DishTV now uses S*ca2 TOO.... .... think think.....

ViReN

I just had a look at http://**w.flysat.com/nss6.php


and read
Conax
Mediaguard2

and .... mind started clicking........ are there any possibilities ????

Magesh

I am not able to understand what does it mean. Can any one explain what he means to say by reading that?

vvimal9

Hi Magesh

Basically he is looking out a method to watch encrypted content for free

Analoguesat

He is hoping theres the possibility of h&cking Dish using the new Mediaguard encryption system. Whilst M2 isnt the most secure system here in Europe, it still holds up fairly well most of the time.

Analoguesat's message to the world Analogue forever!

member91040

Humm ViReN Bro, Yes they are using Seca since last long time, Since the introduction, or sony package times.

mcruiser

Yes its been like that for long. And its the the STAR package channels that are encrypted in Seca2. I have also noticed that the receivers with older software versions cannot decode these channels, even if you have subscribed to them.

member91040

Bro the time for the release of the receiver was conax, but due to tech change it dosent work.

hsenet

I donot understand one thing though:
How can a single access card can be used for 2 encryption systems? How can a conax card/cam decode a MediaGuard2 encryption? Can somebody enlighten me?
And is Seca2 the same encryption system as MediaGuard2?

Analoguesat

How can a single access card can be used for 2 encryption systems? How can a conax card/cam decode a MediaGuard2 encryption?

It cant. Special multicrypt cams can do just that though - they have electronic gubbins inside that can emulate more than one encryption system


And is Seca2 the same encryption system as MediaGuard2?

Yes

Analoguesat's message to the world Analogue forever!

hsenet

Does it mean that our Dish Tv systems have multicrypt? Or how does our Zenega recievers decrypt both Conax And Mediaguard2?

j2kthunder

is ther any way that we can decrypt the system so that we can use the zenega stb to program and search for other channels that are avilble fta on ther sats?

member91040

Bro there is no way out, For freaken stbs for dish tv.

ViReN

there is.... shhhh

Rajesh25

If there is no way, then how do you think the hardware box [Zenega or whatever STB] is decrypting it.
There is definetly "logic" which is in h/w, all we need is to figure out and break it.

That is how DvdShrink and other dvd decrypting systems were developed.

May be any dreambox driver developers can enlighten us.

member91040

Logic is defince as reading 1000 books, No way is impossible, Impossible is possible.

tejasphatak

Okies. Lets get this thing sorted out..

Here is how dish tv encryption works . Dishtv uses Conax Cas7.

While laying the standards for DVB-S (satellite) they integrated a basic scrambling . That is called as CSA (common scrambling Algorithm Also know as BISS). Which is just like giving a password to the stream which inturn decrypts the stream. Its a simple encryption. The password is called as DCW (decoded controlled word). While the higher encryption system (NDS,Conax etc etc )encrypts this DCW.

Basically speaking a Encrypted Control Word(i.e Encrypted DCW) or ECW for short is sent to every card in a message called an Entitlement Control Message or ECM. A new ECW is sent to every card simultaneously every 5 or 10 seconds or so. The Card uses the current Operational Key (Key 20, Key21) to decode this ECW into a decoded Control Word or DCW. The algorithm used to do this decoding of the ECW into DCW is called RSA.The DCW is then returned by the Smart Card to the CAM, where it is used to decode the incoming video signal. This is done within the CAM using a system called CSA (Common Scrambling Algorithm) to decode the incoming video into a viewable picture. From the above we can understand that all cards have the same Operational Key values, because they all have to decode the same ECW to clear a channel. Got that? Good.... Now where do those Operational keys come from and how do they get into the card. Well in the old days they would be preloaded into all the cards when they were manufactured. The problem with this (for the providers, not for us!) is that when hackers opened any one card and got the keys, the only way the provider could stop pirate veiwing would be to replace all the cards. Expensive to do! So with current systems (like Conax) we have a further step up the ladder. The Operational keys are sent to all the subscriber cards over the air in a message called an EMM (Entitlement Management Message). This EMM contains the new Operation Keys to be used next. Obviously hackers are not allowed to log these new Operation Keys being sent, so again these operational keys in the EMM are encrypted using RSA. However there is an important difference between EMM and ECM. Where ECM are sent simultaneously to all cards, EMM are sent separately to every card in turn. An EMM contains an Address of a specific card (known as UA or SA), and an encrypted operational key. The operational key is encrypted in RSA using a Master Key. This Master Key in conax is key10, and every single card has it's own unique Master Key 10, so a card can only decrypt the EMM addressed specifically to that card. In other words every EMM contains different encrypted data that can only be decoded by the card it is meant for. This means that Conax can choose which cards it want's to update with the new key 20 or 21, and which cards it no longer wants to update - like when the subscription expires for example, or a card is reported stolen or lost.

About RSA.
This is one of the strongest Encryption algorithm. Using distributed computing (ie large scale computing eg.SETI) it took 250 days just to crack a 56-bit encrypted method using brute force attack. So think how much computing power and how many years will be required to beak 1024bit (as per my knowledge) encryption which is used by conax????

Dishtv uses Cas7 at this point of time. Cas3 and earlier were cracked because of hardware vulnerability (i.e the hackers were able to extract the Master Keys.).

So Techincally speaking its just impossible right now to decrypt dishtv and watch it illegally.


Hope somebody cracks it !!!

Analoguesat

In summary

you want Dish India = you pay for it

you dont want to pay = you do without

Analoguesat's message to the world Analogue forever!

member91040

Humm Bro, I APPRESHIATE YOU, You defined exactly right, Now a days...!

Hashing Algorithms is on the way.

The key in public-key encryption is based on a hash value. This is a value that is computed from a base input number using a hashing algorithm. Essentially, the hash value is a summary of the original value. The important thing about a hash value is that it is nearly impossible to derive the original input number without knowing the data used to create the hash value

tejasphatak

yup. thats rite

member91040

Good Bro Keep It Up....!

Abhi

Thx Tejas for the info..but is it possible to download the firmware..so that the new one will act as a replicated copy of the existing original one????

tejasphatak

This can be done... I haven't read about it though... See it's like this at the end of the day somebody has to pay the subscription fees. To make sure the clone cards are working. So no use of cloning it. I will suggest that if you want to use a single card over two three STB /PC's etc etc then i will go for Card sharing.. that's the best way.. (provided the stb has a ethernet port eg. dreambox)

Rajesh25

But will this allow the 2,3,4 TVs to individually watch different channels?
Bcos that is the whole point.

I feel i SHOULD pay for the 1st receiver, however 2-4 is extremely useless and i don't consider hacking for those as piracy.

tejasphatak

yes. card sharing does allow you to do the same. watch 5 different channels on 5 different STB . using only 1 subscription card.

Somedays ago i found a device on the web which does the same thing wirelessly.. also you dont need a ethernet port on the STB. it fits itself into the card area and talks with the card sharing server wirelessly.


Here's One
**tp://www.swplus.eu/en/products/6.html

Rajesh25

What is a card sharing server?