Results 1 to 9 of 9

Thread: EMM analysis Nagra 2(still in progress)

  1. #1
    Junior Member
    Join Date
    30-11-2007
    Posts
    13
    Uploads
    0

    EMM analysis Nagra 2(still in progress)

    Hello!
    I'm trying to analyse emm recieved from skystar and vplug.
    I write from many tutorial small program (in Mingw with OpenSSL library).
    Calculation hash function & decriprion with 3DES isn't in this program implemented.
    Only one I get some usefull result from recieved EMM packet (9.7.2009) (I think that EMM Idea was changed and don't understand which key to select ... 820018, 920018,820098,920092, susccess was with KEY select 820018).
    In my program are still more commented part of code and some bugs (when I try brute force it always down aftter few minutes).
    Zip contains source code and exe. To use exe You need to edit file input.txt, used are first 3 rows (1. is EMM key, 2. is EMM RSA, 3. is part of recieved EMM). In source code is line //#define vypis, if You delete //, then program show results step by step.

    EDIT: Today I recieve neu packet, which give me successfull result (of course result need to do XOR 4.byte with FD & XOR 7.byte with 02)
    EMM packet was
    EMM-G=82 70 6C 00 00 00 00 00 04 65 20 11 82 00 18 2B C2 07 1C DE 54 8E 13 D1 4C 34 81 BF 68 5E 7B 76 9D 54 69 DB 0C DA 61 50 95 19 0F 55 91 67 D8 36 FD 63 98 83 13 B3 BA DD 74 43 D3 1D 8E 47 8C 5D 25 B8 A5 7D C3 70 D7 E7 5E 5A 1E F9 04 9A F2 BE 48 84 40 DB CC 17 EB 72 A5 EA 98 59 46 20 D4 30 19 4F A5 14 D9 0C B0 56 D9 6B 5B 34 4C 40 05
    Result:
    29245366234A9178201113DB00011A337789BA8A9BCD605400 230AC62F70A12125F9B723A604B72BB725B726A607CD3844B6 2D43B8D1B7D1B62DB8D4B7D486A632CC9BE183211142001006 08001012DC2EE33392A35B3139A483C9454B460000
    You can see calculated key: 12DC2EE33392A35B3139A483C9454B46
    Right key is: 12DC2E1E3392A15B3139A483C9454B46

  2. #2
    Junior Member
    Join Date
    30-11-2007
    Posts
    13
    Uploads
    0

    Semi AU

    Hello, here is semi-AU for skystar(for D*giT*).
    All needed steps:
    1. catch EMM packets (in vplug click on CA-Info tools - Utils - Log all reseived N2-Emms)
    2. after few minutes copy contents of Debug output into vstup.log
    3. run uprava.exe (it create small auxiliary files) (if is vystup5.log empty, then catch EMM again)
    4. run DecryptEMM.exe (it create softcam.key)
    5. copy softcam.key into folder whitch contains vplug
    6. delete v_keys.db

    (it is possible to see key in softcam.key and insert it to vplug directly, there are many possibility to insert it to vplug)

  3. #3
    Junior Member
    Join Date
    30-11-2007
    Posts
    13
    Uploads
    0

    Re: EMM analysis Nagra 2(still in progress)

    Here is vplug.dll (patched version 2.4.2).
    It's include patch for DIgiTV AU (all other nagra2 aren't working).

  4. #4
    Junior Member
    Join Date
    30-11-2007
    Posts
    13
    Uploads
    0

    Re: EMM analysis Nagra 2(still in progress)

    Yesterday was made change in EMU.
    Now is working this new patch.
    Replace original 2 files with this new(ROM110.bin into folder AUBins):

  5. #5
    Junior Member
    Join Date
    30-11-2007
    Posts
    13
    Uploads
    0

    Re: EMM analysis Nagra 2(still in progress)

    AU in vplug is down again, they use different algo for next key change (but under same AC 6 revison).

  6. #6

    Re: EMM analysis Nagra 2(still in progress)

    old thread

    but I am looking for software to decrypt N2 with EMM-G

  7. #7
    New Member
    Join Date
    01-02-2014
    Posts
    1
    Uploads
    0

    Re: EMM analysis Nagra 2(still in progress)

    Are you looking for studio n2-s3 other what exactly?

    Do you have a dump from your smartcard?

  8. #8

    Re: EMM analysis Nagra 2(still in progress)

    I dont know what I need

    I just know that you can decrypt Nagra2 key from EMM-G


    i am talking about sw!ss cablec*m UPC (DVB-C)

    I think I should be able to get card dump

  9. #9

    Re: EMM analysis Nagra 2(still in progress)

    i have card dump with all keys...

    someone help me with decrypting EMM-G please

Similar Threads

  1. Update NDS and TNS link for ‘super box’ TV analysis
    By <<ELVIS>> in forum Daily Satellite TV News
    Replies: 0
    Last Post: 04-09-2009, 08:30:37
  2. New Ziggo and UPC appeal against market analysis
    By <<ELVIS>> in forum Daily Satellite TV News
    Replies: 0
    Last Post: 20-04-2009, 09:56:17
  3. Netherlands Performance Analysis
    By LILOUMEK in forum English (UK)
    Replies: 0
    Last Post: 18-06-2008, 09:23:10
  4. Replies: 0
    Last Post: 25-05-2008, 11:36:50
  5. Qualifying analysis - and then there were three!
    By <<ELVIS>> in forum English (UK)
    Replies: 0
    Last Post: 06-04-2008, 12:07:13

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •