NefMoto

Technical => Reverse Engineering => Topic started by: Marty_ on November 05, 2024, 11:19:40 AM



Title: Need help with Seed key algorithm for 27 61 RSA sign
Post by: Marty_ on November 05, 2024, 11:19:40 AM
Hi all,

I'm trying some stuff with a BMW 7DCT300 TCU as a hobby/learning project and I'm stuck at an seed key routine.
Does someone have C/C#/C++/Python code for this TCU so I can see how this routine should work?
It seems to be a 16 Byte seed and a 128 Byte RSA sign.

The UDS seed security request is 0x07E1 0x02 0x27 0x61.
The UDS sign/key sending is 0x7E1 0x10 0x82 0x27 0x61 and 128byte key.

It seems that the RSA sign can be forged.

Can anyone help me with this.
I have a couple of seed/key combinations that worked which I can provide.

Thanks! Smile

Kind regards,
Marty_


Title: Re: Need help with Seed key algorithm for 27 61 RSA sign
Post by: prj on November 05, 2024, 01:20:25 PM
Sir, this is "Reverse Engineering", not give me free code and make me a sandwich.

How about doing some actual reverse engineering or posting this in paid requests?