in your log are totally off, they make no sense. That's why I suspected the hw implementation.
I cheked today my shield. its no jumper, its connected directly to vp230 6,7 pin. 120 omh resistor i removed from shield. maybe china chips is broken.
I made mine with similar parts, I have had mixed success , as I try it on most cems I get in I think why not "have ago and see if it works "

I have the alternative CAN transceivers rick suggested to use in the github repo ? & the pcbway boards but haven't actually put them together as of yet. Have you looked up the alternative board ?

coormis
Posts: 8
Joined: 24 Jan 2023, 07:53
Year and Model: 2014
Location: lt
Has thanked: 2 times

Post by coormis »

oscilloscope wrote: 12 Mar 2023, 10:54
coormis wrote: 12 Mar 2023, 08:24
vtl wrote: 10 Mar 2023, 08:53
By the way, the latency numbers in your log are totally off, they make no sense. That's why I suspected the hw implementation.
I cheked today my shield. its no jumper, its connected directly to vp230 6,7 pin. 120 omh resistor i removed from shield. maybe china chips is broken.
I made mine with similar parts, I have had mixed success , as I try it on most cems I get in I think why not "have ago and see if it works "

I have the alternative CAN transceivers rick suggested to use in the github repo ? & the pcbway boards but haven't actually put them together as of yet. Have you looked up the alternative board ?
i try search in my country alternative shields. and if its wonts work, i try pcbway board.

oscilloscope
Posts: 285
Joined: 20 May 2022, 16:12
Year and Model: 2005
Location: uk
Has thanked: 27 times
Been thanked: 11 times

Post by oscilloscope »

I have been attempting too use the XOR decrypt on some cem eeprom files, so far with little success. It either doesn't perform the task , or preforms it completely incorrectly.

rkam
Posts: 102
Joined: 19 Oct 2022, 12:54
Year and Model: 14473_96090_XC7007
Location: Norway
Has thanked: 5 times
Been thanked: 25 times

Post by rkam »

Your key should be 61 (0x3d) bytes long.

out[0] = ( data[0] xor key[0] ) xor 0
out[1] = ( data[1] xor key[1] ) xor 0
out[2] = ( data[2] xor key[2] ) xor 0
out[3] = ( data[3] xor key[3] ) xor 0
out[4] = ( data[4] xor key[4] ) xor 0
out[5] = ( data[5] xor key[5] ) xor 0
out[6] = ( data[6] xor key[6] ) xor 0
out[7] = ( data[7] xor key[7] ) xor 1
..
out[13] = ( data[13] xor key[13] ) xor 1
out[14] = ( data[14] xor key[14] ) xor 2
...
out[60] = ( data[60] xor key[60] ) xor 8
out[61] = ( data[61] xor key[0] ) xor 8
out[62] = ( data[62] xor key[1] ) xor 8
out[63] = ( data[63] xor key[2] ) xor 9
..
out[1791] = ( data[1791] xor key[22] ) xor 255
out[1792] = ( data[1792] xor key[23] ) xor 0


Key number starts from 0 every 61 bytes
Xor value from byte number starts from 0 after 1792 bytes (255 used 7 times)

oscilloscope
Posts: 285
Joined: 20 May 2022, 16:12
Year and Model: 2005
Location: uk
Has thanked: 27 times
Been thanked: 11 times

Post by oscilloscope »

rkam wrote: 18 Mar 2023, 13:39 Your key should be 61 (0x3d) bytes long.

out[0] = ( data[0] xor key[0] ) xor 0
out[1] = ( data[1] xor key[1] ) xor 0
out[2] = ( data[2] xor key[2] ) xor 0
out[3] = ( data[3] xor key[3] ) xor 0
out[4] = ( data[4] xor key[4] ) xor 0
out[5] = ( data[5] xor key[5] ) xor 0
out[6] = ( data[6] xor key[6] ) xor 0
out[7] = ( data[7] xor key[7] ) xor 1
..
out[13] = ( data[13] xor key[13] ) xor 1
out[14] = ( data[14] xor key[14] ) xor 2
...
out[60] = ( data[60] xor key[60] ) xor 8
out[61] = ( data[61] xor key[0] ) xor 8
out[62] = ( data[62] xor key[1] ) xor 8
out[63] = ( data[63] xor key[2] ) xor 9
..
out[1791] = ( data[1791] xor key[22] ) xor 255
out[1792] = ( data[1792] xor key[23] ) xor 0


Key number starts from 0 every 61 bytes
Xor value from byte number starts from 0 after 1792 bytes (255 used 7 times)
Thanks I will give that a try. And report back

eastcoasttuningltd
Posts: 3
Joined: 25 Feb 2023, 11:06
Year and Model: 2007 xc90
Location: New Brunswick
Has thanked: 1 time

Post by eastcoasttuningltd »

Looking for a place to order CY1076 I got the rest of the parts trying to build the cracker

vtl
Posts: 4936
Joined: 16 Aug 2012, 13:35
Year and Model: 2005 XC70
Location: Boston
Has thanked: 130 times
Been thanked: 686 times

Post by vtl »

eastcoasttuningltd wrote: 19 Mar 2023, 12:47 Looking for a place to order CY1076 I got the rest of the parts trying to build the cracker
You don't need level shifters to build a cracker.

User avatar
RickHaleParker
Posts: 7205
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 980 times

Post by RickHaleParker »

vtl wrote: 19 Mar 2023, 13:38 You don't need level shifters to build a cracker.
I have done the CAN level at 5V ... no damage.
If you want to level shift. Use a CAN Transceiver with level shift built in.
Active
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )

Post Reply
  • Similar Topics
    Replies
    Views
    Last post