Vida CEM swapping

[Treur]

Yes, that's CEM L

[Dudde]

Yes, that's CEM L

And you got the key from flash? Also what serial number is the CEM?

[Treur]

Yes, key from flash, I don't remember serial, but it's a 835 mcu.
I have decrypted eprom by io-terminal for compare.
I see that using my code I decrypt the first 61 bytes correctly.

files.zip

(121.35 KiB) Downloaded 38 times

[Dudde]

Yes, key from flash, I don't remember serial, but it's a 835 mcu.
I have decrypted eprom by io-terminal for compare.
I see that using my code I decrypt the first 61 bytes correctly.
files.zip

I can give you solution when i get home

[Treur]

Yes, key from flash, I don't remember serial, but it's a 835 mcu.
I have decrypted eprom by io-terminal for compare.
I see that using my code I decrypt the first 61 bytes correctly.
files.zip

I can give you solution when i get home

Ok, thanks. I already decrypted 183 bytes
..................
..................
Decrypted all file.

[Yariy]

Hi everybody. I wrote SBL for CEMB to read the full contents of the flash. While in test mode, CAN packets are transmitted in uncontrolled mode with 8 bytes of data. 512 KB is transmitted in 1.3 minutes. The period between CAN packets is 1.192 milliseconds. I receive all data packets on the table without errors. And now I have some questions. 1. Isn't the time between data packets 1.192 milliseconds short if you read the block remotely via the Internet? 2. Is it necessary to make the transfer of controlled request-response type instead of uncontrolled data transfer?

[dikidera]

You can always dump it and send in chunks. Usually ping is high, its nowhere near 1ms unless done locally.

[Yariy]

You can always dump it and send in chunks. Usually ping is high, its nowhere near 1ms unless done locally.

Thank you. I will send the data in parts with checksum calculation. If the block checksum is incorrect, then send it again.

[Treur]

Hi everybody. I wrote SBL for CEMB to read the full contents of the flash. While in test mode, CAN packets are transmitted in uncontrolled mode with 8 bytes of data. 512 KB is transmitted in 1.3 minutes. The period between CAN packets is 1.192 milliseconds. I receive all data packets on the table without errors. And now I have some questions. 1. Isn't the time between data packets 1.192 milliseconds short if you read the block remotely via the Internet? 2. Is it necessary to make the transfer of controlled request-response type instead of uncontrolled data transfer?

Оптимально читать блоками по минимально 16 сообщений за раз (обычно используется по 32) в режиме запрос-ответ. То есть послали запрос, в котором указали откуда читать, что читать и по сколько сообщений за раз выдавать, получили сообщения, получили завершающее сообщение (можно сунуть КС например) и запрашиваем следующую порцию. И так далее. Через интернет напрямую блоки не читают ибо там совершенно конские с точки зрения CAN задержки (~100ms >). Обычно читается локально софтом и по мере поступления, или всё сразу отгружается по сети получателю.

Кстати, если КС не правильная, блок не должен ни чего повторять сам, это задача софта.

[WhizzMan]

Hi everybody. I wrote SBL for CEMB to read the full contents of the flash. While in test mode, CAN packets are transmitted in uncontrolled mode with 8 bytes of data. 512 KB is transmitted in 1.3 minutes. The period between CAN packets is 1.192 milliseconds. I receive all data packets on the table without errors. And now I have some questions. 1. Isn't the time between data packets 1.192 milliseconds short if you read the block remotely via the Internet? 2. Is it necessary to make the transfer of controlled request-response type instead of uncontrolled data transfer?

Would you be willing to share your code so we can do our own dumps?