Unfortunately we do not accept new members for free, Now Registration cost 30€, if you are interesting Send Email to [email protected]

BMW CIC PATCHER v2 - GENERATE YOUR OWN RETROFIT FSC CERTS
04-04-2017, 22:21 PM,
Post: #11
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(04-04-2017, 22:15 PM)intel123 Wrote:  No need to match it with vin in any way as its already matched by signing fsc with fscs private

Okay, thank you! I understand that update code will be different from code issued by BMW for that VIN, but it's not important for cars which weren't retrofitted with CIC. Also we can use lifetime code to forget forever about update codes.
Quote this message in a reply
05-04-2017, 11:36 AM,
Post: #12
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
If you RSA decrypt the extension data ID 12, you will see it contains a MD5 sum of the FSC header to make sure the FSC has not been modified.
Quote this message in a reply
[+] 3 users say Thank You to aknight720 for this post
05-04-2017, 11:39 AM,
Post: #13
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017, 11:36 AM)aknight720 Wrote:  If you RSA decrypt the extension data ID 12, you will see it contains a MD5 sum of the FSC header to make sure the FSC has not been modified.

Is it updated automatically by FStool or E-SYS as CIC accepts signed cert without modifying it ? Ill check that out and thanks for the info.

[Image: 18.08.44-17.09.18.gif]
BlackBOX Sistemi, Automotive   
Visit this user's website
Quote this message in a reply
05-04-2017, 11:39 AM, (This post was last modified: 05-04-2017, 11:41 AM by inotherwords.)
Post: #14
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017, 11:36 AM)aknight720 Wrote:  If you RSA decrypt the extension data ID 12, you will see it contains a MD5 sum of the FSC header to make sure the FSC has not been modified.

Hmm, it's very interesting. BTW I don't have decryption key for this RSA. Is there any way to decrypt it without a key?
Quote this message in a reply
05-04-2017, 11:41 AM, (This post was last modified: 05-04-2017, 12:03 PM by intel123.)
Post: #15
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017, 11:39 AM)inotherwords Wrote:  
(05-04-2017, 11:36 AM)aknight720 Wrote:  If you RSA decrypt the extension data ID 12, you will see it contains a MD5 sum of the FSC header to make sure the FSC has not been modified.

Hmm, it's very interesting. BTW I don't have decryption key for this RSA.

Ill perform some testing today

[Image: 18.08.44-17.09.18.gif]
BlackBOX Sistemi, Automotive   
Visit this user's website
Quote this message in a reply
[+] 2 users say Thank You to intel123 for this post
05-04-2017, 12:14 PM,
Post: #16
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017, 11:41 AM)intel123 Wrote:  Ill perform some testing today

Here is a set out nice example:-

   

   

   
Quote this message in a reply
[+] 6 users say Thank You to aknight720 for this post
05-04-2017, 12:29 PM,
Post: #17
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017, 12:14 PM)aknight720 Wrote:  Here is a set out nice example:-
...

ok so another key in dump smile np, thanks.

[Image: 18.08.44-17.09.18.gif]
BlackBOX Sistemi, Automotive   
Visit this user's website
Quote this message in a reply
05-04-2017, 22:51 PM,
Post: #18
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
From my testing with self generated FSC sets for NBT, it doesn't care what is contained in the extension data. I fill it with 128 random bytes and NBT, at least, is happy to use the FSC.

I don't have any experience with CIC (yet).

Email: [email protected]  Skype: [email protected]
HU Engineering Tool
MGU Engineering Tool - now with field update mode via Feature Installer.
Coding 2.0
Quote this message in a reply
[+] 2 users say Thank You to pshoey for this post
06-04-2017, 06:59 AM,
Post: #19
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017, 22:51 PM)pshoey Wrote:  From my testing with self generated FSC sets for NBT, it doesn't care what is contained in the extension data. I fill it with 128 random bytes and NBT, at least, is happy to use the FSC.

I don't have any experience with CIC (yet).

CIC acts the same it accepts cert but i want to get to the bottom of this as hack wont be complete without this element. I got enough pointers and ill see today which combination is in question here. Worst thing is and it came up my mind only later that from beginning ive chosen wrong path. I should of just modify function which checks vin against the cas 0x380 and let it accept any certificate like with emulator on i just had alot problems with sh4 asm, but things will look much better on NBT since x86 running ELFs

[Image: 18.08.44-17.09.18.gif]
BlackBOX Sistemi, Automotive   
Visit this user's website
Quote this message in a reply
06-04-2017, 14:55 PM,
Post: #20
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
Making NBT accept a custom set of FSCs is trivial - just patch in the new root certificate and voila. But I agree, X86 makes it a little easier.

And yes, for a complete solution, understanding what the classic FSC extension data is used for and generating genuine data is an interesting intellectual challenge - if only I didn't need to sleep!!

As the extension data appears to be ignored by the HU, and @aknight720 says it is RSA encrypted, maybe the data is signed by the sig cert - which I have not found a use for previously. I'm not sure how @aknight720 has decrypted the data - presumably the private key is in the HU binary?? That would mean the sig cert is not used (unless the private key for that is in the binary, which I doubt). Of course the sig cert public key can be used to verify the extention data has not been tampered with but then the MD5 hash inside isn't a great deal of use!

I'm sure it will all become clear.

Email: [email protected]  Skype: [email protected]
HU Engineering Tool
MGU Engineering Tool - now with field update mode via Feature Installer.
Coding 2.0
Quote this message in a reply
[+] 2 users say Thank You to pshoey for this post


Possibly Related Threads…
Thread Author Replies Views Last Post
XZBMW BMW F34 LHD to RHD heated seats retrofit coding Schnitzer 2 9 4 minutes ago
Last Post: Schnitzer
  G01 trailer hitch retrofit plugs kklobo 0 25 Yesterday, 21:50 PM
Last Post: kklobo
  Car Systems / Custom Retrofit Garage ENBT Adapter Ulsmak 33 1,461 27-03-2024, 00:17 AM
Last Post: painsage
  G30 LCI Headlights retrofit: High Beam Laser light locking active tcp443 19 3,215 26-03-2024, 21:25 PM
Last Post: Satia
  G05 KAFAS4 enable code missing after Retrofit ACC 6ergsm 19 2,306 26-03-2024, 12:33 PM
Last Post: Hodgsonp
  F15 6WB Retrofit VIN Error moreply 4 182 25-03-2024, 07:24 AM
Last Post: RuleNormaliai
XZBMW bmw e70 cic fsc patcher help alexandru.so 3 115 25-03-2024, 01:00 AM
Last Post: Bakica
  MGU G30 retrofit , PDC does not show laso 3 175 24-03-2024, 14:35 PM
Last Post: laso
  Problem Retrofit electrified steering column on the G31 LCI smercki 12 341 22-03-2024, 12:55 PM
Last Post: Node
XZBMW BMW F01 Pre-LCI NBT EVO Retrofit Satia 3 217 21-03-2024, 12:53 PM
Last Post: Satia

Forum Jump:


Users browsing this thread:
pr7em0, 4 Guest(s)

Return to TopReturn to Content