Pages: [1]
Author Topic: Encryption Levels  (Read 3454 times)
TheDECODER
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 22


« on: October 19, 2021, 02:20:08 PM »

Working on flashing via UDS

Through the UDS I see Encryption 1 and Encryption 2 being used.

How can I find out what encryption these are?
Logged
TheDECODER
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 22


« Reply #1 on: October 19, 2021, 02:25:34 PM »

Working on flashing via UDS

Through the UDS I see Encryption 1 and Encryption 2 being used.

How can I find out what encryption these are?


Also Compression 1 and Compression 2
Logged
d3irb
Full Member
***

Karma: +131/-1
Offline Offline

Posts: 185


« Reply #2 on: October 19, 2021, 03:22:50 PM »

These are not the same across different control modules from different vendors. Your best bet is to search for specifically that control module, post about what you are actually trying to do (what control module? what are you trying to flash?), or disassemble the firmware for that control module and take apart the UDS routines.

Here are some examples:

DQ250-MQB ("encryption 1, compression 1"):

Encryption 1 is a rolling byte substitution cipher, Compression 1 is LZSS.

http://nefariousmotorsports.com/forum/index.php?topic=6583.msg148045#msg148045

Simos12 / Simos18 ("encryption A, compression A"):

Encryption A is AES with a fixed key/IV per ECU "project" (SC8, SCG, etc.), Compression A is again LZSS.

http://nefariousmotorsports.com/forum/index.php?topic=10364.msg142085#msg142085

MED9.1:

Fixed-key XOR: http://nefariousmotorsports.com/forum/index.php?topic=4983.msg51798#msg51798

In most Bosch control modules, I believe "encryption 1" is usually fixed-table/fixed-key XOR and "encryption A" is usually AES, but as you can tell, this is not a hard rule.
Logged
TheDECODER
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 22


« Reply #3 on: October 20, 2021, 08:24:09 AM »

These are not the same across different control modules from different vendors. Your best bet is to search for specifically that control module, post about what you are actually trying to do (what control module? what are you trying to flash?), or disassemble the firmware for that control module and take apart the UDS routines.

My apologies. Should have given more info.

The UDS shows:

UDS Request
Service: Request data download (from PC to ECU)
Compression Type: 1


The ECU label is a Continental Siemens VDO and the control module is a TCU labeled as VGSNAG.


Also have another ECU I am working on, Audi MED17 which using a Compression A and Encryption 2

Appreciate the assistance! Smiley
« Last Edit: October 21, 2021, 10:05:36 AM by TheDECODER » Logged
prj
Hero Member
*****

Karma: +903/-420
Offline Offline

Posts: 5787


« Reply #4 on: October 20, 2021, 09:32:09 AM »

You realize that on most control units there is a signature check right?
So you can only flash signed software OR you need a bypass.
Logged

PM's will not be answered, so don't even try.
Log your car properly.
TheDECODER
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 22


« Reply #5 on: October 20, 2021, 11:50:28 AM »

You realize that on most control units there is a signature check right?
So you can only flash signed software OR you need a bypass.

Yes I have the signature as well Smiley
« Last Edit: October 20, 2021, 02:45:00 PM by TheDECODER » Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.016 seconds with 18 queries. (Pretty URLs adds 0s, 0q)