Hey all
Well here's my update. I know its been a longer than I said but I was kinnda waiting for others to chime in on the discussion. I did monitor the thread but I saw only silence. I am really looking for some developers along with some mathematician cryptographic knowledge. Seems no one is serious.
Further findings, there are different levels of security for sure. I was able to send different seed and key request and I did notice the many secure levels.
I went to the dealer and connected to the TIS Techstream tool to gather some logs in a FRS and on my bench ecu. I was able to gather a couple of seed and keys. But the weekends are very busy there and my time during the week is very slim.
Here is a small list I was able to gather while I was there.
SEEDs - KEYs
00000000 - A4 71 2F 96
00000001 - A2 31 4E EE
00000002 - B0 BC 54 F7
00000003 - 38 FF 61 28
00000004 - 76 41 5F E0
00000005 - 0F 47 F4 83
00000006 - FE 96 D8 29
00000007 - 0A EE C5 A8
00000008 - 8C 05 F8 95
00000009 - 26 1D FA 8F
0000000A - 20 75 C5 D7
Its a 32bit encryption so here are the possible number of combinations 4294967295. Yea that's a lot. Algorithm cracking time
. I did get the algorithm recreation quoted by a couple of creditable US companies and the average price is 8500 bukcs. Yea that's also a lot of money. Last on my list.
The Seed request always changes when called. Which makes it so tough to actually get a crack at memory address inside the ECU. The list above shows a sequence list which I was able to acquire.
Attach is a picture of my bench setup
Took me about 4 hours to get it working on the bench without frying the ecu. I am a very caution with electronics especially since these ecu's are hard to find...
Well lets keep this going. Also Lets Go Heat!!