AW: Gammacard Problem mit DM800
also meine meinung ist dass nur 2 grunde sind:
1- die file , aber im moment dass sie in vantage wieder läuft ohne nichts zum tun ,glaube ich das nicht der fall ist
2- man muss noch was eintragen in cccam confg. das die uberhaupt AU macht
PS-meine freunde in roumänische forum haben das gefunden , weiss jemanden was das ist ´´AUF DEUTSCH´´?
How to create Gamma Update, (Commands)
'' 020100DKLNMMMMMMMMUSUL PAYLOAD CC
02 = Gamma update PDU
01 = CLA
00 = P1
DK = Index to 16byte Gamma update 3DES Key.
LN = Length of Message
MM = 8 Byte DES MAC
US = Update Selector (what to update)
For GSMK US = 01
For PMSK US = 02
For IV_PAD US = 03
For GMASK US = 04
For PMASK US = 05
For KEK US = 06
For COCO US = 08
For HSN US = 09
For ExiKey US = 0B
For AxiKey US = 0C
For ProviderID US = 10
For GroupKey US = 12
For ProductKey US = 13
For OS Erase US = 20
FOR OS Update US = 21
UL = Length of Update (for example for HSN UL = 03, for GMSK UL = 10, etc...)
PAYLOAD is the Update
CC = Message CRC or Checksum. Simply XOR message with 0x3F
OK to have multiple updates in one command.
Example:
020100DKLNMMMMMMMM0903HNHNHN0803COCOCO1003PIPIPICC
This command will update HSN (HN), Coco (CO) and Provider ID (
PI) in one go.
The DES MAC is calculated by prepending an 8 octet confounder to the plaintext, performing a DES CBC-mode encryption on the result using the key and an initialization vector of
zero, taking the last block of the ciphertext, prepending the same confounder and encrypting the pair using DES in cipher-block-chaining (CBC) mode using a a variant of the key, where the variant is computed by eXclusive-ORing the key
The message after LN is encrypted using the Triple DES mode CBC until the CC using 16 byte key in index DK . ''
__________________
