Moto BP not working, testing possible about dsdcc HOT 31 CLOSED

When you run LouisErigHerve version of dsd with argument -DMRPrintAmbeVoiceSampleHex you can see ambe frames.
On the image you can see that "15 0B 44 D5 61 AA" is repeating, so it is probably a silence frame.
When you xor it with "F8 01 A9 9F 8C E0" you get "ED 0A ED 4A ED 4A" and "ED 4A" is key id 70.

from dsdcc.

Finding the key is very easy. You just need to find ambe frame that repeats the most times(it will be the silence frame) and xor it with F8 01 A9 9F 8C E0. Output will be your key. Unfortunately ambe frames in dsdcc are stored in some wired way. It is like 2 bits of ambe in 1 byte. So i don't know how to implement decryption to dsdcc.

from dsdcc.

Key is 70 (ED 4A)

from dsdcc.

The BP Key ID is 128. The BP Key Number, try: 4D89.

Edit. Or try these:

Key 128:
x4\xD\x8\x9
4D 09 4D 89 4D 89 0 or
\x4D\x09\x4D\x89\x4D\x89\x00

[email protected]

from dsdcc.

I will not make any effort myself towards supporting BP. However if you make a pull request that fixes this issue I will be glad to accept it.

from dsdcc.

Can somebody send sample BP wav file?

from dsdcc.

from dsdcc.

from dsdcc.

It is like 2 bits of ambe in 1 byte.

Maybe you are looking at the raw C4FM data that indeed is on 2 bits (4 states).

from dsdcc.

from dsdcc.

Finding the key is very easy. You just need to find ambe frame that repeats the most times(it will be the silence frame) and xor it with F8 01 A9 9F 8C E0. Output will be your key. Unfortunately ambe frames in dsdcc are stored in some wired way. It is like 2 bits of ambe in 1 byte. So i don't know how to implement decryption to dsdcc.

Ok. So I've investigated what you said, I still can't discover the key. From playing the raw audio, could you direct me from there with instructions? What am I looking for, how do I identify a silent frame... and then could you explain the conversion to XOR. Thank you.

from dsdcc.

from dsdcc.

hello everyone ..... is there any possibility to compile in linus and be able to use it in windows dsdcc ??? thanks

from dsdcc.

does it work with simplex systems ?

from dsdcc.

it doesn't decrypt in any way ..... and I don't know how to call it the program ... here I mean input and output ..... Thanks

from dsdcc.

from dsdcc.

from dsdcc.

I tried to compile it in cygwin and use it in windows but it doesn't work with those input and output settings ..... or can't it be used as much as in linux? Thanks

from dsdcc.

from dsdcc.

from dsdcc.

I didn't manage to compile the program, you don't have the compiled file to try, it can go to me too

from dsdcc.

do you play it on cygwin or cmd

from dsdcc.

hello, I built it in cygwin and ran it in cmd ...... can this be a mistake? thank you very much .... is it running in cygwin?

from dsdcc.

from dsdcc.

from dsdcc.

When you run LouisErigHerve version of dsd with argument -DMRPrintAmbeVoiceSampleHex you can see ambe frames. On the image you can see that "15 0B 44 D5 61 AA" is repeating, so it is probably a silence frame. When you xor it with "F8 01 A9 9F 8C E0" you get "ED 0A ED 4A ED 4A" and "ED 4A" is key id 70.

How about ep /rc4 can we at least know the initialization vector or anything from the signal?

from dsdcc.

This issue is going to be closed due to inactivity

from dsdcc.

When you run LouisErigHerve version of dsd with argument -DMRPrintAmbeVoiceSampleHex you can see ambe frames. On the image you can see that "15 0B 44 D5 61 AA" is repeating, so it is probably a silence frame. When you xor it with "F8 01 A9 9F 8C E0" you get "ED 0A ED 4A ED 4A" and "ED 4A" is key id 70.

Hello
I have been working on decrypting the base cipher for a long time.
If I'm not mistaken, this file is for Hytera radios and is encrypted in basic mode.
Can anyone help me find the key?
https://drive.google.com/file/d/19VEyUvuHD-hrQ8sBOIBUnXviPmzNV7SI/view?usp=sharing
https://drive.google.com/file/d/1G4g5ljYHgKUlUv3zQtIkc34QKjQaXKVs/view?usp=sharing

from dsdcc.

F8 01 A9 9F 8C E0

could you please describe about "F8 01 A9 9F 8C E0". which part of the data is this? is it's extracted from your sanded dmr wave file?

from dsdcc.

Help, when I run the LouisErigHerve v1.8.3 version of dsd what arguments should I put in NXDN, which can see both frames

from dsdcc.

F8 01 A9 9F 8C E0

could you please describe about "F8 01 A9 9F 8C E0". which part of the data is this? is it's extracted from your sanded dmr wave file?

The F8 01 A9 9F 8C E0 is the AMBE silence frame without encryption. You want to take the xor'ed silence frame, which is obvious because it repeats the most times, and xor it with the silence frame to recover the key.

from dsdcc.