view rvinterf/etmsync/pirimei.c @ 854:74331b35b1da

ringtools/examples/ring.pwt: PWT equivalent of ring.buz
author Mychaela Falconia <falcon@freecalypso.org>
date Tue, 09 Nov 2021 16:39:52 +0000
parents 3d148edb87c2
children
line wrap: on
line source

/*
 * Reading and decryption of Pirelli's factory IMEI record
 */

#include <sys/types.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <strings.h>
#include "cl_des.h"
#include "exitcodes.h"

u_char pirelli_imeisv[8];

get_pirelli_imei()
{
	u_char ciphertext[2][8], dieid_key[8], decrypted[2][8];
	int rc;
	static char failmsg[] =
	"decryption failed: no valid IMEI record or incompatible firmware\n";

	printf("Requesting Calypso die ID\n");
	rc = do_dieid_read(dieid_key);
	if (rc)
		return(rc);
	printf("Reading IMEI record in Pirelli's factory data block\n");
	rc = do_memory_read(0x027F0504, ciphertext, 16);
	if (rc)
		return(rc);
	cl_des(ciphertext[0], dieid_key, decrypted[0], CL_DES_DECRYPTION);
	cl_des(ciphertext[1], dieid_key, decrypted[1], CL_DES_DECRYPTION);
	if (bcmp(decrypted[1], dieid_key, 8)) {
		printf(failmsg);
		return(ERROR_TARGET);
	}
	bcopy(decrypted[0], pirelli_imeisv, 8);
	printf("Factory IMEISV is %02X%02X%02X%02X-%02X%02X%02X-%02X\n",
		pirelli_imeisv[0], pirelli_imeisv[1], pirelli_imeisv[2],
		pirelli_imeisv[3], pirelli_imeisv[4], pirelli_imeisv[5],
		pirelli_imeisv[6], pirelli_imeisv[7]);
	return(0);
}