Pages: 1 2 [3] 4 5
Author Topic: remove tprot from protected vag ecus?  (Read 62111 times)
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655


« Reply #30 on: November 14, 2012, 01:49:07 PM »

like this?
tprot v7.

Logged
matchew
Hero Member
*****

Karma: +47/-22
Offline Offline

Posts: 503


« Reply #31 on: November 14, 2012, 02:47:24 PM »

OBD read will not give you that section.
Logged
Rick
Hero Member
*****

Karma: +63/-4
Offline Offline

Posts: 704


« Reply #32 on: November 14, 2012, 03:42:04 PM »

MED17 ECU's first read should always be boot mode.  OBD is always a gamble.

Rick
Logged
matchew
Hero Member
*****

Karma: +47/-22
Offline Offline

Posts: 503


« Reply #33 on: November 14, 2012, 04:38:01 PM »

Agreed
Logged
dera
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 8


« Reply #34 on: December 01, 2012, 11:10:42 AM »

Not true. There are a few "easy" ways to detect TP level, but this requires manual checksum/RSA verification.

Most transverse MED17's are fine over OBD, and with correct tools, OBD is not a gamble, just needs programming the original file back over OBD and car runs fine after that.

The part where TPROT info is stored can be read over OBD, thats not the issue. I can now flash a couple of TP software versions over OBD with tuned software, but to get it actually into commercial distribution will take a long time, unless someone at Bosch is going to take an early retirement package.

Logged
technic
Full Member
***

Karma: +18/-5
Offline Offline

Posts: 227


« Reply #35 on: June 07, 2013, 12:25:18 AM »

Digging up this old topic.
What is the TPROT password reading that is done by the tools?

I understand it reads the password *doh* but from where and is it a part of RSA calculation or is it just an password to get programming access to the ECU?

And what is the difference between TP7,8,9,10,11 etc? The CAN read protocol I assume is the same?
Logged
Rick
Hero Member
*****

Karma: +63/-4
Offline Offline

Posts: 704


« Reply #36 on: June 07, 2013, 01:58:17 AM »

Protocol is the same.  The password is to access the bootloader.

Rick
Logged
technic
Full Member
***

Karma: +18/-5
Offline Offline

Posts: 227


« Reply #37 on: June 12, 2013, 02:58:43 AM »

Ok, and how can te password be read by the tools?
Logged
Rick
Hero Member
*****

Karma: +63/-4
Offline Offline

Posts: 704


« Reply #38 on: June 12, 2013, 07:56:45 AM »

The tool needs to have an option to read the password, which is done over OBD when the ECU is not in bootmode.

Rick
Logged
technic
Full Member
***

Karma: +18/-5
Offline Offline

Posts: 227


« Reply #39 on: June 13, 2013, 09:22:56 AM »

And this is possible due to a flaw in the software i suppose? Would be stupid having a documented possibility to read out the password and then use it for security access Smiley
Logged
Rick
Hero Member
*****

Karma: +63/-4
Offline Offline

Posts: 704


« Reply #40 on: June 13, 2013, 04:14:46 PM »

Not a flaw as such, just the password wasn't encrypted. On the very latest ECU's it is, which is why for example we can't tune a BMW F30.

Rick
Logged
technic
Full Member
***

Karma: +18/-5
Offline Offline

Posts: 227


« Reply #41 on: June 15, 2013, 12:36:45 PM »

yes, its the same with Volvo 2012 and onward. And this password is calculated from VIN or something I guess, because it is different for each car.
Logged
fredrik_a
Full Member
***

Karma: +25/-0
Offline Offline

Posts: 221


« Reply #42 on: June 15, 2013, 02:14:20 PM »

yes, its the same with Volvo 2012 and onward.

http://en.bsr.se/about/volvo-pin/
Logged
Rick
Hero Member
*****

Karma: +63/-4
Offline Offline

Posts: 704


« Reply #43 on: June 15, 2013, 02:24:47 PM »

It will be cracked soon enough.  There already a few cars out there running tunes as a test.  I've got an F30 so am very keen...
Logged
technic
Full Member
***

Karma: +18/-5
Offline Offline

Posts: 227


« Reply #44 on: September 23, 2013, 03:27:14 AM »

Is there a solution for these ecus yet? I haven't found any serious information about progress or if it's already available.
Logged
Pages: 1 2 [3] 4 5
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.028 seconds with 17 queries. (Pretty URLs adds 0.001s, 0q)