IRDETO2 Smartcards

[agarol]

There is really no point to all of this because while the update keys remain a secret the contents of the command remain encrypted.

On the other hand, if somebody can disclose the keys, then things become interesting.

ag

[marc_phuket]

can you actually tell us what 3rd party software you use to get the providers details of this gamma card. i plenty to my availbility for use and am happy to share the information to all who ask for it..

i just need some guidance in obtaining the details of the original gamma.
this is mainly for UBC and Astro in malaysia and thailand

thanks if anybody can assist

[gw1]

That's like saying "I have plenty of blank DVDs, I just need some guidance in where I can download the latest movies from. Then I'll be happy to sell them to all who ask for it."

Obtaining working provider keys is complex and costly. Those who do so prize their work and use encryption to ensure they're usable only by those who pay.

Quite aside from the ethics of piracy, you seem to have forgotten that to make money you need more than just motivation and demand: you need something to sell. You're asking people to give it to you, and that just won't happen!

The only time working keys for commercial pay tv services become available for free is in the dying days of a cryptosystem. They spread like wildfire and within a very short time one of two things happens: either the provider goes broke and stops broadcasting, or the provider changes their cryptosystem to prevent the theft. Either way every person who paid for the pirated keys is left out of pocket. If you spent money on Gamma cards that are now useless you should take that as a lesson.

[Bitman]

There's still people selling cards for up to $300; WTF they want them for ?

[gw1]

Some services around the world are still being pirated. But a lot of the sales are scams: sellers offloading useless stock, or victims trying to recover their money by tricking newbies. Gullible newbies are always plentiful.

Don't make the mistake of thinking price or number of sales has anything to do with usability or value. For every person who wins the lottery there are millions who don't, and no matter how many times they've lost in the past they still keep handing over the money. Everyone wants to believe they're lucky when they find a "working" file on the internet. They want to believe they're fortunate in discovering the secret door that only a privileged few know about. They dream of getting channels for free, of getting rich from what they've learned. They want to believe so badly that their greed blinds them to the truth - that luck has nothing to do with it. Do they feel lucky when send them four aces in the mail?

[Hillsbysa]

Would someone care to decipher the following Select EMK then ?

C36C6CCC00000030EADA0E10FF379BE4A60E19B24378FB9B76 2A4C4E7DE057AC796767393A9FB517F8DC6F4ED7F3FA016BB6 EB3D8B0C5626

Make-up of the above string is:

C3hshshs00000030xxxxxxxxxxk0k0k0kok0k0k0kk0k0k0kk0 k0k0k0k0k1k1k1k1k1k1k1k1k1k1k1k1k1k1k1k1prprprm1m1 m1m1m1m1m1m1


hs = hsn (3 bytes)
k0 = group key 0 (16 bytes)
k1 = group key 1 (16 bytes)
pr = provID (3 bytes)
m1 = MAC (8 bytes)

Of course you need to decrypt the string to see the actual data (except for the HSN)....

[gado]

Is a provider group fixed to the one HSN ?

[agarol]

No

In fact if you look at the stream carefully you might notice that v5 cards that have previously been receiving 0030 card EMMs but haven't had an update for some months are being sent a new 0030 EMM which puts them into another provider group than they used to be in. And if you look even more closely, you might see that there are multiple cards in the same group, and presumably these cards continue to give pictures otherwise the subscribers would be beating an angry path to Austar HQ.
So clearly multiple cards can be assigned to the same group.

ag

[fasulye]

In fact if you look at the stream carefully you might notice that v5 cards that have previously been receiving 0030 card EMMs but haven't had an update for some months are being sent a new 0030 EMM which puts them into another provider group than they used to be in. And if you look even more closely, you might see that there are multiple cards in the same group.

This is just the normal operation of the system. There a many reasons why the provider could choose to group HSNs to particular provider groups. It allows for easier ChID management. Subscribers that are on the same package could be all moved to the one provider group or groups and there access managed through the one 03 or in bulk 02 update. It reduces the stream traffic and the likely hood of missed updates.

[Hillsbysa]

...The DES MAC is calculated by prepending an 8 octet confounder to the plaintext, performing a DES CBC-mode encryption on the result using the key and an initialization vector of zero, taking the last block of the ciphertext, prepending the same confounder and encrypting the pair using DES in cipher-block-chaining (CBC) mode using a a variant of the key, where the variant is computed by eXclusive-ORing the key

Anyone know what that means in plain simple English ?

[BillyGoat]

Argh the "eXclusive-ORing trick".

[admin]

Argh the "eXclusive-ORing trick".

Yes , thats the third time I have fallen for it this month.

[AceR]

To XOR or not to XOR..... that is the question.

[fudda]

Argh the "eXclusive-ORing trick".

My ORing has been giving me a lot of serious trouble lately, like GW1. But Pox hasn't, so the two aren't necessarily connected.

BTW, I deliberately misspelled Pox, so the spider can't get me.