Thanks to mrtoolate and others extracting Keys from Viaccess cards i will start with Basic commands CA A4 00 00 00 Change to DF Dedicated File also called Master File or ISSUER. the card will Replay: 90 00 : OK CA A4 02 00 00 Change to next EF (Elementary Files) or supported Provider. the card will ...

Thanks to onuno How to make an AU (AutoUpdate) Card You need: 1 Working MK (00,01,04), SA or/and UA 2 AU hex-file 3 Editor for that file 4 A Card and programmer for it. Follow that path: 1. Open AU-hex (eeprom-hex) with editor 2. Choose Provider -if there aren’t, add provider ID, add provider name 3...

Thanks to 11 Creation & Management of a MOSC Viac * * Necessary materials: A Pc (I believe that you have that) A Phœnix interface A card off viaccess Necessary software: -Letitbe 5.6 -ViaFMBeta 1.06 This doc is composed of the following Chapters: I - Extraction of keys of a card off II ...

General info about the FunCard -How can I get a FunCard and a programmer? There are really two choices here. First you can decide to build it yourself. All the information you need is available for download on http://www.funcard.net./ Alternatively you can decide to buy ready made cards and programm...

Thanks to JBLASTER Active Logging This is when you wish to have the logger emulating a smartcard by having the PC software talking to the decoder. In this mode you can then take a log of the communication. Passive Logging Now in this mode the logger does not do any talking at all, as instead it only...

With many thanx to Dicky Sometimes when you download files to load through your programmer, you will find them with a .bin rather than .hex extension. Bin files represent programming data in its purest form. Looked at in text, they will appear only as long lines of '0' and '1'. The everyday numbers ...

Thanks to Bo6017 Hex files are a computer programmer's shorthand - in essence, a way to write what would be very large streams of data in binary format within a very much smaller amount of space. Counting to 20 in hex, looks like this: 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, F, 10, 11, 12, 13, ...

Thanks to LANES PPUA: The PPUA or Program Provider User Address is a 4 byte long code, composed of 2 separate codes. The first 3 bytes of the PPUA are called the Shared Address, the last byte of the PPUA is the Customer Word Pointer. The PPUA is used to identify and address cards. Shared Address: Th...

Thanx to wolfman LOG OF INIT AND ECM DIALOGUE IN VIACCESS BETWEEN CAM AND CARD With thanx to wolfman This FAQ explains in small details the init dialogue between the card and a CAM and the ECM dialog that follows. After a reset and an ATR (Answer To Reset) sent by the card. The Cam is ready to start...

Thanx to Wolfman Processing ECM is done in two steps (like with any system I guess): 1) the cam sends the full ECM to the card and ask it to decrypt it 2) the cam then ask the card to send back the results So in a log you have: Incoming ECM Instruction CA 88 00 08 21 E2 03 2C E4 21 EA 10 B7 EC A6 C1...

Thanks to onuno! Administration key - a special "master key" by which the other keys are encrypted. ASIC - an "application specific IC". Any IC (integrated chip) that is made especially for an application, is called "an ASIC". There are application specific chips in phone cards, in wrist watches, an...

Still Thanks goes to Gonijn DPSC: DPSC is short for Digital Pirate Satellite Card. These cards are sold with working keys. Prices can be up to several hundreds of Euros for multi provider cards. Usually these cards contain a sort of timing routine which ensures that the cards are disabled after a ce...

Thanks to Gonijn! ACS number: This is the version number of the cards software. There are several different software versions: 1.2, 1.4, 1.6 en 3.82, 3.83. Versions 1.4 and 1.6 are almost identical. Alphacrypt: The Irdeto successor, decodes both Irdeto and Betacrypt. Asciiserial: The number that ide...

DES_Round=4 ********** (L)=4F 2A BE FD (R)=15 F7 05 5E Shift Key=3B 2F C2 74 06 E8 32 PC2= 39 38 27 3A 31 2C 08 10 R(0)=C1 R1=18 03 3E 2E 20 0A 2B 3D Key Xor R1=21 3B 19 14 11 26 23 2D R2=F5 C8 55 B8 R3= 2A 85 E7 5B L xor R3=65 AF 59 A6 new R=65 AF 59 A6 DES_Round=5 ********** (L)=15 F7 05 5E (R)=65...

Substitution or S-Boxes ************************* We now XOR one block of R1 with one block of key we prepared earlier, Each of these blocks is used to locate an entry in one of the eight tables below, called Substitution or S-Boxes. Substitution Box 1 E0 00 40 F0 D0 70 10 40 20 E0 F0 20 B0 D0 80 10...