Tytera MD-380 reverse engineering effort

[Robert Ehresman]

Folks:

I'm wondering if the FreeDV/CODEC2 crowd has been following the MD-380 hacking activities?

There is a group working on the MD-380, an inexpensive DMR radio, and several closely related models with other branding (Retevis is one). They have learned how to replace the OEM firmware on these radios, and there is now a repository of MD-380 Tools, and some experimental firmware loads such as a promiscuous mode DMR scanner.

These radios use STM32 processors, which I believe is one platform that has been used for CODEC2. They also have an AMBE chip.

There has been some speculation that as these radios give up their secrets, it may be possible to develop firmware compatible with DSTAR or System Fusion or P25 or other AMBE based waveforms.

It occurs to me that these radios might also have the resources to host a CODEC2 firmware and provide a basis or platform for a VHF/UHF waveform.

Googling "MD-380 Tools" should get one plenty of links to get started learning about this activity.

73;
Bob KV4PC

[Andy W]

The MD380 schematic I have does not have an AMBE chip...

AMBE is decoded by a library in the STM32F405 which is hardware locked by U307, HR_V3000S which is an AES-128 encryption chip.

Andy.

--
You received this message because you are subscribed to the Google Groups "digitalvoice" group.
To unsubscribe from this group and stop receiving emails from it, send an email to digitalvoice...@googlegroups.com.
To post to this group, send email to digita...@googlegroups.com.
Visit this group at https://groups.google.com/group/digitalvoice.
For more options, visit https://groups.google.com/d/optout.

[Luis Bernal]

Related: https://github.com/travisgoodspeed/md380tools/issues/44#issuecomment-216809079

I've been thinking about the possiblity of replacing the AMBE codec with a CODEC2 on the tytera, it should be doable and the DMR standard supports that, you could even use the DMR repeaters, as they are codec-agnostic (most of them), but I simply do not have time to commit to this task.

[Tony Langdon]

On 20/05/2016 8:19 PM, Luis Bernal wrote:
> Related: https://github.com/travisgoodspeed/md380tools/issues/44#issuecomment-216809079
>
> I've been thinking about the possiblity of replacing the AMBE codec with
> a CODEC2 on the tytera, it should be doable and the DMR standard
> supports that, you could even use the DMR repeaters, as they are
> codec-agnostic (most of them), but I simply do not have time to commit
> to this task.

The repeater maybe codec agnostic, but the radios aren't. You'd want to
have a TG assigned for codec2, otherwise it could be a real mess.


--
73 de Tony VK3JED/VK3IRL
http://vkradio.com

[Andy W]

The AMBE library is actually a licensed DVSI one...

These radios - and there are quite a few variants on the market are based around the PX700/780 and there are quite a number of PCB revisions out there!