RSA key format

There are 24 replies in this Thread which was already clicked 15,122 times. The last Post () by tom111.

  • Hi Guys I am about to try and setup oscam again in barbados (tried last year with smargo but failed) I have a n3 card with boxkey and RSA key you can jtag the boxes out here. They use RQCS server here at mo. Anyway, what I need to know is how I enter it in oscam server, ie the format. My oscam server file at the mo looks like this.....


    [reader]
    Label = READER
    Device = 0
    Protocol = pcsc
    caid = 0963
    boxid = xxxxxxxx
    RSA_Key = xxxx xxxx xxxx xxxx ???????


    ecmwhitelist = 0963@000000:3E,4E,42,44,45,47,6A,6B,6F,62,68,69,7C ,7D,7E, 72,73,77,79,80,8B
    detect = cd
    mhz = 500
    cardmhz = 500
    group = 1
    emmcache = 1,3,2
    blockemm-unknown = 1
    blockemm-g = 1
    lb_weight = 101


    This was the format for sly UK so I need to change the CAID I am sure the card is N3 1802 card as it has the same ATR as that. Do I use 1802 as the CAID instead of 0963?


    Where does the RSA key go I am assuming under the boxkey. Do I need to give it a name. I have edited the above to what I think but please correct me if I am wrong.


    What format is the key entered ? one long string of 96 or blocks of 16 witrh gaps or commas??? If someone could edit this example for me I would be very greatful. Hopefully I can get it working this time with help from this forum BTW I will initially be running it on oscam for windows with an omnikey cardreader

  • Hi, i'm running a N3 card on my DM500s and my reader parameters are as follow:


    [reader]
    Label = sci0
    Protocol = internal
    Detect = CD
    Device = /dev/sci0
    services = 1,2,3
    Customspeed = 0
    mhz = 368
    cardmhz = 368
    EMMCache = 1,3,2
    ECMCache = 1
    Group = 1
    Fallback = 0
    CAID = 1802
    ident = 1802:000000,004901,004801
    boxkey = 128 digits
    rsakey = 16 digits



    They're no gaps or comas between the digits and they must be all in one line.


    You have to see what caid is your card has if you put the wrong one it won't work.

  • thanks drfs. I checked on steamboard last year and the caid is 1802. I am assuming that as the atr is ATR: 3F FF 95 00 FF 91 81 71 FE 47 00 44 4E 41 53 50 31 34 32 20 52 65 76 47 30 32 16. I see your boxkey is 128 digits and rsa is 16 My rsa is 96 didits? but I assume this varies or does it? Anyways my mate is bringing the gear around tonight to see if we can get it working

  • nagra boxkey is 16 digits so I guess drfs has them mixed up there, you should try oscam with that card, it should work much better and greatly reduce your ecm times

  • OK guys it didn't go well.. I have two N3 cards both with rsa info. TRhe boxkey I got from the rsa dump byte 9 to 24 (first 8 bytes are IRD). My problem is that I dont even get an atr off either card? here is my config I am trying......


    [reader]
    Label = MCTV
    Device = 0
    Protocol = pcsc
    caid = 1802:000000
    boxid = xxxxxxxxxxxxxxxx
    rsakey = xxxxxxxxxxxxxx9D587A6D2D77273ED657D 96 bytes
    detect = cd
    mhz = 500
    cardmhz = 500
    group = 1
    emmcache = 1,3,2
    blockemm-unknown = 1
    blockemm-g = 1
    lb_weight = 101


    I start oscam and get this in the log......


    [07/11/2012 00:14:31] - Starting "oscam.exe"...
    [07/11/2012 00:14:31] - Oscam is running!
    [07/11/2012 00:14:31] - Next restart at 07/11/2012 06:00:00
    [07/11/2012 00:14:32] - 00:14:32 0 s starting thread log_list_thread
    [07/11/2012 00:14:32] - cygwin warning:
    [07/11/2012 00:14:32] - MS-DOS style path detected: c:\oscam/HEADER.tpl
    [07/11/2012 00:14:32] - Preferred POSIX equivalent is: /oscam/HEADER.tpl
    [07/11/2012 00:14:32] - CYGWIN environment variable option "nodosfilewarning" turns off this warning.
    [07/11/2012 00:14:32] - Consult the user's guide for more details about POSIX paths:
    [07/11/2012 00:14:32] - Chapter 3. Using Cygwin
    [07/11/2012 00:14:32] - 00:14:32 0 s log_list_thread thread started
    [07/11/2012 00:14:32] - 00:14:32 0 s >> OSCam << cardserver started, version 1.20-unstable_svn, build #7884 (i686-pc-cygwin)
    [07/11/2012 00:14:32] - 00:14:32 0 s version=1.20-unstable_svn, build #7884, system=i686-pc-cygwin, nice=-1
    [07/11/2012 00:14:32] - 00:14:32 0 s client max. idle=120 sec, debug level=255, filter_sensitive=1
    [07/11/2012 00:14:32] - 00:14:32 0 s max. logsize=10 Kb, loghistorysize=4096 bytes
    [07/11/2012 00:14:32] - 00:14:32 0 s client timeout=5000 ms, fallback timeout=2500 ms, cache delay=0 ms
    [07/11/2012 00:14:32] - 00:14:32 0 share-updater mode=initfast t=1s i=30
    [07/11/2012 00:14:32] - 00:14:32 0 s share updater thread started
    [07/11/2012 00:14:32] - 00:14:32 0 s ERROR: Cannot open file "/cygdrive/c/oscam//oscam.services" (errno=2 No such file or directory)
    [07/11/2012 00:14:32] - 00:14:32 0 s userdb reloaded: 1 accounts loaded, 0 expired, 0 disabled
    [07/11/2012 00:14:32] - 00:14:32 0 s signal handling initialized (type=sysv)
    [07/11/2012 00:14:32] - 00:14:32 0 s ERROR: Cannot open file "/cygdrive/c/oscam//oscam.srvid" (errno=2 No such file or directory)
    [07/11/2012 00:14:32] - 00:14:32 0 s ERROR: Cannot open file "/cygdrive/c/oscam//oscam.tiers" (errno=2 No such file or directory)
    [07/11/2012 00:14:32] - 00:14:32 0 s ERROR: Cannot open file "/cygdrive/c/oscam//oscam.provid" (errno=2 No such file or directory)
    [07/11/2012 00:14:32] - 00:14:32 0 s ERROR: Cannot open file "/cygdrive/c/oscam//oscam.guess" (errno=2 No such file or directory)
    [07/11/2012 00:14:32] - 00:14:32 0 s ERROR: Cannot open file "/cygdrive/c/oscam//oscam.ird" (errno=2 No such file or directory)
    [07/11/2012 00:14:32] - 00:14:32 0 s ERROR: Cannot open file "/cygdrive/c/oscam//oscam.whitelist" (errno=2 No such file or directory)
    [07/11/2012 00:14:32] - 00:14:32 0 s ERROR: Cannot open file "/cygdrive/c/oscam//oscam.cacheex" (errno=2 No such file or directory)
    [07/11/2012 00:14:32] - 00:14:32 0 s Starting listener 0
    [07/11/2012 00:14:32] - 00:14:32 0 s monitor: disabled
    [07/11/2012 00:14:32] - 00:14:32 0 s Starting listener 0
    [07/11/2012 00:14:32] - 00:14:32 0 s camd35: disabled
    [07/11/2012 00:14:32] - 00:14:32 0 s Starting listener 0
    [07/11/2012 00:14:32] - 00:14:32 0 s cs378x: disabled
    [07/11/2012 00:14:32] - 00:14:32 0 s Starting listener 0
    [07/11/2012 00:14:32] - 00:14:32 0 s newcamd: disabled
    [07/11/2012 00:14:32] - 00:14:32 0 s Starting listener 0
    [07/11/2012 00:14:32] - 00:14:32 0 s cccam: initialized (fd=3, port=15370, crypted)
    [07/11/2012 00:14:32] - 00:14:32 0 s Starting listener 0
    [07/11/2012 00:14:32] - 00:14:32 0 s pandora: disabled
    [07/11/2012 00:14:32] - 00:14:32 0 s Starting listener 0
    [07/11/2012 00:14:32] - 00:14:32 0 s csp: disabled
    [07/11/2012 00:14:32] - 00:14:32 0 s Starting listener 0
    [07/11/2012 00:14:32] - 00:14:32 0 s radegast: disabled
    [07/11/2012 00:14:32] - 00:14:32 0 s starting thread http
    [07/11/2012 00:14:32] - 00:14:32 11023B8 h WARNING: Your http disk template c:\oscam/HEADER.tpl is in the old template format without revision info. Please consider upgrading it!
    [07/11/2012 00:14:32] - 00:14:32 11023B8 h If you are sure that it is current, add the following line at the beginning of the template to suppress this warning: <!--OSCam;3173958798;1.20-unstable_svn;7884;-->
    [07/11/2012 00:14:32] - 00:14:32 0 s http thread started
    [07/11/2012 00:14:32] - 00:14:32 0 s starting thread reader check
    [07/11/2012 00:14:32] - 00:14:32 11023B8 h HTTP Server listening on port 8888
    [07/11/2012 00:14:32] - 00:14:32 0 s reader check thread started
    [07/11/2012 00:14:32] - 00:14:32 0 s starting thread check
    [07/11/2012 00:14:32] - 00:14:32 0 s check thread started
    [07/11/2012 00:14:32] - 00:14:32 0 s cardreader: Initializing
    [07/11/2012 00:14:32] - 00:14:32 0 s mctv [pcsc] creating thread for device 0
    [07/11/2012 00:14:32] - 00:14:32 0 s start reader thread action 8
    [07/11/2012 00:14:32] - 00:14:32 11500C0 r data from add_job action=8 client r mctv
    [07/11/2012 00:14:32] - 00:14:32 11500C0 r mctv [pcsc] IFD: Opening device 0
    [07/11/2012 00:14:32] - 00:14:32 11500C0 r mctv [pcsc] IO: PCSC establish context for PCSC pcsc_reader 0
    [07/11/2012 00:14:32] - 00:14:32 0 s loadbalancer: can't read from file /Users/Steve/AppData/Local/Temp/_oscam/stat
    [07/11/2012 00:14:32] - 00:14:32 0 s waiting for local card init
    [07/11/2012 00:14:32] - 00:14:32 11500C0 r mctv [pcsc] IO: PCSC pcsc_reader 0: OMNIKEY CardMan 3x21 0
    [07/11/2012 00:14:32] - 00:14:32 11500C0 r mctv [pcsc] IFD: Device 0 succesfully opened
    [07/11/2012 00:14:32] - 00:14:32 11500C0 r mctv [pcsc] Reader initialized (device=0, detect=cd, mhz=500, cardmhz=500)
    [07/11/2012 00:14:33] - 00:14:33 0 share-update [1] 3817498742 0
    [07/11/2012 00:14:33] - 00:14:33 0 s-card added: id 0 remoteid 10000 caid 1802 hop 0 reshare 1 originid 0 cardtype 4
    [07/11/2012 00:14:33] - 00:14:33 0 reported/updated +1/-0/dup 0 of 1 cards to sharelist
    [07/11/2012 00:14:33] - 00:14:33 0 share-updater mode=initfast t=1s i=30
    [07/11/2012 00:14:33] - 00:14:33 11500C0 r mctv [pcsc] PCSC card in OMNIKEY CardMan 3x21 0 is unresponsive. Eject and re-insert please.
    [07/11/2012 00:14:33] - 00:14:33 11500C0 r ERROR, function call reader->crdr.get_status(reader, &in) returns error.
    [07/11/2012 00:14:33] - 00:14:33 11500C0 r mctv [pcsc] Error getting card status.
    [07/11/2012 00:14:33] - 00:14:33 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: !reader_card_inserted
    [07/11/2012 00:14:33] - 00:14:33 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: reader->card_status = 4, ret = 0
    [07/11/2012 00:14:34] - 00:14:34 0 s init for all local cards done
    [07/11/2012 00:14:34] - 00:14:34 0 s anti cascading disabled
    [07/11/2012 00:14:34] - 00:14:34 0 share-update [1] 3194370426 3817498742
    [07/11/2012 00:14:34] - 00:14:34 0 reported/updated +0/-0/dup 0 of 1 cards to sharelist
    [07/11/2012 00:14:34] - 00:14:34 0 share-updater mode=initfast t=1s i=30
    [07/11/2012 00:14:34] - 00:14:34 11500C0 r mctv [pcsc] PCSC card in OMNIKEY CardMan 3x21 0 is unresponsive. Eject and re-insert please.
    [07/11/2012 00:14:34] - 00:14:34 11500C0 r ERROR, function call reader->crdr.get_status(reader, &in) returns error.
    [07/11/2012 00:14:34] - 00:14:34 11500C0 r mctv [pcsc] Error getting card status.
    [07/11/2012 00:14:34] - 00:14:34 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: !reader_card_inserted
    [07/11/2012 00:14:34] - 00:14:34 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: reader->card_status = 4, ret = 0
    [07/11/2012 00:14:35] - 00:14:35 0 share-updater mode=initfast t=1s i=29
    [07/11/2012 00:14:35] - 00:14:35 11500C0 r mctv [pcsc] PCSC card in OMNIKEY CardMan 3x21 0 is unresponsive. Eject and re-insert please.
    [07/11/2012 00:14:35] - 00:14:35 11500C0 r ERROR, function call reader->crdr.get_status(reader, &in) returns error.
    [07/11/2012 00:14:35] - 00:14:35 11500C0 r mctv [pcsc] Error getting card status.
    [07/11/2012 00:14:35] - 00:14:35 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: !reader_card_inserted
    [07/11/2012 00:14:35] - 00:14:35 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: reader->card_status = 4, ret = 0
    [07/11/2012 00:14:36] - 00:14:36 0 share-updater mode=initfast t=1s i=28
    [07/11/2012 00:14:36] - 00:14:36 11500C0 r mctv [pcsc] PCSC card in OMNIKEY CardMan 3x21 0 is unresponsive. Eject and re-insert please.
    [07/11/2012 00:14:36] - 00:14:36 11500C0 r ERROR, function call reader->crdr.get_status(reader, &in) returns error.
    [07/11/2012 00:14:36] - 00:14:36 11500C0 r mctv [pcsc] Error getting card status.
    [07/11/2012 00:14:36] - 00:14:36 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: !reader_card_inserted
    [07/11/2012 00:14:36] - 00:14:36 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: reader->card_status = 4, ret = 0
    [07/11/2012 00:14:37] - 00:14:37 0 share-updater mode=initfast t=1s i=27
    [07/11/2012 00:14:37] - 00:14:37 11500C0 r mctv [pcsc] PCSC card in OMNIKEY CardMan 3x21 0 is unresponsive. Eject and re-insert please.
    [07/11/2012 00:14:37] - 00:14:37 11500C0 r ERROR, function call reader->crdr.get_status(reader, &in) returns error.
    [07/11/2012 00:14:37] - 00:14:37 11500C0 r mctv [pcsc] Error getting card status.
    [07/11/2012 00:14:37] - 00:14:37 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: !reader_card_inserted
    [07/11/2012 00:14:37] - 00:14:37 11500C0 r mctv [pcsc] TRACE: cardreader_do_checkhealth: reader->card_status = 4, ret = 0
    [07/11/2012 00:14:38] - 00:14:38 0 share-updater mode=initfast t=1s i=26
    [07/11/2012 00:14:38] - Stoping "oscam.exe"...


    Any help and advice appreciated guys. At least last year using smargo I go further see this post... http://linuxsat-support.com/os…ase-check-rsa-boxkey.html


    Would love to get this running, have 6 weeks to sort it. Cheers guys

  • just found this on another forum....


    II II II II XX XX XX XX XX XX XX XX XX XX Y1 Y1 Y1 Y1 Y1 Y1 Y1 Y1
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # Y2 Y2 Y2 Y2 Y2 Y2 Y2 Y2 CS CS
    #
    # II = IRD serial number.
    # XX = Unimportant.
    # Y1, Y2 = SK signature and also used to calculate the box key.
    # SK = Actual secondary key data (CAM N, public modulus).
    # CS = Checksum.


    Reading what drfs posted it looks like I only have the secondary key which is 96 bytes. The whole RSA key is 128 bytes and the boxkey seems to be derived from Y1 and Y2 which is 16 bytes so I may not have the Full RSA only the secondary key. Any thoughts on this theory

  • Then it's possible your box uses secondary key pairing method
    Start oscam in telnet with card in reader and you will see everything








    Sent from my iPhone using Tapatalk

  • hi sync thanks for your quick response. Am not sure what you mean by your reply as I am running oscam for windows so at the moment I am on a laptop with oscam installed and my omnikey plugged into my usb port I am not using a linux server at this point. What is the secondary key pairing method? how does that configure in oscam server is it just the boxkey and the 96 bytes of the secondary key? cheers all help appreciated

  • You would be better off testing your card in a dm500 with either rqcs or oscam first.


    Enter either the RSA, SK or cam n the same way in oscam as shown already












    Sent from my iPhone using Tapatalk

  • OK been doing a bit of reading on the different methods on N3 there seems to be a DT06, DT08 and secondary key. Looking at the RQCS config they use out here it looks like the seconary key method is used. Now this rqcs server they use ignores the boxkey if it uses the secondary key so all that is required is the secondary key for it to work. I have pasted the Rqcs config file below. Sorry about legnth couldn't attach it as a txt file.....



    +u###############################################################################
    # rqcs configuration file #
    # All configuration options in this file observe the same format: #
    # <configuration_name>=<configuration_value> #
    # #
    # No white space is allowed in any place or the configuration entry will be #
    # ignored. #
    ###############################################################################


    ########################### general configuration #############################
    [General]
    # This sets the box type the card server will run on. Compatible boxes are:
    # 0 - Dreambox
    # 1 - Triple Dragon
    # 2 - DGStation (Mutant/Relook/CubeCafe)
    # 3 - Linux x86 PC
    #
    # NOTE: Ignored in the WIN32 version.
    box_type=0


    # Enable or disable background execution
    # 0 - Disable
    # 1 - Enable
    #
    # NOTE: Ignored in the WIN32 version.
    background_execution=1


    # This sets the level of console output for debugging:
    # 0 - Silent, 1 - Basic debug info, 2 - Extended debug info,
    # 3 - Show all debug info
    debug_level=1


    # Enables or disables console/file logging of ECM's and EMM's in debug level 2
    # 0 - Disabled, 1 - Enabled
    debug_show_ecms=1
    debug_show_emms=1


    # This option enables or disables the writing of debug information to the
    # console.
    log_to_console=1


    # This option enables or disables the writing of debug information to the
    # console page in the web interface.
    log_to_webif=1


    # This option enables or disables the writing of console output to a log file
    log_to_file=0


    # When log_to_file is set to 1, this is the path and filename to write console
    # ouput to.
    #
    # NOTE: In the WIN32 version, if enabled, this should be set to a valid
    # Windows/DOS path.
    logfile_name=/var/bin/rqcs.log


    # Enables/disables the web interface.
    webif=1


    # This is the port the web interface will be available on.
    webif_port=665


    # Enables/disables HTTP authentication for the web interface.
    webif_authenticate=1


    # Username/password pairs to be used when HTTP authentication is enabled for
    # the web interface.
    webif_users=root:root|user_2:1111|user_3:2222


    # If this path is provided, files contained in it will be served by the internal
    # HTTP server and will be available at the web interface root.
    webif_custom_files_root=


    # GMT offset for dates and times displayed across the system.
    system_wide_hour_offset=-4


    ############################# slot configuration ##############################
    # Logical slots are a combination of a physical slot/interface, card, and #
    # protocol server. There is no limit to how many logical slots can be added, #
    # except for those imposed by the device where it is running. #
    ###############################################################################
    [Logical-Slot:Lower]
    # Enable/Disable this logical slot. If disabled it will be completely ignored.
    # 0 - Disabled, 1 - Enabled
    enabled=1


    # Sets the type of smartcard interface.
    # 0 - ISO7816 Smartcard Interface.
    # 1 - Phoenix type connected to RS232 serial port.
    #
    # NOTE: Ignored in the WIN32 version. Always uses Phoenix interface.
    sci_type=0


    # The numeric identifier of the smartcard interface
    # eg: for internal iso7816 slots: 0 = sci0, 1 = sci1, 2 = sci2 and so on...
    # for rs232 serial ports: 0 = ttyS0, 1 = ttyS1, 2 = ttyS2 and so on...
    #
    # NOTE: There's a small difference in the WIN32 version:
    # 0 = COM1, 1 = COM2, 2 = COM3 and so on...
    sci_ordinal=0


    # Overrides the "sci_ordinal" parameter above and uses the following custom
    # path to access the SCI interface (treats it as ISO7816 or Phoenix depending
    # on the "sci_type" parameter).
    sci_path_custom=


    # Clock frequency of the internal box smartcard interface, in Hertz.
    # This is only used when ISO7816 smartcard interface is selected.
    sci_clock_frequency=3574595


    # Number of minutes between safety card restarts for this slot. Using
    # larger values than the default for this parameter might affect reliability
    # of card response (set value to 0 to disable restarts --NOT recommended!).
    safety_restart_period=20


    # Enable or disable slot restarts on different conditions.
    # 0 - Disable restart.
    # 1 - Enable restart.
    restart_on_ecm_send_error=1
    restart_on_ecm_processing_timeout=1
    restart_on_cw_retrieval_error=1
    restart_on_cam_request=1
    restart_on_emm_send_error=1
    restart_on_emm_processing_timeout=1


    # ECMs received in shorter intervals that what is specified in this parameter
    # (in seconds), will be rejected. A value of 0 means no limits.
    maximum_ecm_rate=0


    # Block Global/Shared/Unique EMM's
    block_emm_g=0
    block_emm_s=0
    block_emm_u=0


    # A list of SIDs to allow in this slot. If this is left empty, all sids are
    # allowed. Format: <sid_1>|<sid_2>|<sid_3> ... and so on.
    #
    allow_sids=


    # A list of SIDs to deny in this slot. Leaving this parameter empty has no
    # special meaning. Format: <sid_1>|<sid_2>|<sid_3> ... and so on.
    deny_sids=


    # Enable or disable the sending of card tiers when requested by clients. If
    # this parameter is omitted, it's enabled by default.
    send_card_tiers=1


    # Enable or disable the caching of card tiers. If enabled, card tiers will be
    # queried only once, all subsequent tier requests by clients will be returned
    # from cache. The tier cache is refreshed by clicking the "Get Tiers" button
    # in the "card information" page in the webif.
    #
    # NOTE: Tiers shown in the web interface are never cached.
    cache_card_tiers=1


    # Specifies the path to the log file where information about emm's processed
    # by this slot will be stored.
    emm_log_file_path=C:\EMM\rqcs-emm-log-lower.emm


    # Specifies the maximum file size for the emm log of this slot (in Kb). When the
    # log file reaches this size, it is reset to zero bytes.
    emm_log_file_max_size=512


    # Enables or disables the logging of G/S/U EMM's. EMM's that are not logged do
    # not appear in the emm statistics page of the webif.
    log_emm_g=1
    log_emm_s=1
    log_emm_u=1


    # The CaID specified here will be reported back to the clients regardless of
    # whatever CaID is detected. The value should be hex-coded (e.g: 1841). The
    # default value of zero will cause rqcs to return the auto-detected CaID.
    report_caid=1802


    # ----------------------------- Session Negotiation ---------------------------
    # Following is a set of 4 parameters that may be used to achieve successful
    # session key negotiation with the card.
    # -----------------------------------------------------------------------------


    # DT08 session negotiation method. Just the Box Key is required for this
    # method to work. This is the simpler, preferable method, however, not all cards
    # have DT08's.
    #box_key=8CA6A88CFDExxxx


    # DT06 Key 0D session negotiation. An alternative method for when the card does
    # not have a DT08. Useful when you have the card's DT06 and not the IRD's
    # Secondary Key.
    #
    # If this value is specified, the DT06 method will be attempted instead
    # of the DT08 one.
    #
    # IMPORTANT: BOTH the Box Key and the DT06 are needed for this method to work.
    #
    # HINT: The DT06 Key 0D *does not* change when a card is swapped, if you
    # have this for an old card that was married to an IRD, it will work for
    # newer cards on that same IRD.
    dt06_key_0d=


    # Plain CAM N negotiation method. Another alternative method for when the card
    # does not have a DT08. It is somewhat equivalent to the DT06 Key 0D method and
    # again, useful when you have the card's CAM N obtained from an expanded
    # DT06 Key 0D. As a sidenote, this parameter is equivalent to newcs's
    # <rsa></rsa> parameter.
    #
    # IMPORTANT: BOTH the Box Key and CAM N are needed for this method to work.
    cam_n=


    # Secondary key session negotiation method. If your card does not have a DT08,
    # and you can't extract the cam's N key or DT06 Key 0D, this is the only possible
    # method. The secondary key must be extracted from a provider IRD's TSOP dump.
    #
    # If this value is specified, it will supercede the DT08, DT06 Key 0D and Plain
    # CAM N session negotiation methods. Neither the Box Key, DT06 Key 0D nor CAM N
    # parameters are needed for this method to work, and will be ignored if they
    # are provided.
    #
    # The secondary key is 96 bytes long and has the following structure:
    #
    # II II II II XX XX XX XX XX XX XX XX XX XX Y1 Y1 Y1 Y1 Y1 Y1 Y1 Y1
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # Y2 Y2 Y2 Y2 Y2 Y2 Y2 Y2 CS CS
    #
    # II = IRD serial number.
    # XX = Unimportant.
    # Y1, Y2 = SK signature and also used to calculate the box key.
    # SK = Actual secondary key data (CAM N, public modulus).
    # CS = Checksum.
    #
    # NOTE: The Secondary Key should be specified as a single line without spaces
    # (like the Box Key), and should be the exact 96 bytes as extracted from the IRD.
    #
    # NOTE: You can copy the 64 bytes that are labeled 'SK' from the Secondary
    # Key, and use them in the cam_n parameter. This will also work, in that case
    # the Box Key parameter must also be provided.
    secondary_key=1E507F70C5443CD7B9772E6100038433FB8A60D003319A135EE497EC296A79495D00AAF7B2D2859AE1FD672184C88AE6ABC8FDDC748A5A19EB61AC4D9084388DB9A53E64C8F9DBB294E7xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx


    # Optional. Card provider's IRD RSA key (only relevant for DT08 session
    # negotiation method.
    rsa_key=


    # The protocol with which the logical slot will communicate with the
    # clients.
    # 0 - Newcamd protocol.
    protocol_server_type=0


    # The port on which the logical slot's protocol server will be listening.
    protocol_server_port=10000


    # If the Newcamd protocol is selected, you must configure here the des
    # key to be used for encrypting communication.
    protocol_server_newcamd_des_key=0102030405060708091011121314


    # The user list that will be able to connect to the logical slot.
    # Format: <username_0>:<password_0>|<username_1>:<password_1> ... and so on.
    protocol_server_users=redman11:redman11|home:home|aaa:aaa|bbb:bbb|ddd:ddd|eee:eee|fff:fff|ggg:ggg|hhh:hhh|iii:iii|jjj:jjj|kkk:kkk|lll:lll|mmm:mmm|nnn:nnn|ooo:ooo|ppp:ppp|qqq:qqq|uuu:uuu|home1:home1|rrr:rrr|home2:home2|sss:sss


    # Used to specify the path of a separate user file for this logical slot.
    # Should be a plain-text file with a single user and password par for each
    # line with the following format:
    #
    # username:password ;comment
    #
    # If this file is specified, users contained in it will be added to the users
    # specified in the "protocol_server_users" parameter.
    protocol_server_user_file=./rqcs.user


    # The maximum number of active users that will be allowed on the server.
    # The default is 0, which is an unlimited number of users.
    protocol_server_max_active_users=0


    # The number of seconds the server will allow a client to be idle before
    # disconnecting it (set value to 0 to disable timeout).
    protocol_server_idle_client_timeout=30


    # Parameters to configure control word retrieval times.
    # All values are in milliseconds.
    #
    # Command Lead Time: Delay between all commands
    # ECM Status Poll: Whether to do status polling or query directly
    # for CW's.
    # ECM Initial Poll Delay: Delay before first status poll.
    # ECM Poll Delay: Delay period between polls after initial poll.
    # ECM Poll Delay Increment: Increment on each poll after initial one.
    # EMM Status Poll: Wheter to do status polling or just return
    # after 1 poll cycle. WARNING: Disabling this
    # is NOT recommended.
    # EMM Poll Delay: Delay period between polls for EMM completion.
    #
    # Safe sample values for ROM240/241
    # -------------------------------------------
    nagra_command_lead_time=18
    nagra_ecm_status_poll=1
    nagra_ecm_initial_poll_delay=0
    nagra_ecm_poll_delay=0
    nagra_ecm_poll_delay_increment=0
    nagra_emm_status_poll=1
    nagra_emm_poll_delay=100


    # Safe sample values for ROM102/103/142/180
    # -------------------------------------------
    #nagra_command_lead_time=50
    #nagra_ecm_status_poll=1
    #nagra_ecm_initial_poll_delay=200
    #nagra_ecm_poll_delay=200
    #nagra_ecm_poll_delay_increment=0
    #nagra_emm_status_poll=1
    #nagra_emm_poll_delay=350
    # -------------------------------------------


    ###############################################################################
    [Logical-Slot:Upper]
    enabled=0
    sci_type=0
    sci_ordinal=0
    sci_path_custom=
    sci_clock_frequency=3574595
    safety_restart_period=20
    restart_on_ecm_send_error=1
    restart_on_ecm_processing_timeout=1
    restart_on_cw_retrieval_error=1
    restart_on_cam_request=1
    restart_on_emm_send_error=1
    restart_on_emm_processing_timeout=1
    maximum_ecm_rate=0
    block_emm_g=0
    block_emm_s=0
    block_emm_u=0
    allow_sids=
    deny_sids=
    send_card_tiers=1
    cache_card_tiers=1
    emm_log_file_path=
    emm_log_file_max_size=512
    log_emm_g=1
    log_emm_s=1
    log_emm_u=1
    report_caid=1802
    # box_key=8CA6A88CFDE2E263
    dt06_key_0d=
    cam_n=
    secondary_key=
    rsa_key=
    protocol_server_type=0
    protocol_server_port=10000
    protocol_server_newcamd_des_key=0102030405060708091011121314
    protocol_server_users=
    protocol_server_user_file=./rqcs.user
    protocol_server_max_active_users=0
    protocol_server_idle_client_timeout=30
    nagra_command_lead_time=25
    nagra_ecm_status_poll=1
    nagra_ecm_initial_poll_delay=0
    nagra_ecm_poll_delay=0
    nagra_ecm_poll_delay_increment=0
    nagra_emm_status_poll=1
    nagra_emm_poll_delay=100

  • OK sync will try and flash a dm500 tonight as my mate has the null modem cable. then download oscam and try and get that working as a stand alone box. Cant report back until tomorrow as my mate has the null modem cable and I cant flash until tonight and we are 4 hrs behind cold uk

  • Hi sync just one check before flashing. Could you have a look at my server config and let me know if you think this is good cheers....


    [reader]
    label = MCTV
    protocol = internal
    device = /dev/sci0
    secondary_key = 19BF8CD6950094D3DEC40003549EFCCF470D7946AAEDA49A49F083520108F2B57D81490C680F3653F04C834EF2D62E66D362310758210128ED0A011EB23BC08FCB77EE982C588CAD2B6F0F4BCDF8F30CC03FAB59D587A6D2D77273ED657D
    blockemm-u = 0
    blockemm-s = 0
    blockemm-g = 1
    blockemm-unknown = 1
    emmcache = 1,3,2
    group = 1


    Obviously the key will be on the same line in the config. Again cheers mate

  • You are missing
    Caid
    Ident


    See post #2 by drfs as it has working configs for his N3 card
    N3 is the same N3 in every country so his configs will work for you





    Sent from my iPhone using Tapatalk

  • will do sync just a bit confusing as drfs says his rsa is 128 bytes whereas this format below is 96 bytes, which is what I have so got a bit confused there (easy enuff for me lol). Anyway I will configure the dreambox as he has done and see where we go from there..


    II II II II XX XX XX XX XX XX XX XX XX XX Y1 Y1 Y1 Y1 Y1 Y1 Y1 Y1
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # Y2 Y2 Y2 Y2 Y2 Y2 Y2 Y2 CS CS
    #
    # II = IRD serial number.
    # XX = Unimportant.
    # Y1, Y2 = SK signature and also used to calculate the box key.
    # SK = Actual secondary key data (CAM N, public modulus).
    # CS = Checksum.

  • Start with this config and work from there


  • OK loaded on openpli with oscam and cccam from dm500 section configured oscam server as sync recommended and as dfrs posted but still errors??


    1970/01/01 1:29:12 300162B0 s camd33: disabled
    1970/01/01 1:29:12 300162B0 s camd35: disabled
    1970/01/01 1:29:12 300162B0 s cs378x: disabled
    1970/01/01 1:29:12 300162B0 s newcamd: initialized (fd=8, port=10000, crypted)
    1970/01/01 1:29:12 300162B0 s CAID: 1802
    1970/01/01 1:29:12 300162B0 s provid #0: 000000
    1970/01/01 1:29:12 300162B0 s radegast: disabled
    1970/01/01 1:29:12 300162B0 s http thread started
    1970/01/01 1:29:12 300162B0 s creating thread for device /dev/sci0
    1970/01/01 1:29:12 300162B0 s loadbalancer: can't read from file /tmp/.oscam/stat
    1970/01/01 1:29:12 300162B0 s waiting for local card init
    1970/01/01 1:29:12 31025B50 h HTTP Server listening on port 8888
    1970/01/01 1:29:12 31825B50 r reader thread started (thread=31825B50, label=sci0, device=/dev/sci0, detect=cd, mhz=368, cardmhz=368)
    1970/01/01 1:29:12 31825B50 r ERROR opening device /dev/sci0
    1970/01/01 1:29:12 31825B50 r Cannot open device: /dev/sci0


    my server config is this at the mo....


    [reader]
    Label = sci0
    Protocol = internal
    Detect = CD
    Device = /dev/sci0
    services = 1,2,3
    Customspeed = 0
    mhz = 368
    cardmhz = 368
    EMMCache = 1,3,2
    ECMCache = 1
    Group = 1
    Fallback = 0
    CAID = 1802
    ident = 1802:000000
    boxkey = bytes 9 to 24 of rsa key
    rsakey = 96 bytes long no gaps all in one line


    I am being told by the guy who is jtagging the box that the first 8 bytes of the rsa is the IRD and the next 16 is the Boxkey. I know the RSA key is good as RQCS uses it and clears the channels. Can someone confirm that what he is saying is true. I am also assuming it is an 1802 caid as the ATR is exactly the same as the via embratel 1802 card shown on the oscam wiki. I maybe making wrong assumptions here. cheers guys

  • For N3 Cards to be read via Oscam you need the Boxkey and RSA N (DT06 N)....
    Depending on the provider & Reciever they use, some will have a DT06 only, others an universal DT06 with DT08. you will not find your boxkey visible in the RSA Key as it will be encrypted therefore wont work.


    which provider is it that your trying to decode mate?

  • Cheers peds its mctv in barbados they use rqcs out here and wanted to get oscam working. It works fine with rqcs but Rqcs uses the secondary key method so doesn't need the boxkey. I have the rsa dump of 96 bytes but am now doubious of the boxkey. I have moved on since first post and am getting this now which tells me the boxkey is wrong as I know the rsa is good as it wiorks with rqcs. How to get the boxkey is my next challenge..


    [08/11/2012 15:17:26] - 15:17:26 143EE80 r mctv [pcsc] PCSC was opened with handle: -369033216
    [08/11/2012 15:17:26] - 15:17:26 143EE80 r mctv [pcsc] card detected
    [08/11/2012 15:17:27] - 15:17:27 143EE80 r mctv [pcsc] ATR: 3F FF 95 00 FF 91 81 71 FE 47 00 44 4E 41 53 50 31 34 32 20 52 65 76 47 30 32 16
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] detect native nagra card
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] type: NAGRA, caid: 1802, IRD ID: ############
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] ProviderID: 00 00 1C 01
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] active to: 2012/12/21 11:59
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] -----------------------------------------
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |id |tier |valid from |valid to |
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] +----+--------+------------+------------+
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |1D01|0993 |2012/06/05 |2012/08/06 |
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |1D01|074F |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |1D01|09F4 |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |1D01|09F3 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |1D01|0753 |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |1D01|0756 |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |1D01|09F6 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:28] - 15:17:28 143EE80 r mctv [pcsc] |1D01|09F1 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|09F5 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|087E |2012/06/05 |2012/08/06 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|0754 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|0885 |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|09F7 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|0884 |2012/06/05 |2012/08/06 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|09F2 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|0755 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|0886 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|087F |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|087D |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] |1D01|0752 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] -----------------------------------------
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] Negotiate sessionkey was not successfull! Please check rsa key and boxkey
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] card system not supported
    [08/11/2012 15:17:29] - 15:17:29 143EE80 r mctv [pcsc] Normal mode failed, reverting to Deprecated Mode
    [08/11/2012 15:17:30] - 15:17:30 143EE80 r mctv [pcsc] ATR: 3F FF 95 00 FF 91 81 71 FE 47 00 44 4E 41 53 50 31 34 32 20 52 65 76 47 30 32 16
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] detect native nagra card
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] type: NAGRA, caid: 1802, IRD ID: ############
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] ProviderID: 00 00 1C 01
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] active to: 2012/12/21 11:59
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] -----------------------------------------
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |id |tier |valid from |valid to |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] +----+--------+------------+------------+
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|0993 |2012/06/05 |2012/08/06 |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|074F |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|09F4 |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|09F3 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|0753 |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|0756 |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|09F6 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|09F1 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:31] - 15:17:31 143EE80 r mctv [pcsc] |1D01|09F5 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|087E |2012/06/05 |2012/08/06 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|0754 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|0885 |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|09F7 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|0884 |2012/06/05 |2012/08/06 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|09F2 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|0755 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|0886 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|087F |2010/02/25 |2012/08/06 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|087D |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] |1D01|0752 |2010/02/25 |2012/12/21 |
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] -----------------------------------------
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] Negotiate sessionkey was not successfull! Please check rsa key and boxkey
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] card system not supported
    [08/11/2012 15:17:32] - 15:17:32 143EE80 r mctv [pcsc] card initializing error
    [08/11/2012 15:17:33] - 15:17:33 0 s init for all local cards done
    [08/11/2012 15:17:33] - 15:17:33 0 s anti cascading disabled

  • Big favour guys....I have just read that the Boxkey is generated from an xor of Y1 and Y2 in the RSA key see below....
    II II II II XX XX XX XX XX XX XX XX XX XX Y1 Y1 Y1 Y1 Y1 Y1 Y1 Y1
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK SK
    # Y2 Y2 Y2 Y2 Y2 Y2 Y2 Y2 CS CS


    Can someone who has it running give that a go and see if the answer matches your boxkey. I have tried this using hex calculator and used the result as the boxkey but it still says "check rsa and boxkey" Cheers guys its simple to do just select scientific calculatoe then hex radio button then qword radio button.n top box paste first 8 bytes (Y1) press xor then paste second 8 bytes (Y2) and press = that should give you the BK well thats the theory Lol.

OSCam Support Forum

Configs, discussion, downloads and guides for OSCam Softcam.

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!