Fox sport 2 international (fs2i) open op linux ontvangers?

[Anoniem]

cccam werkt op het moment hier ook niet, het is nu echt een kat- en muisspel geworden.

[Codx]

Hou op kiekiek..... je hebt vanaf het begin sprookjes lopen vertellen.

 

Voor de mensen die er wel serieus mee bezig zijn:

 

Fox2 kan alleen vanaf eigen kaart werken met een private oscam of sbox versie waar de rsamods1,2, data88, 016c block ingevuld worden om met de kaart te kunnen praten in nagra cak7 mode. 

 

Dat ziet er in het begin ongeveer zo uit:

 

2017/06/12 19:40:35 6E0B9F92 h  (reader) Reader-0 [mouse] creating thread for device /dev/ttyUSB0
2017/06/12 19:40:35 55B8484F r   (reader) Reader-0 [mouse] IFD: Opening device /dev/ttyUSB0
2017/06/12 19:40:36 55B8484F r   (reader) Reader-0 [mouse] Buffers readed  0 bytes total time_us 80419
2017/06/12 19:40:36 55B8484F r   (reader) Reader-0 [mouse] IFD: Initializing reader type=5
2017/06/12 19:40:36 55B8484F r   (reader) Reader-0 [mouse] Flush readed byte Nr 1 value 3b time_us 5388
2017/06/12 19:40:36 55B8484F r   (reader) Reader-0 [mouse] Buffers readed  1 bytes total time_us 89844
2017/06/12 19:40:36 55B8484F r   (reader) Reader-0 [mouse] IFD: Device /dev/ttyUSB0 succesfully opened
2017/06/12 19:40:36 55B8484F r   (reader) Reader-0 [mouse] Reader initialized (device=/dev/ttyUSB0, detect=cd, mhz=357, cardmhz=357)
2017/06/12 19:40:37 55B8484F r   (reader) Reader-0 [mouse] card detected
2017/06/12 19:40:37 55B8484F r   (reader) Reader-0 [mouse] cardreader_do_checkhealth: reader->card_status = 1, ret = 0
2017/06/12 19:40:37 55B8484F r   (reader) Reader-0 [mouse] IFD: Activating card
2017/06/12 19:40:37 55B8484F r   (reader) Reader-0 [mouse] IFD: Resetting card
2017/06/12 19:40:37 55B8484F r   (reader) Reader-0 [mouse] IFD: Setting baudrate to 9600
2017/06/12 19:40:37 55B8484F r   (reader) Reader-0 [mouse] Buffers readed  0 bytes total time_us 76804
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] ATR: 3B F7 11 00 01 40 96 70 70 0A 0E 6C B6 D6      <--- SECA ATR
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] Init card protocol T0, FI=1, F=372, D=1, N=1
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] Setting baudrate to 9600 bps
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] IFD: Setting baudrate to 9600
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] Calculated work ETU is 104.20 us reader mhz = 357
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] IFD: Setting right parity
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] Buffers readed  0 bytes total time_us 77332
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] ATR Fsmax is 5 MHz, clocking card to wanted user cardspeed off 3.57 MHz (specified in reader->mhz)
2017/06/12 19:40:38 55B8484F r   (reader) Reader-0 [mouse] IFD: Card successfully activated
2017/06/12 19:40:39 55B8484F r   (reader) Reader-0 [mouse] sha256key create from:
2017/06/12 19:40:39 55B8484F r   (reader)   XX XX XX XX XX XX XX
2017/06/12 19:40:39 55B8484F r   (reader) Reader-0 [mouse] aeskey:
2017/06/12 19:40:39 55B8484F r   (reader)   XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX

2017/06/12 19:40:39 55B8484F r   (reader) Reader-0 [mouse] MERLIN: Scheduling card reset for ATR change
2017/06/12 19:40:39 55B8484F r   (reader) Reader-0 [mouse] found card system nagra3, reset required
2017/06/12 19:40:39 55B8484F r   (reader) Reader-0 [mouse] IFD: Activating card
2017/06/12 19:40:39 55B8484F r   (reader) Reader-0 [mouse] IFD: Resetting card
2017/06/12 19:40:39 55B8484F r   (reader) Reader-0 [mouse] IFD: Setting baudrate to 9600
2017/06/12 19:40:40 55B8484F r   (reader) Reader-0 [mouse] Buffers readed  0 bytes total time_us 77047
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] ATR: 3B FF 95 00 FF 50 80 1C 44 4E 41 53 50 34 30 30 20 52 65 76 49 34 47      <----  NAGRA ATR
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] Init card protocol T0, FI=9, F=512, D=16, N=255
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] Setting baudrate to 111600 bps
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] IFD: Setting baudrate to 111600
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] Calculated work ETU is 8.96 us reader mhz = 357
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] IFD: Setting right parity
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] Buffers readed  0 bytes total time_us 77261
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] ATR Fsmax is 5 MHz, clocking card to wanted user cardspeed off 3.57 MHz (specified in reader->mhz)
2017/06/12 19:40:41 55B8484F r   (reader) Reader-0 [mouse] IFD: Card successfully activated

2017/06/12 19:40:42 55B8484F r   (reader) Reader-0 [mouse] detect nagra merlin card
2017/06/12 19:40:42 55B8484F r   (reader) Reader-0 [mouse] Rom revision: DNASP400 RevI4G
2017/06/12 19:40:42 55B8484F r   (reader) Reader-0 [mouse]  NUID: XXXXXXXX
2017/06/12 19:40:42 55B8484F r   (reader) Reader-0 [mouse]  PROVIDER ID: 01C0
2017/06/12 19:40:42 55B8484F r   (reader) Reader-0 [mouse]  Active CWPK: 01

 

2017/06/12 19:40:46 55B8484F r   (reader) Reader-0 [mouse] ready for requests
2017/06/12 19:40:46 55B8484F r   (reader) Reader-0 [mouse] found card system nagra3
2017/06/12 19:40:46 55B8484F r   (reader) Reader-0 [nagra3] ROM:    D N A S P 4 0 0
2017/06/12 19:40:46 55B8484F r   (reader) Reader-0 [nagra3] REV:    R e v I 4 G
2017/06/12 19:40:46 55B8484F r   (reader) Reader-0 [nagra3] SER:    ############
2017/06/12 19:40:46 55B8484F r   (reader) Reader-0 [nagra3] CAID:   1817
2017/06/12 19:40:46 55B8484F r   (reader) Reader-0 [nagra3] Prv.ID: 00 00 01 C0 (sysid)

 

Zodra de kaart succesvol is omgeschakeld zal deze antwoord geven op de Fox2 ECM's, iets wat de kaart in seca mode absoluut niet kan.  (ook niet toen caid 0100 aan stond)  Echter zijn deze kaart antwoorden versleuteld op basis van een NUID. Om de kaart antwoorden weer terug te halen naar zijn oorspronkelijk vorm is een CWPK nodig die hoort bij de NUID die de kaart op dat moment gebruikt om te versleutelen. Deze CWPK wordt versleuteld (eCWPK)  naar de ontvanger gestuurd, is voor elke ontvanger verschillend en kan zonder moeite gewijzigd worden. Dit alles wordt verwerkt in de CPU van de ontvanger vandaar de naam "Chipset Pairing"

 

Hier een voorbeeld kaart antwoord (fictionele getallen)

 

2017/06/12 19:41:20 55B8484F r   (reader) Reader-0 [nagra3] decrypted answer:
2017/06/12 19:41:20 55B8484F r   (reader)   XX XX XX XX XX XX XX XX XX XX XX XX XX XX FF FF
2017/06/12 19:41:20 55B8484F r   (reader)   FF FF FF FF FF FF FF 08 00 00 AD 5C 3C F0 03 7E
2017/06/12 19:41:20 55B8484F r   (reader)   8A 6F 1E A5 CC CC CC CC CC CC CC CC CC CC CC CC
2017/06/12 19:41:20 55B8484F r   (reader)   CC CC CC CC 99 78 77 FB 0E 8E 04 1C CC CC CC CC
2017/06/12 19:41:20 55B8484F r   (reader)   CC CC CC CC CC CC CC CC CC CC CC CC 03 F0 00 70
2017/06/12 19:41:20 55B8484F r   (reader)   CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC
2017/06/12 19:41:20 55B8484F r   (reader)   CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC
2017/06/12 19:41:20 55B8484F r   (reader)   CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC
2017/06/12 19:41:20 55B8484F r   (reader)   CC CC CC CC CC CC CC CC CC CC CC CC CC 80 00 00
2017/06/12 19:41:20 55B8484F r   (reader)   00 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC
2017/06/12 19:41:20 55B8484F r   (reader)   CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC

 

Voorbeeld Versleutelde CW           :  3C F0 03 7E 8A 6F 1E A5 99 78 77 FB 0E 8E 04 1C

 

Voorbeeld plain CWPK (3deskey)  :  01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16

 

Voorbeeld Plain CW                       :  D2 06 C9 A1 F5 CB 9D 5D AE 37 B5 9A EC 12 42 40

 

Byte 4,8,12 en 16 zijn de checksums

 

Byte 1+2+3=4    etc
 

D2 + 06 + C9 = (1)A1 dus checksum klopt en CW is in dit voorbeeld correct.

 

Let op:  Alle informatie/kennis hier is publiekelijk te verzamelen behalve private softcams/patches. De juiste sleutel sets en hoe daar aan te komen, daar zit de echte uitdaging en simpele oplossingen bestaan niet.

17 juni 2017 aangepast door Codx

[drz]

chapeau!

Maarre, het lijkt mij nu wel genoeg zo.