karl48
2004-05-20, 16:31
3-4 years ago conax was hacked and sold as an expensive pirate card called "DREAMCARD".
Last summer this pirate card was hacked by a small group, and they manage to readout all of the memory data, including valid MK & SA. This last hack was kept secret until december 29th 2002, when conax finally got its public "release".
Canal Digital have been aware of the old pirate card, and what MK were in it, but they didn't bother to rush into any anti-piracy measure, but instead tried to find out how they extracted the data in the first place. They found there were serious bugs with the (old) official cardseries, built on a siemens chip. In addition to that, CD wanted to introduce new interactive services, which the old card did not support. So since last autumn (before conax became public), CD have been changing the old cards with new ones that have new chips, new MK's, and better support for their interactive stuff.
CD know that the reason people can see CD's encrypted channels with SI/BC/m2/softcam, is because of ONE MK that could give us the operational key in use.
By looking at the EMM's for this SA, we can clearly see that they have stopped using it. The only thing sent out in these EMM's, are the index 21 key. For other SA's, they also send out subscription information and (sometimes) the index 20 key.
In other words, CD will still use the same conax cas3 system, but their smartcards have new (secure) chips, and new MK's.
The conax system has never been hacked public, only some pirate smartcards have been hacked.
Mabe the next generation Dreamcards where never send out because the old Dreamcard got hacked ?
Don't expect to see new Conax keys before the "new" orginal CD cards has been hacked. It can take years !!
Last summer this pirate card was hacked by a small group, and they manage to readout all of the memory data, including valid MK & SA. This last hack was kept secret until december 29th 2002, when conax finally got its public "release".
Canal Digital have been aware of the old pirate card, and what MK were in it, but they didn't bother to rush into any anti-piracy measure, but instead tried to find out how they extracted the data in the first place. They found there were serious bugs with the (old) official cardseries, built on a siemens chip. In addition to that, CD wanted to introduce new interactive services, which the old card did not support. So since last autumn (before conax became public), CD have been changing the old cards with new ones that have new chips, new MK's, and better support for their interactive stuff.
CD know that the reason people can see CD's encrypted channels with SI/BC/m2/softcam, is because of ONE MK that could give us the operational key in use.
By looking at the EMM's for this SA, we can clearly see that they have stopped using it. The only thing sent out in these EMM's, are the index 21 key. For other SA's, they also send out subscription information and (sometimes) the index 20 key.
In other words, CD will still use the same conax cas3 system, but their smartcards have new (secure) chips, and new MK's.
The conax system has never been hacked public, only some pirate smartcards have been hacked.
Mabe the next generation Dreamcards where never send out because the old Dreamcard got hacked ?
Don't expect to see new Conax keys before the "new" orginal CD cards has been hacked. It can take years !!