Pages: [1]
Author Topic: Checksums question. How do I fix the rsa signatures?  (Read 18704 times)
mickeyd1984
Jr. Member
**

Karma: +0/-5
Offline Offline

Posts: 34


« on: July 05, 2016, 03:28:10 PM »


C:\Users\Mike>sum stg3LC-NLS.bin badass.bin
ME7Tool (v1.0.3) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].

Attempting to open firmware file 'stg3LC-NLS.bin'

Step #1: Reading ROM info ..
 Searching for EPK signature...OK
 Searching for ECUID table...OK
 EPK         : '42/1/ME7.5/3/4012.00//F22id/Dst06g/250899/'
 Part Number : '4B0906018P  '
 Engine ID   : '1.8L R4/5VT     '
 SW Version  : '0006'
 HW Number   : '0261206537'
 SW Number   : '1037352750'

Step #2: Reading ROMSYS ..
 Startup section: word[0x008000]+word[0x00FFFE]
 @008038 Add=0x007CD1 CalcAdd=0x007CD1  ADD OK
 Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0x7FFFF
 @00803c Add=0x39E9EF CalcAdd=0x39E9EF  ADD OK
 All param page: word[0x010000]+word[0x01FFFE]
 @01b560 Add=0x00971D CalcAdd=0x00971D  ADD OK

Step #3: Reading RSA signatures ..
 Searching for RSA offset #0...missing
 Searching for RSA offset #1...missing

Step #4: Finding CRC table(s) ..
 Searching for CRC table(s)...OK
 CRC table(s) OK

Step #5: Reading Main Data Checksums ..
 Searching for main data CRC pre block...missing
 Searching for main data CRC/csum blocks...missing
 Falling back to default 512k CRC blocks...OK
 Searching for main data CRC offsets...OK
 Searching for main data checksum offsets...missing
 Main CRCs:
 1) 0x010000-0x013FFF @70000 CRC: DF58D39C CalcCRC: DF58D39C    CRC OK
 2) 0x014300-0x017F67 @70006 CRC: F87A574F CalcCRC: F87A574F    CRC OK
 3) 0x018191-0x01FBFF @7000c CRC: A2119794 CalcCRC: A2119794    CRC OK

Step #6: Reading Main Program Checksums ..
 Searching for main program checksum..OK
 ROM Checksum Block Offset Table @1dfec [16 bytes]:
 1) 0x000000-0x00FBFF CalcChk: 47EFCCC8
    0x00FC00-0x01FFFF CalcChk: 2D3D44A4 CalcCRC: 6C9688A3 SKIPPED
 2) 0x020000-0x07FFFF
    <7ffe0>  Chk: D7F2CB81 CalcChk: D7F2CB81 OK (i)

Step #7: Reading Multipoint Checksum Blocks ..
 Searching for multipoint block descriptor #1...OK
 1) <14224>  0x024000-0x02658D Chk: 0AFD060F CalcChk: 0AFD060F OK
 2) <14234>  0x014000-0x014243 Chk: 008B2FA9 CalcChk: 008B2FA9 OK (i)
 3) <14244>  0xFFFFFFFF-0xFFFFFFFF  END
 Multipoint #1: [2 blocks x <16> = 32 bytes]
 Searching for multipoint block descriptor #2...OK
 1) <1fc00>  0x000000-0x003FFF Chk: 0FA0F5CF Boot: (whitelisted) OK
 2) <1fc10>  0x004000-0x007FFF Chk: 0F4716B3 Boot: (whitelisted) OK
 3) <1fc20>  0x000000-0x003FFF Chk: 0FA0F5CF CalcChk: 0FA0F5CF OK
 4) <1fc30>  0x004000-0x007FFF Chk: 0F4716B3 CalcChk: 0F4716B3 OK
 Multipoint #2: [34 blocks x <16> = 544 bytes]

*** Found 41 checksums in stg3LC-NLS.bin

*** DONE! 0/0 error(s) in stg3LC-NLS.bin corrected in badass.bin! ***

C:\Users\Mike>


Any write up i can follow or any input that concerns the rsa signatures woul be much appreciated 
Logged
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655


« Reply #1 on: July 05, 2016, 03:30:53 PM »

Quote
Step #3: Reading RSA signatures ..
 Searching for RSA offset #0...missing
 Searching for RSA offset #1...missing
Logged
mickeyd1984
Jr. Member
**

Karma: +0/-5
Offline Offline

Posts: 34


« Reply #2 on: July 05, 2016, 10:12:09 PM »

Kompressed i am confused as to why you quoted things i already knew? I am lost as to come about fixing that issue. If you have a link or writeup of some sort I would be forever in Debt to you. I am trying to learn how to fix this issue.
Logged
vwaudiguy
Hero Member
*****

Karma: +53/-37
Offline Offline

Posts: 2024



« Reply #3 on: July 05, 2016, 10:15:15 PM »

I'm going to assume he meant since the signatures are missing, you don't need to worry about fixing them. Maybe your original question is why are they missing?
Logged

"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
mickeyd1984
Jr. Member
**

Karma: +0/-5
Offline Offline

Posts: 34


« Reply #4 on: July 05, 2016, 10:24:51 PM »

After doing more research i think he was telling me that too. I guess some ecus have them and some dont? I am working on a 018p atw ecu me7.5 i am curious if the bastard child ecu has them. they dont show up in the stock file either. 
« Last Edit: July 05, 2016, 10:28:08 PM by mickeyd1984 » Logged
mickeyd1984
Jr. Member
**

Karma: +0/-5
Offline Offline

Posts: 34


« Reply #5 on: July 05, 2016, 11:36:44 PM »

Anyone wanna have a look to see if this files cs are correct. I have tried with everything i have access to with no luck.
Logged
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655


« Reply #6 on: July 06, 2016, 09:16:44 AM »

badass.bin!
Logged
mickeyd1984
Jr. Member
**

Karma: +0/-5
Offline Offline

Posts: 34


« Reply #7 on: July 06, 2016, 10:15:32 AM »

KOmpressed I am still waiting on my LC-1 wideband to finish the file. I know there are many errors. I am just playing with LC and NLS. I am still learning and logging with my stock file. Feel to make fun of it all you want lol its a work in progress.
Logged
SB_GLI
Hero Member
*****

Karma: +115/-10
Offline Offline

Posts: 1022


« Reply #8 on: July 06, 2016, 11:44:38 AM »

that's very many loads   Smiley
Logged
carsey
Sr. Member
****

Karma: +7/-4
Offline Offline

Posts: 401


« Reply #9 on: July 06, 2016, 12:26:19 PM »

Not all bad file depending how the rest of it is set up.  Would work with open loop boost control.

Also interested in patching a RSA signature.  I edited a file off a ECU, but fails checksums on RSA signature in ME7check - winols shows them being ok.
Logged
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655


« Reply #10 on: July 06, 2016, 03:40:34 PM »

KOmpressed I am still waiting on my LC-1 wideband to finish the file. I know there are many errors. I am just playing with LC and NLS. I am still learning and logging with my stock file. Feel to make fun of it all you want lol its a work in progress.

im not making fun, but why would you do that?
Logged
mickeyd1984
Jr. Member
**

Karma: +0/-5
Offline Offline

Posts: 34


« Reply #11 on: July 06, 2016, 05:07:25 PM »

KOmpressed, I was bored and was just seeing how it would affect the car. I ran a file like this except without the LC and NLS today. it ran ok but with out my wideband i dont trust it LOL dont really want to blow up my car.
Logged
nyet
Administrator
Hero Member
*****

Karma: +604/-166
Offline Offline

Posts: 12232


WWW
« Reply #12 on: August 23, 2016, 10:47:38 PM »

Not all bad file depending how the rest of it is set up.  Would work with open loop boost control.

Also interested in patching a RSA signature.  I edited a file off a ECU, but fails checksums on RSA signature in ME7check - winols shows them being ok.

And you didn't bother trying to correct them with ME7Sum yet?
Logged

ME7.1 tuning guide (READ FIRST)
ECUx Plot
ME7Sum checksum checker/corrrector for ME7.x

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience.
em.Euro.R18
Full Member
***

Karma: +4/-5
Offline Offline

Posts: 219


« Reply #13 on: September 26, 2017, 11:12:29 AM »

I'm sorry for bumping this thread but K0mpresd you made me literally drop to my knees in laughter with that IRL post. Are we attempting to send this car going to the moon?
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.023 seconds with 18 queries. (Pretty URLs adds 0s, 0q)