Please make sure you read Rules! and DO NOT upload/post any illegal softwares or Pirated Material , Thank you for understanding :)
  1. Martech

  2. ATM - Balkan

    atm balkan file service
  3. Kess Ktag

  4. MOD FILES

  5. Enigma Tool

  6. ECU CHIPS

  7. NBE Files



Post Reply 
BMW CIC PATCHER v2 - GENERATE YOUR OWN RETROFIT FSC CERTS
04-04-2017, 22:21 PM
Post: #11
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(04-04-2017 22:15 PM)intel123 Wrote:  No need to match it with vin in any way as its already matched by signing fsc with fscs private

Okay, thank you! I understand that update code will be different from code issued by BMW for that VIN, but it's not important for cars which weren't retrofitted with CIC. Also we can use lifetime code to forget forever about update codes.
Find all posts by this user
Quote this message in a reply
05-04-2017, 11:36 AM
Post: #12
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
If you RSA decrypt the extension data ID 12, you will see it contains a MD5 sum of the FSC header to make sure the FSC has not been modified.
Find all posts by this user
Quote this message in a reply
 Thanks given by: intel123
05-04-2017, 11:39 AM
Post: #13
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017 11:36 AM)aknight720 Wrote:  If you RSA decrypt the extension data ID 12, you will see it contains a MD5 sum of the FSC header to make sure the FSC has not been modified.

Is it updated automatically by FStool or E-SYS as CIC accepts signed cert without modifying it ? Ill check that out and thanks for the info.

Shoot to thrill, play to kill
Visit this user's website Find all posts by this user
Quote this message in a reply
05-04-2017, 11:39 AM (This post was last modified: 05-04-2017 11:41 AM by inotherwords.)
Post: #14
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017 11:36 AM)aknight720 Wrote:  If you RSA decrypt the extension data ID 12, you will see it contains a MD5 sum of the FSC header to make sure the FSC has not been modified.

Hmm, it's very interesting. BTW I don't have decryption key for this RSA. Is there any way to decrypt it without a key?
Find all posts by this user
Quote this message in a reply
05-04-2017, 11:41 AM (This post was last modified: 05-04-2017 12:03 PM by intel123.)
Post: #15
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017 11:39 AM)inotherwords Wrote:  
(05-04-2017 11:36 AM)aknight720 Wrote:  If you RSA decrypt the extension data ID 12, you will see it contains a MD5 sum of the FSC header to make sure the FSC has not been modified.

Hmm, it's very interesting. BTW I don't have decryption key for this RSA.

Ill perform some testing today

Shoot to thrill, play to kill
Visit this user's website Find all posts by this user
Quote this message in a reply
 Thanks given by: inotherwords
05-04-2017, 12:14 PM
Post: #16
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017 11:41 AM)intel123 Wrote:  Ill perform some testing today

Here is a set out nice example:-

   

   

   
Find all posts by this user
Quote this message in a reply
 Thanks given by: intel123 , inotherwords , Czozen
05-04-2017, 12:29 PM
Post: #17
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017 12:14 PM)aknight720 Wrote:  Here is a set out nice example:-
...

ok so another key in dump smile1 np, thanks.

Shoot to thrill, play to kill
Visit this user's website Find all posts by this user
Quote this message in a reply
05-04-2017, 22:51 PM
Post: #18
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
From my testing with self generated FSC sets for NBT, it doesn't care what is contained in the extension data. I fill it with 128 random bytes and NBT, at least, is happy to use the FSC.

I don't have any experience with CIC (yet).
Find all posts by this user
Quote this message in a reply
 Thanks given by: MOCKING_BIRD
06-04-2017, 06:59 AM
Post: #19
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(05-04-2017 22:51 PM)pshoey Wrote:  From my testing with self generated FSC sets for NBT, it doesn't care what is contained in the extension data. I fill it with 128 random bytes and NBT, at least, is happy to use the FSC.

I don't have any experience with CIC (yet).

CIC acts the same it accepts cert but i want to get to the bottom of this as hack wont be complete without this element. I got enough pointers and ill see today which combination is in question here. Worst thing is and it came up my mind only later that from beginning ive chosen wrong path. I should of just modify function which checks vin against the cas 0x380 and let it accept any certificate like with emulator on i just had alot problems with sh4 asm, but things will look much better on NBT since x86 running ELFs

Shoot to thrill, play to kill
Visit this user's website Find all posts by this user
Quote this message in a reply
06-04-2017, 14:55 PM
Post: #20
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
Making NBT accept a custom set of FSCs is trivial - just patch in the new root certificate and voila. But I agree, X86 makes it a little easier.

And yes, for a complete solution, understanding what the classic FSC extension data is used for and generating genuine data is an interesting intellectual challenge - if only I didn't need to sleep!!

As the extension data appears to be ignored by the HU, and @aknight720 says it is RSA encrypted, maybe the data is signed by the sig cert - which I have not found a use for previously. I'm not sure how @aknight720 has decrypted the data - presumably the private key is in the HU binary?? That would mean the sig cert is not used (unless the private key for that is in the binary, which I doubt). Of course the sig cert public key can be used to verify the extention data has not been tampered with but then the MD5 hash inside isn't a great deal of use!

I'm sure it will all become clear.
Find all posts by this user
Quote this message in a reply
 Thanks given by: intel123
Post Reply 


Bookmarks

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Bmw e60 nbt evo dab retrofit in ru-999 7 311 Yesterday 10:52 AM
Last Post: khile
  BMW F10 (03/2012) NBT EVO retrofit SLI/FCW issues in larshutten 6 214 15-02-2018 07:30 AM
Last Post: Thorsten
XZBMW F10 NBT retrofit in muskatas 13 933 14-02-2018 15:15 PM
Last Post: Jartsa
  F20 SpeedLimitInfo retrofit? in Kamcio 6 238 14-02-2018 05:52 AM
Last Post: Thorsten
XZBMW NBT E60 retrofit issues in Stian.k 2 178 13-02-2018 11:11 AM
Last Post: Stian.k
XZBMW F32 adaptive LED headlights (552A) retrofit - TMS LIN BUS Error in bmw335coding 44 4,056 11-02-2018 19:23 PM
Last Post: dzik1981
XZBMW Problem with VIN/Mileage 6WB Retrofit F11 2012/01 in Loliceman 12 1,623 11-02-2018 16:01 PM
Last Post: Jartsa
XZBMW ASD retrofit Bmw e60…???? in ru-999 0 119 07-02-2018 20:56 PM
Last Post: ru-999
  F10 6WA KOMBI won't syncronise properly with EVO id5 retrofit in TurboDriver 3 308 30-01-2018 23:37 PM
Last Post: TurboDriver
XZBMW [Q] Car Play retrofit in gerazzo 1 335 29-01-2018 15:00 PM
Last Post: shawnsheridan

Forum Jump:


User(s) browsing this thread:
windinc, 2 Guest(s)

Return to TopReturn to Content