Login Register

Vida CEM swapping

A mid-size luxury crossover SUV, the Volvo XC90 made its debut in 2002 at the Detroit Motor Show. Recognized for its safety, practicality, and comfort, the XC90 is a popular vehicle around the world. The XC90 proved to be very popular, and very good for Volvo's sales numbers, since its introduction in model year 2003 (North America). P2 platform.
Post Reply
oscilloscope
Posts: 285
Joined: 20 May 2022
Year and Model: 2005
Location: uk
Has thanked: 27 times
Been thanked: 11 times

Re: Vida CEM swapping

Post by oscilloscope »

dikidera wrote: 11 Mar 2023, 16:12 You are taking the hard approach to learning programming, I've been there waaay way back in 2007 and then later on in 2011 with C then with Java(Android flavor).

I also very long ago, wrote an Android program...on my phone when I had no access to a PC. https://bitcointalk.org/index.php?topic=101612.0 it was one of my more ambitious projects at the time but with enough patience the code will, one way or another, start making sense.

My most recent ambitious project was writing my own control flow graph generator in Java(in order to re-learn java as I had not used it for over 8 years!), it worked semi-ok. But semi-ok because I tested it on obfuscated code.

Point is, trial&error on some things. It's not efficient, but everyone has a way of learning things.
certainly do , that is why i' using chatgpt i know its not prefect , and i know the code isn't going to work , but i save ones that almost do and then i edit it where i think its going to work , and i have got really close but the code on here doesn't really work on python. it doesn't understand what the ^ (i // 7) is ment to mean , if i remove it entirely from the code and use a XOR cipher and then implement a crypto key array , of 0x3d, 0x55, 0x7f, 0x9d, 0xa5, 0xbb, 0xc3, 0xdf, 0xe it gets super close , but still not dice! , I'm going to pack it in for tonight. its already close 1pm here

coormis
Posts: 8
Joined: 24 January 2023
Year and Model: 2014
Location: lt
Has thanked: 2 times

Post by coormis »

vtl wrote: 10 Mar 2023, 08:53
coormis wrote: 10 Mar 2023, 08:48 Are you talking about the 120 ohm resistor on the SN65HVD230?
By the way, the latency numbers in your log are totally off, they make no sense. That's why I suspected the hw implementation.
I cheked today my shield. its no jumper, its connected directly to vp230 6,7 pin. 120 omh resistor i removed from shield. maybe china chips is broken.

oscilloscope
Posts: 285
Joined: 20 May 2022
Year and Model: 2005
Location: uk
Has thanked: 27 times
Been thanked: 11 times

Post by oscilloscope »

coormis wrote: 12 Mar 2023, 08:24
vtl wrote: 10 Mar 2023, 08:53
coormis wrote: 10 Mar 2023, 08:48 Are you talking about the 120 ohm resistor on the SN65HVD230?
By the way, the latency numbers in your log are totally off, they make no sense. That's why I suspected the hw implementation.
I cheked today my shield. its no jumper, its connected directly to vp230 6,7 pin. 120 omh resistor i removed from shield. maybe china chips is broken.
I made mine with similar parts, I have had mixed success , as I try it on most cems I get in I think why not "have ago and see if it works "

I have the alternative CAN transceivers rick suggested to use in the github repo ? & the pcbway boards but haven't actually put them together as of yet. Have you looked up the alternative board ?

coormis
Posts: 8
Joined: 24 January 2023
Year and Model: 2014
Location: lt
Has thanked: 2 times

Post by coormis »

oscilloscope wrote: 12 Mar 2023, 10:54
coormis wrote: 12 Mar 2023, 08:24
vtl wrote: 10 Mar 2023, 08:53
By the way, the latency numbers in your log are totally off, they make no sense. That's why I suspected the hw implementation.
I cheked today my shield. its no jumper, its connected directly to vp230 6,7 pin. 120 omh resistor i removed from shield. maybe china chips is broken.
I made mine with similar parts, I have had mixed success , as I try it on most cems I get in I think why not "have ago and see if it works "

I have the alternative CAN transceivers rick suggested to use in the github repo ? & the pcbway boards but haven't actually put them together as of yet. Have you looked up the alternative board ?
i try search in my country alternative shields. and if its wonts work, i try pcbway board.

oscilloscope
Posts: 285
Joined: 20 May 2022
Year and Model: 2005
Location: uk
Has thanked: 27 times
Been thanked: 11 times

Post by oscilloscope »

I have been attempting too use the XOR decrypt on some cem eeprom files, so far with little success. It either doesn't perform the task , or preforms it completely incorrectly.

rkam
Posts: 102
Joined: 19 October 2022
Year and Model: 14473_96090_XC7007
Location: Norway
Has thanked: 5 times
Been thanked: 25 times

Post by rkam »

Your key should be 61 (0x3d) bytes long.

out[0] = ( data[0] xor key[0] ) xor 0
out[1] = ( data[1] xor key[1] ) xor 0
out[2] = ( data[2] xor key[2] ) xor 0
out[3] = ( data[3] xor key[3] ) xor 0
out[4] = ( data[4] xor key[4] ) xor 0
out[5] = ( data[5] xor key[5] ) xor 0
out[6] = ( data[6] xor key[6] ) xor 0
out[7] = ( data[7] xor key[7] ) xor 1
..
out[13] = ( data[13] xor key[13] ) xor 1
out[14] = ( data[14] xor key[14] ) xor 2
...
out[60] = ( data[60] xor key[60] ) xor 8
out[61] = ( data[61] xor key[0] ) xor 8
out[62] = ( data[62] xor key[1] ) xor 8
out[63] = ( data[63] xor key[2] ) xor 9
..
out[1791] = ( data[1791] xor key[22] ) xor 255
out[1792] = ( data[1792] xor key[23] ) xor 0


Key number starts from 0 every 61 bytes
Xor value from byte number starts from 0 after 1792 bytes (255 used 7 times)

oscilloscope
Posts: 285
Joined: 20 May 2022
Year and Model: 2005
Location: uk
Has thanked: 27 times
Been thanked: 11 times

Post by oscilloscope »

rkam wrote: 18 Mar 2023, 13:39 Your key should be 61 (0x3d) bytes long.

out[0] = ( data[0] xor key[0] ) xor 0
out[1] = ( data[1] xor key[1] ) xor 0
out[2] = ( data[2] xor key[2] ) xor 0
out[3] = ( data[3] xor key[3] ) xor 0
out[4] = ( data[4] xor key[4] ) xor 0
out[5] = ( data[5] xor key[5] ) xor 0
out[6] = ( data[6] xor key[6] ) xor 0
out[7] = ( data[7] xor key[7] ) xor 1
..
out[13] = ( data[13] xor key[13] ) xor 1
out[14] = ( data[14] xor key[14] ) xor 2
...
out[60] = ( data[60] xor key[60] ) xor 8
out[61] = ( data[61] xor key[0] ) xor 8
out[62] = ( data[62] xor key[1] ) xor 8
out[63] = ( data[63] xor key[2] ) xor 9
..
out[1791] = ( data[1791] xor key[22] ) xor 255
out[1792] = ( data[1792] xor key[23] ) xor 0


Key number starts from 0 every 61 bytes
Xor value from byte number starts from 0 after 1792 bytes (255 used 7 times)
Thanks I will give that a try. And report back

eastcoasttuningltd
Posts: 3
Joined: 25 February 2023
Year and Model: 2007 xc90
Location: New Brunswick
Has thanked: 1 time

Post by eastcoasttuningltd »

Looking for a place to order CY1076 I got the rest of the parts trying to build the cracker

vtl
Posts: 4724
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 603 times

Post by vtl »

eastcoasttuningltd wrote: 19 Mar 2023, 12:47 Looking for a place to order CY1076 I got the rest of the parts trying to build the cracker
You don't need level shifters to build a cracker.

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

vtl wrote: 19 Mar 2023, 13:38 You don't need level shifters to build a cracker.
I have done the CAN level at 5V ... no damage.
If you want to level shift. Use a CAN Transceiver with level shift built in.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

Post Reply
  • Similar Topics
    Replies
    Views
    Last post