ecw:dcw determination except SKY Germany cards

[gallesio]

could you help me, where can i see this data? thank you

 

[Eicher16ps]

Can you write me an PM? I don't see the button in your profile to do it...
Anyway, just set your debug level on 6 and search for the ins7423 cmd at the boot of your card. Look at the fourth byte and the last one, if the fourth byte is 02 it's DES/3DES encryption. The last byte shows you the card revision, if that is 01 it's definitely DES if you card is not in AES mode. Revision 1 cards doesnt have the ability to overcrypt with 3DES

 

[gallesio]

as I'm new, I can't send PM

Spoiler

2020/10/08 16:51:24 528523F3 r (reader) 590 [videoguard2] Reader initialized (device=0, detect=cd, mhz=500, cardmhz=500)
2020/10/08 16:51:24 528523F3 r (reader) 590 [videoguard2] PCSC was opened with handle: 1564526918
2020/10/08 16:51:24 528523F3 r (reader) 590 [videoguard2] card detected
2020/10/08 16:51:24 528523F3 r (reader) 590 [videoguard2] cardreader_do_checkhealth: reader->card_status = 1, ret = 0
2020/10/08 16:51:24 528523F3 r (reader) 590 [pcsc] ATR: 3F FD 13 25 02 50 80 0F 33 B0 08 FF FF 4A 50 90 00 00 47 4C 01
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] passed history check
2020/10/08 16:51:25 528523F3 r TA1 = 13
2020/10/08 16:51:25 528523F3 r FI = 01
2020/10/08 16:51:25 528523F3 r TA1 = 12
2020/10/08 16:51:25 528523F3 r FI = 01
2020/10/08 16:51:25 528523F3 r TA1 = 13
2020/10/08 16:51:25 528523F3 r FI = 01
2020/10/08 16:51:25 528523F3 r TA1 = 13
2020/10/08 16:51:25 528523F3 r FI = 01
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] type: VideoGuard Sky Brasil GL39 (0907), baseyear: 2004
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 74 01 80 01
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) A0 90 00
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 74 01 00 A0
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 01 9E 27 01 D0 02 FF 02 D0 04 01 01 D0 06 01 03
2020/10/08 16:51:25 528523F3 r (reader) D0 0E FF 02 D0 12 FF 02 D0 18 0C 01 D0 1A 08 03
2020/10/08 16:51:25 528523F3 r (reader) D0 1E 09 03 D0 2C FF 02 D0 2E FF 00 D0 32 01 01
2020/10/08 16:51:25 528523F3 r (reader) D0 36 FF 02 D0 38 02 03 D0 40 FF 00 D0 42 FF 00
2020/10/08 16:51:25 528523F3 r (reader) D0 44 FF 00 D0 46 FF 00 D0 4A FF 00 D0 4C 09 01
2020/10/08 16:51:25 528523F3 r (reader) D0 4E 05 03 D0 50 FF 02 D0 54 2D 03 D0 56 FF 02
2020/10/08 16:51:25 528523F3 r (reader) D0 58 4A 03 D0 5A FF 02 D0 5C 04 03 D0 5E FF 02
2020/10/08 16:51:25 528523F3 r (reader) D0 70 FF 02 D0 72 FF 02 D0 74 FF 02 D0 76 FF 02
2020/10/08 16:51:25 528523F3 r (reader) D0 78 18 03 D0 B4 40 01 D0 BC 50 03 D0 BE 10 03
2020/10/08 16:51:25 528523F3 r (reader) D0 C0 FF 02 D0 C2 18 01 D0 D2 FF 02 D0 D4 FF 00
2020/10/08 16:51:25 528523F3 r (reader) 90 00
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 02 00 00 08
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 47 4C 54 56 03 00 4C 38 90 00
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Card type: GLTV
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Rom version: 30L8
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 74 04 80 01
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 17 90 00
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 74 04 00 17
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 33 15 00 00 00 00 02 00 00 00 00 00 00 00 00 00
2020/10/08 16:51:25 528523F3 r (reader) 00 00 00 00 00 00 00 90 00
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 74 16 80 01
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 04 90 00
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 74 16 00 04
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 26 02 3F 00 90 00
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 4C 00 00 09 14 84 CB 0B 03 00 00 00 44
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 90 20
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 74 03 80 01
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 04 90 20
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 74 03 00 04
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 03 02 51 F6 90 20
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 58 00 00 4A
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 15 48 25 02 1C 78 63 03 2B 2B 9F 0C 01 00 9D 00
2020/10/08 16:51:25 528523F3 r (reader) 00 00 01 03 C8 44 B4 00 09 07 02 1C 78 63 FF FF
2020/10/08 16:51:25 528523F3 r (reader) FF FF 02 1C 78 00 FF FF FF 00 00 00 00 00 00 00
2020/10/08 16:51:25 528523F3 r (reader) 00 00 08 00 00 00 01 30 37 36 00 02 42 52 51 30
2020/10/08 16:51:25 528523F3 r (reader) 30 31 30 30 B6 06 1D E3 00 00 90 20
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] FuseByte: 25
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Region Code: BRQ00100
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Country Code: 076
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 B4 00 00 40 23 E4 B9 5B 52 88 48 38 D4 D5 49
2020/10/08 16:51:25 528523F3 r (reader) 14 79 68 A6 13 07 1C 4E D4 BF 16 22 06 57 86 57
2020/10/08 16:51:25 528523F3 r (reader) E2 2E F7 51 CA C4 A1 55 29 23 06 23 2E 31 4F F6
2020/10/08 16:51:25 528523F3 r (reader) FE 8A 5C E6 79 42 27 A5 19 F7 A6 C4 E7 97 B8 EC
2020/10/08 16:51:25 528523F3 r (reader) 82 EA 01 00 01
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) 91 20
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D0 BC 00 00 50
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) C8 F6 18 9B EF AB D2 5D 17 96 4D F0 D3 AD 0D 8C
2020/10/08 16:51:25 528523F3 r (reader) 64 4C 95 03 B2 62 43 23 55 E5 6F 56 31 F2 97 B5
2020/10/08 16:51:25 528523F3 r (reader) 33 9B 03 DF B0 D3 ED 7D DE 4B 21 7D FF 0B C5 48
2020/10/08 16:51:25 528523F3 r (reader) 95 FC ED B7 5E EF B9 C7 A3 E7 43 3F 5C 51 DD 00
2020/10/08 16:51:25 528523F3 r (reader) 0F 52 75 90 64 F7 F0 BB AB F5 A7 1A 9C E6 DA 6F
2020/10/08 16:51:25 528523F3 r (reader) 91 20
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D3 BE 00 00 20
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:25 528523F3 r (reader) F7 E2 61 55 7E 91 EC F1 FB B7 DF A1 C3 83 84 71
2020/10/08 16:51:25 528523F3 r (reader) 6C 6F 05 9F F5 E5 70 30 E1 E9 56 4D D9 3A E6 7E
2020/10/08 16:51:25 528523F3 r (reader) 91 20
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] Decrypted payload
2020/10/08 16:51:25 528523F3 r (reader) C8 D3 5E B3 09 38 19 A8 C2 B2 87 6F 29 7B B5 58
2020/10/08 16:51:25 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:25 528523F3 r (reader) D1 58 00 00 4A
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 15 48 25 02 1C 78 63 03 EF 24 2F 3C 01 00 9D 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 01 03 C8 44 B4 00 09 07 02 1C 78 63 FF FF
2020/10/08 16:51:26 528523F3 r (reader) FF FF 02 1C 78 00 FF FF FF 00 00 00 00 00 00 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 08 00 00 00 01 30 37 36 00 02 42 52 51 30
2020/10/08 16:51:26 528523F3 r (reader) 30 31 30 30 B6 06 1D E3 00 00 91 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 4C 00 00 09 14 84 CB 0B 83 00 00 00 44
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 74 11 80 01
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 06 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 74 11 00 06
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 23 04 00 00 00 00 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] Pincode read: 0000
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 74 0E 80 01
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 03 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 74 0E 00 03
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 3C 01 0F 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] PCB settings: F 90 20 0
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] type: VideoGuard Sky Brasil GL39 (0907), caid: 0907
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] serial: XXXXXXXX, BoxID: XXXXXXXX, baseyear: 2004
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] ready for requests
2020/10/08 16:51:26 528523F3 r (reader) 590 [pcsc] found card system videoguard2
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] THIS WAS A SUCCESSFUL START ATTEMPT No 1 out of max allotted of 1
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] card detected
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] type: VideoGuard Sky Brasil GL39 (0907)
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 00 7F 02
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 00 04 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] ------------------------------------------------------------------
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |- class -|-- tier --|----- valid to ------|--- package name ----|
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] +---------+----------+---------------------+---------------------+
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 00 80 01
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 25 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 00 00 25
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 39 23 68 00 90 00 00 00 00 00 00 40 02 04 80 84
2020/10/08 16:51:26 528523F3 r (reader) 74 80 00 02 00 01 00 04 00 00 01 00 00 00 00 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 5B 9E 00 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0003 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0005 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0006 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0014 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0017 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 004e --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0051 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 005a --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 006a --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0067 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 006f --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0072 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0074 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0075 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0076 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 007f --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0089 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 0098 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 00aa --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 00 ---|-- 00c0 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 01 80 01
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 25 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 01 00 25
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 39 23 00 00 00 00 00 00 40 10 00 00 00 00 00 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 5B 7E 00 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 01 ---|-- 013c --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 01 ---|-- 0136 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 02 80 01
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 25 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 02 00 25
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 39 23 00 00 02 80 80 04 00 00 00 00 00 00 20 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 5B 7E 00 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 02 ---|-- 0211 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 02 ---|-- 021f --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 02 ---|-- 022a --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 02 ---|-- 0227 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] |-- 02 ---|-- 0265 --| 2011/08/30-00:04:32 |
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 03 80 01
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 25 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:26 528523F3 r (reader) D1 70 03 00 25
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:26 528523F3 r (reader) 39 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2020/10/08 16:51:26 528523F3 r (reader) 00 00 00 00 00 90 20
2020/10/08 16:51:26 528523F3 r (reader) 590 [videoguard2] ------------------------------------------------------from-ins70--
2020/10/08 16:51:27 528523F3 r (reader) 590 [videoguard2] cardreader_do_checkhealth: reader->card_status = 2, ret = 1
2020/10/08 16:51:30 528523F3 r (-) -- Skipped 3 duplicated log lines --
2020/10/08 16:51:30 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:30 528523F3 r (reader) D1 5C 00 00 04
2020/10/08 16:51:30 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:30 528523F3 r (reader) 00 00 00 00 90 20
2020/10/08 16:51:31 528523F3 r (reader) 590 [videoguard2] cardreader_do_checkhealth: reader->card_status = 2, ret = 1
2020/10/08 16:51:42 528523F3 r (-) -- Skipped 11 duplicated log lines --
2020/10/08 16:51:42 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:42 528523F3 r (reader) D1 5C 00 00 04
2020/10/08 16:51:42 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:42 528523F3 r (reader) 00 00 00 00 90 20
2020/10/08 16:51:43 528523F3 r (reader) 590 [videoguard2] cardreader_do_checkhealth: reader->card_status = 2, ret = 1
2020/10/08 16:51:54 528523F3 r (-) -- Skipped 11 duplicated log lines --
2020/10/08 16:51:54 528523F3 r (reader) 590 [videoguard2] write to cardreader
2020/10/08 16:51:54 528523F3 r (reader) D1 5C 00 00 04
2020/10/08 16:51:54 528523F3 r (reader) 590 [videoguard2] Answer from cardreader:
2020/10/08 16:51:54 528523F3 r (reader) 00 00 00 00 90 20
2020/10/08 16:51:55 528523F3 r (reader) 590 [videoguard2] cardreader_do_checkhealth: reader->card_status = 2, ret = 1

 

[Eicher16ps]

What is your Oscam version? Is the ins7e set? There is no D3 74 23 00 26 INS command present in the log, but beside that, the card is in the right mode. You can see that at the 90 20 status return, so I think there is no need for sending the ins7423 to the card I think. Just try to bruteforce your eCW - dCW pair, it should be single DES or something else, the return of the ins54 looks different compared to other NDS cards.

 

[gallesio]

can you tell me how to get eCW - dCW to do brute force?

 

[Eicher16ps]

Do you have access to a n-line/c-line with an open 0907 card? If not you need to bruteforce the decrypted CW with a short record of maybe 10 seconds of any encrypted tv channel where this card is used. If you have the n-line/c-line, it's just some simple steps to get the eCW dCW pair and bruteforce with "hashcat".

 

[gallesio]

I have I have Caid 0907 card opening some channels and others is black screen

 

[Eicher16ps]

So for that card you already have your k1 overcrypt key? If yes, use this card to generate the eCW - dCW pair. Just bind both in one oscam, check the "ECM Doublecheck" option, set the debug on level 6 and grep the eCW from the card where the k1 overcrypt key is missing and the according dCW from the card that is clearing the channels.
I'm not pretty sure, but I think there are some tutorials how to do that on the internet in english, in german here in the forum.

 

[gallesio]

I don't know if my card caid 0907 sky, uses k1, because 5 days ago it stopped some channels from working, I noticed a difference in the ECM of the channels, I'll send it to you to check if you know it could be. thank you

Normal opening channel:

Spoiler

2020/10/02 20:59:55 7A2350EE c (ecm) get cw for ecm:

2020/10/02 20:59:55 7A2350EE c (ecm) 80 70 50 00 00 01 0E 59 03 07 74 08 9F A6 2B D5

2020/10/02 20:59:55 7A2350EE c (ecm) 20 01 00 00 54 3D 7F 0C 08 07 6A B2 87 1C FF 83

2020/10/02 20:59:55 7A2350EE c (ecm) 2E DC 00 00 90 2D C0 03 8B 01 D8 71 23 95 9A 27

2020/10/02 20:59:55 7A2350EE c (ecm) CD C9 D6 9C BB 39 41 D5 1D C7 45 23 9F 0D C7 55

2020/10/02 20:59:55 7A2350EE c (ecm) 87 86 DB 2B FA EC FC 15 CF A9 1D 8A 5B DD F0 38

2020/10/02 20:59:55 7A2350EE c (ecm) 97 0C E3

2020/10/02 20:59:55 60DF92B1 p (reader) casc ecm (SKY_OSCAM):

2020/10/02 20:59:55 60DF92B1 p (reader) 80 70 50 00 00 01 0E 59 03 07 74 08 9F A6 2B D5

2020/10/02 20:59:55 60DF92B1 p (reader) 20 01 00 00 54 3D 7F 0C 08 07 6A B2 87 1C FF 83

2020/10/02 20:59:55 60DF92B1 p (reader) 2E DC 00 00 90 2D C0 03 8B 01 D8 71 23 95 9A 27

2020/10/02 20:59:55 60DF92B1 p (reader) CD C9 D6 9C BB 39 41 D5 1D C7 45 23 9F 0D C7 55

2020/10/02 20:59:55 60DF92B1 p (reader) 87 86 DB 2B FA EC FC 15 CF A9 1D 8A 5B DD F0 38

2020/10/02 20:59:55 60DF92B1 p (reader) 97 0C E3

2020/10/02 20:59:55 7A2350EE c (ecm) dvbapi (0907@000000/089F/00E3/53:0A06D8A9C8B7EDA07FD73DAC484FB227): found (263 ms) by SKY - GNT

2020/10/02 20:59:55 7A2350EE c (ecm) cw:

2020/10/02 20:59:55 7A2350EE c (ecm) 43 33 CA 40 D7 BA EC 7D 00 00 00 00 00 00 00 00







Channels giving problem:



2020/10/02 22:07:09 5CDAD0DA r ecm:

2020/10/02 22:07:09 5CDAD0DA r 80 70 80 00 7C 01 11 59 03 08 DA 0A FB 12 35 D5

2020/10/02 22:07:09 5CDAD0DA r 21 20 01 00 01 2C 00 E0 66 7F 0C 08 07 C5 CA 87

2020/10/02 22:07:09 5CDAD0DA r A1 55 D5 C1 39 00 00 90 56 C0 03 32 06 6E 82 D0

2020/10/02 22:07:09 5CDAD0DA r 28 CA 2E 46 C1 15 70 73 50 9D D3 BA F5 DD 73 B9

2020/10/02 22:07:09 5CDAD0DA r D2 6B A1 22 03 50 F5 E4 79 53 7D D2 71 08 45 45

2020/10/02 22:07:09 5CDAD0DA r D0 B8 15 2F A6 59 2E BE D2 1B 55 CA A6 41 F4 EA

2020/10/02 22:07:09 5CDAD0DA r 60 C8 20 8B 90 40 07 83 CC 69 58 87 FA 9D 6E 66

2020/10/02 22:07:09 5CDAD0DA r AE F0 91 F8 39 AB B6 D6 8A 1A 45 C5 87 58 3E 03

2020/10/02 22:07:09 5CDAD0DA r E1 05 E9

2020/10/02 22:07:09 5CDAD0DA r (reader) NDS1 [videoguard2] Not a valid ecm

2020/10/02 22:07:09 1DB7B8F5 c (ecm) dvbapi (0907@000000/0AFB/0AFB/83:1054D10BA2D19DB3E14EB06334A59B3C:0F06000000000000): rejected (10 ms) by NDS1 - RECORD TV (Invalid ecm type for card)

2020/10/02 22:07:09 1DB7B8F5 c (ecm) cw:

2020/10/02 22:07:09 1DB7B8F5 c (ecm) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


I put this
/*
if((memcmp(&(er->ecm[3]), valid_ecm, sizeof(valid_ecm)) != 0))
{
rdr_log(reader, "Not a valid ecm");
return E_CORRUPT;
}
*/

• 2020/10/05 20:20:34 4DE9A30C c (ecm) get cw for ecm:
• 2020/10/05 20:20:34 4DE9A30C c (ecm) 80 70 5F 00 5B 01 11 59 05 BA 85 0B 65 B7 04 D5
• 2020/10/05 20:20:34 4DE9A30C c (ecm) 21 20 01 00 01 2C 00 1E 45 7F 0C 08 07 EB 18 99
• 2020/10/05 20:20:34 4DE9A30C c (ecm) A7 F3 C2 A6 D9 00 00 90 35 C0 03 26 7A F4 D4 41
• 2020/10/05 20:20:34 4DE9A30C c (ecm) C4 C0 84 52 41 62 BD 81 28 3F 21 30 7D FE 83 62
• 2020/10/05 20:20:34 4DE9A30C c (ecm) B4 26 5A 3B 41 49 C8 AE 20 90 A9 6D 65 CF 56 EF
• 2020/10/05 20:20:34 4DE9A30C c (ecm) FD BD F2 89 18 32 07 71 AD 79 54 26 31 42 03 E1
• 2020/10/05 20:20:34 4DE9A30C c (ecm) 05 E9
• 2020/10/05 20:20:34 14D95E5A r (reader) 590 [videoguard2] classD3 ins54: no cw --> Card needs pairing/extra data
• 2020/10/05 20:20:34 14D95E5A r (reader) 590 [videoguard2] classD3 ins54: no cw --> Tier expired
• 2020/10/05 20:20:34 4DE9A30C c (ecm) teste (0907@000000/0B65/0B65/62:4CD3C0804BDD381AC0C87B38F2EF8F20:0F06001020000000): not found (164 ms) by 590
• 2020/10/05 20:20:34 4DE9A30C c (ecm) cw:
• 2020/10/05 20:20:34 4DE9A30C c (ecm) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

 

[Eicher16ps]

iCam is enabled on the not clearing channels, you can see that on the 4th + 5th byte of the ECM: 80 70 80 00 7C . On still clearing channels the descrambler (iCAM) is disabled, to see at the same bytes that are both set to null: 80 70 50 00 00.
So I'm not an expert in that, but there are some guys that already know how to handle that. iCAM is like a CW post-decryption in a specific way where you need the iCAM bytes of the ECM to do that. Maybe AES with a initial vector byte ....? Don't know

 

[gallesio]

por favor alguem pode me ajudar, eu ainda tenho o mesmo problema canais sd sky

como disse um amigo, quando você tiver 00 00 abra os canais

Spoiler

81 70 54 00 00
80 70 54 00 00

não abra

Spoiler

80 70 4F 00 4B
81 70 4F 00 4B

Percebi que todos os canais que não abrem tem hex no final 03 E1 05 E9

Spoiler

2021/04/23 20:11:42 2209040F p (leitor) casc ecm (SKY):
2021/04/23 20:11:42 2209040F p (leitor) 81 70 54 00 00 01 0E 5F 17 91 6F 08 43 E2 7B D5
2021/04/23 20:11:42 2209040F p (leitor) 20 01 00 00 23 41 7F 0C 08 07 92 B2 B4 29 62 3E
2021/04/23 20:11:42 2209040F p (leitor) 67 9D 00 00 90 31 C0 03 D2 91 A3 13 89 0A F9 A8
2021/04/23 20:11:42 2209040F p (leitor) 3C 7B 99 33 95 6D D3 EF 99 65 EA 5A AF 04 7D 48
2021/04/23 20:11:42 2209040F p (leitor) E5 04 15 34 33 17 30 12 84 3B 51 1E CE B7 4F 72
2021/04/23 20:11:42 2209040F p (leitor) 97 2E 1F 1A C6 F1 9C
2021/04/23 20:11:43 7557AAB9 c (ecm) dvbapi (0907 @ 000000/0843/0843/57: A57B07AB59E9E3BBF1326FBDEE3D443B): encontrado (289 ms) por SKY
2021/04/23 20:11:43 7557AAB9 c (ecm) cw:
2021/04/23 20:11:43 7557AAB9 c (ecm) 00 00 00 00 00 00 00 00 AE 28 78 4E 59 DA 9D D0

Spoiler

2021/04/23 20:12:20 2209040F p (leitor) casc ecm (SKY):
2021/04/23 20:12:20 2209040F p (leitor) 81 70 57 00 53 01 11 5F 17 91 7D 0B 59 27 26 D5
2021/04/23 20:12:20 2209040F p (leitor) 21 20 01 00 01 2C 00 8B 3D 7F 0C 08 07 89 38 5B
2021/04/23 20:12:20 2209040F p (leitor) E2 66 FD A9 BE 00 00 90 2D C0 03 CB AF F7 3B 9D
2021/04/23 20:12:20 2209040F p (leitor) D0 26 6C 0D 30 6B 52 C6 6A EB 8B 71 43 EE 5D 8C
2021/04/23 20:12:20 2209040F p (leitor) C1 12 82 2C FC 03 A6 9C 62 24 27 BA 61 57 BC 73
2021/04/23 20:12:20 2209040F p (leitor) 4F B8 62 18 48 6D 03 E1 05 E9
2021/04/23 20:12:20 7557AAB9 c (ecm) dvbapi (0907 @ 000000 / 0B59 / 0B59 / 5A: DEED3FCB28C71058AA2A66D64F53F363): não encontrado (83 ms) por SKY
2021/04/23 20:12:20 7557AAB9 c (ecm) cw:
2021/04/23 20:12:20 7557AAB9 c (ecm) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

por favor alguem pode me ajudar, eu ainda tenho o mesmo problema canais sd sky

como disse um amigo, quando você tiver 00 00 abra os canais

Spoiler

81 70 54 00 00
80 70 54 00 00

não abra

Spoiler

80 70 4F 00 4B
81 70 4F 00 4B

Percebi que todos os canais que não abrem tem hex no final 03 E1 05 E9

Spoiler

2021/04/23 20:11:42 2209040F p (leitor) casc ecm (SKY):
2021/04/23 20:11:42 2209040F p (leitor) 81 70 54 00 00 01 0E 5F 17 91 6F 08 43 E2 7B D5
2021/04/23 20:11:42 2209040F p (leitor) 20 01 00 00 23 41 7F 0C 08 07 92 B2 B4 29 62 3E
2021/04/23 20:11:42 2209040F p (leitor) 67 9D 00 00 90 31 C0 03 D2 91 A3 13 89 0A F9 A8
2021/04/23 20:11:42 2209040F p (leitor) 3C 7B 99 33 95 6D D3 EF 99 65 EA 5A AF 04 7D 48
2021/04/23 20:11:42 2209040F p (leitor) E5 04 15 34 33 17 30 12 84 3B 51 1E CE B7 4F 72
2021/04/23 20:11:42 2209040F p (leitor) 97 2E 1F 1A C6 F1 9C
2021/04/23 20:11:43 7557AAB9 c (ecm) dvbapi (0907 @ 000000/0843/0843/57: A57B07AB59E9E3BBF1326FBDEE3D443B): encontrado (289 ms) por SKY
2021/04/23 20:11:43 7557AAB9 c (ecm) cw:
2021/04/23 20:11:43 7557AAB9 c (ecm) 00 00 00 00 00 00 00 00 AE 28 78 4E 59 DA 9D D0

Spoiler

2021/04/23 20:12:20 2209040F p (leitor) casc ecm (SKY):
2021/04/23 20:12:20 2209040F p (leitor) 81 70 57 00 53 01 11 5F 17 91 7D 0B 59 27 26 D5
2021/04/23 20:12:20 2209040F p (leitor) 21 20 01 00 01 2C 00 8B 3D 7F 0C 08 07 89 38 5B
2021/04/23 20:12:20 2209040F p (leitor) E2 66 FD A9 BE 00 00 90 2D C0 03 CB AF F7 3B 9D
2021/04/23 20:12:20 2209040F p (leitor) D0 26 6C 0D 30 6B 52 C6 6A EB 8B 71 43 EE 5D 8C
2021/04/23 20:12:20 2209040F p (leitor) C1 12 82 2C FC 03 A6 9C 62 24 27 BA 61 57 BC 73
2021/04/23 20:12:20 2209040F p (leitor) 4F B8 62 18 48 6D 03 E1 05 E9
2021/04/23 20:12:20 7557AAB9 c (ecm) dvbapi (0907 @ 000000 / 0B59 / 0B59 / 5A: DEED3FCB28C71058AA2A66D64F53F363): não encontrado (83 ms) por SKY
2021/04/23 20:12:20 7557AAB9 c (ecm) cw:
2021/04/23 20:12:20 7557AAB9 c (ecm) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

 

[Talimz]

Do you have access to a n-line/c-line with an open 0907 card? If not you need to bruteforce the decrypted CW with a short record of maybe 10 seconds of any encrypted tv channel where this card is used.

Can you post the process for doing this? I have looked everywhere and have not found relevant information.