Editing Talk:Communication Processor
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
| Latest revision | Your text | ||
| Line 8: | Line 8: | ||
update.bin = v1.0.4c2_TMU510_u.bin - first 32 bytes (IV + Hash) | update.bin = v1.0.4c2_TMU510_u.bin - first 32 bytes (IV + Hash) | ||
{{keyboard|content= | {{keyboard|content=openssl enc -aes-256-cbc -d -K E8ED2B817207B70C5DF9090507AF2A8982967620D692B92A59231638402DF13F -iv 737973317347595DFB853B7B4A28105D -in update.bin -out update.tar.gz | ||
}} | |||
<br /> | |||
<br /> | |||
<br /> | |||
Output: | Output: | ||
<pre> | <pre> | ||
| Line 22: | Line 26: | ||
-Mathieulh | -Mathieulh | ||
Is the keys/algo for syscon public? | |||
---- | ---- | ||
| Line 27: | Line 33: | ||
Thanks, | Thanks, | ||
{{keyboard|content= | {{keyboard|content=openssl enc -aes-256-cbc -d -K E8ED2B817207B70C5DF9090507AF2A8982967620D692B92A59231638402DF13F -iv FB306DA62E530EB13FB9D0EF8615060A -in reftool_cp_133.bin -out reftool_cp_133.tar.gz | ||
}} | |||
works. (I should learn reading ;)) | works. (I should learn reading ;)) | ||
| Line 34: | Line 41: | ||
== Extra Information == | == Extra Information == | ||
I would like to add that it's much easier to interact with the System Controller from the Communication Processor shell considering that Syscon on Reference tool does not require any authentication or encryption of the packets sent to it and you do get real time replies, Syscon on those units also allow many more commands than on consumer systems (even after using AUTH1/AUTH2), this can be rather useful should you want syscon to jump to your code (Syscon is powered by an ARM7TDMI (ARMv4) CPU) by performing a packet overflow. | I would like to add that it's much easier to interact with the System Controller from the Communication Processor shell considering that Syscon on Reference tool does not require any authentication or encryption of the packets sent to it and you do get real time replies, Syscon on those units also allow many more commands than on consumer systems (even after using AUTH1/AUTH2), this can be rather useful should you want syscon to jump to your code (Syscon is powered by an ARM7TDMI (ARMv4) CPU running eCos) by performing a packet overflow. | ||
* Because Syscon's firmware is fully overwritten on a DECR-1000, it is trivial to downgrade its firmware if you are connected to the CP's Shell. (There is actually a script on the CP rom that does just this, all you have to do is to comment the version check) (patched update_syscon.pl: [[http://pastebin.com/ZMxvTxwL]]) | * Because Syscon's firmware is fully overwritten on a DECR-1000, it is trivial to downgrade its firmware if you are connected to the CP's Shell. (There is actually a script on the CP rom that does just this, all you have to do is to comment the version check) (patched update_syscon.pl: [[http://pastebin.com/ZMxvTxwL]]) | ||
The Communication Processor can also talk to the southbridge. | The Communication Processor can also talk to the southbridge. | ||