forked from n0rmen/PorschePCMStuff
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathcomponent_protection.txt
81 lines (66 loc) · 4.62 KB
/
component_protection.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
Component protection values from MIB2
Read Component Protection Values From E2P
/usr/apps/modifyE2P r 0x160 0x190
------------------------
PCM4 from 718 Boxster S Donor Car
------------------------
Block1 FD0215734949EAFD8CFD388C731515C75E49A1C73849B6D02FD07315B649D02F64029BD073B68C49
Block2 FD0215734949EAFD8CFD388C731515C75E49A1C73849B6D02FD07315B649D02F64029BD073B68C49
Block3 5E158CA15E0273A1EA2F9BFD5EC7A15E2F0215495EB638EA49A1EA382FA12FEA5E5E3849EA490202
Block4 5E158CA15E0273A1EA2F9BFD5EC7A15E2F0215495EB638EA49A1EA382FA12FEA5E5E3849EA490202
Checksum
- Calculated when at least block 1 is present.
- No change on block9/10 changes
- No change if block 1 is all FF
Block5 EA8C498CFD735E9B15B6735EA16415155EEA2FC75EFDA102B62F64C764B6EA496473499B5ED064B6
Block6 EA8C498CFD735E9B15B6735EA16415155EEA2FC75EFDA102B62F64C764B6EA496473499B5ED064B6
Auto populates with erased EEPROM (what is this encrypted value?)
Block7 A1738C5E73152FB6B6A1EA49EA8CD0027349D0732FD0A1B6FDEA641502EAFDA102739BD038492FC7
Block8 A1738C5E73152FB6B6A1EA49EA8CD0027349D0732FD0A1B6FDEA641502EAFDA102739BD038492FC7
Block9 492F5EEAB68CB6029BD05EB69BFDB6B60215C78CD05E38028C64A1A164FD8C2FC7EA9BD0EA2FEA02
Block10 492F5EEAB68CB6029BD05EB69BFDB6B60215C78CD05E38028C64A1A164FD8C2FC7EA9BD0EA2FEA02
------------------------
MIB2 Pre production Unit from eBay. No VIN attached to system.
------------------------
Block1 6473382F732F49A1EA8C73A15E38FD02155E8C028C9BD064EA6473FDD0FD499B8CA1FD64B6028C02
Block2 6473382F732F49A1EA8C73A15E38FD02155E8C028C9BD064EA6473FDD0FD499B8CA1FD64B6028C02
Block3 6473382F732F49A1EA8C73A15E38FD02155E8C028C9BD064EA6473FDD0FD499B8CA1FD64B6028C02
Block4 6473382F732F49A1EA8C73A15E38FD02155E8C028C9BD064EA6473FDD0FD499B8CA1FD64B6028C02
Block5 49386449EA8C8C38D08CC7A1B65E49C7C7EAA19BC78CFD4902FD9B5EA138A1645E6415022F5E5E49
Block6 49386449EA8C8C38D08CC7A1B65E49C7C7EAA19BC78CFD4902FD9B5EA138A1645E6415022F5E5E49
Block7 B67315D02F0249B6EAA138EAEA49B664D0642F388C9BB6A18CEAD02F5ED0B6C78C8C15FDB6A1EAB6
Block8 B67315D02F0249B6EAA138EAEA49B664D0642F388C9BB6A18CEAD02F5ED0B6C78C8C15FDB6A1EAB6
Block9 49FDD09BFD499BFD2FA1D0025E64B6738CFDFD38739B9BB6FDEAD0EA2FC7B6D08C73028C38FD64B6
Block10 49FDD09BFD499BFD2FA1D0025E64B6738CFDFD38739B9BB6FDEAD0EA2FC7B6D08C73028C38FD64B6
------------------------
Erase CP Region from QNX Shell on RCC modifyE2P only writes 16 bytes at once.
------------------------
/usr/apps/modifyE2P w 0x160 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x170 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x180 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x190 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x1a0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x1b0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x1c0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x1d0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x1e0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x1f0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x200 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x210 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x220 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x230 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x240 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x250 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x260 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x270 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x280 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x290 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x2a0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x2b0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x2c0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x2d0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
/usr/apps/modifyE2P w 0x2e0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Values are 40 bytes encryped data, so RMD320? There is a checksum stored elsewhere in E2P that must be changed or a fault code is thrown.
IKA and GFA keys are needed for CP. Appear to be stored in CAN Gateway (Address 19)
IDE12084-MAS14064,Status of component protection slaves-Status of the IKA key for component protection participants,IKA key stored,
IDE07145-MAS06785,Component protection properties-GFA key,used,