TataSky not working

[ohmza]

I have never seen anyone who have succeeded extracting k1 from STi7111 for NDS use STTKDMA. For other encryption systems, “yes” there are tons of people have succeeded on using STTKDMA to extract CWPK but for NDS just simply “no”.

 

[srt473]

if you have cpu acces UART TELNET then you can get unique K1

 

[sega25]

this STB, the UART port is blocked for Telnet use. There is no Ethernet port. It has a 20-pin JTAG, but it only reads the IDCODE: 2D43B041 STI7111 and does not give access to flash. I do have an RT809H programmer, but I don't have the BGA64 adapter. Is there any method to extract K1 by glitching the UART port?

 

[srt473]

upload u-boot and test till open uart

 

[sega25]

Hello friend, do you have a U-Boot file that can open the UART port? I have an RT809H programmer and I have also ordered a BGA64 adapter. I have dumped its flash: MX29GL320EH@BGA64.BIN. I also have all the required tools. Removing and reinstalling the flash is not difficult for me — I can easily read, write, and solder it back. Can you help me in opening the UART port?

 

[sega25]

Hi Friends,


I have a TATA SKY India STB with the STi7111 chipset, model DSI715TAT. As I mentioned earlier, its UART port is blocked and JTAG is also blocked.


I have an RT809H programmer and a BGA64 adapter, which I used to read the 4MB NOR flash (MX29GA320EH@BGA64). After reading the flash, I could not find U-Boot in the dump file. It may be encrypted.


If anyone has a U-Boot image with the UART port enabled/open, please share it. I can easily solder and desolder the flash IC.


I am also sharing a picture of the board.

Sie müssen registriert sein, um Links zu sehen

Sie müssen registriert sein, um Links zu sehen

Sie müssen registriert sein, um Links zu sehen

Flash DUMP

Sie müssen registriert sein, um Links zu sehen

 

[naveenvc]

flash file not available on the link provided

 

[srt473]

which file NAND NOR

 

[naveenvc]

Flash DUMP download link provided by @sega25

 

[sega25]

Nor Flash is 4 MB, but there is no U-Boot inside it

Download

Sie müssen registriert sein, um Links zu sehen

 

[srt473]

you must knows your encrypted data from root app