Pages: [1]
Author Topic: EDC16U1 eeprom reading CAN.  (Read 2722 times)
666tdi
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 12


« on: February 12, 2022, 02:22:16 PM »

Hi,

I've got 03G906016JK ECU for testing purposes, I'm able to log CAN traffic during flash read, in that log I'm able see seed key response and then reading data from flash.
Reading eeprom can be done with the same TP2.0 commands and in the same security mode or it is completely different?
Its SK algo for this (old) ECU known?

I know that there are factory made tools for that purpose but this is more like an educational project.

Thanks.
Logged
H2Deetoo
Sr. Member
****

Karma: +26/-1
Offline Offline

Posts: 257


« Reply #1 on: February 13, 2022, 03:43:51 PM »

Hi,


From my experience the whole address range can be read using the same seed/key algo and same commands.
However I haven't a complete eeprom dumped mapped in the address range, only parts scattered in different areas.

So I'm interested in this as well, to find out if there is an easy way to read the whole eeprom by OBD.
Feel free to contact me by PM.


Rgs H2Deetoo
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.012 seconds with 16 queries. (Pretty URLs adds 0s, 0q)