Mototrbo Basic Privacy Key

[Rafael Gama PU2MMS - PX2Z8630]

Olá a todos. Eu estou tentando descobrir como funciona a chave de criptografia Basic. Eu sei que vai de 1 a 255 chaves.

No caso de eu ter um rádio motorola dgm6100 e gostaria de apenas ouvir uma frequência que utiliza BP.

Eu encontrei uma sequência de teclas, eu gostaria de saber de amigos se é isso que eu tenho que configurar no meu rádio:

1 1F00

2 E300

3 FC00

4 2503

5 3A03

6 C603

7 D903

8 4A05

9 5505

10 A905

11 B605

12 6F06

13 7006

14 8C06

15 9306

16 2618

17 3918

18 C518

19 DA18

20 031B

21 1C1B

22 E01B

23 FF1B

24 6C1D

25 731D

26 8F1D

27 901D

28 491E

29 561E

30 AA1E

31 B51

32 4B28

33 5428

34 A828

35 B728

36 6E2B

37 712b

38 8D2B

39 922B

40 012D

41 1E2D

42 E22D

43 FD2D

44 242E

45 3B2E

46 C72E

47 D82E

48 6D30

49 7230

50 8E30

51 9130

52 4833

53 5733

54 AB33

55 B433

56 2735

57 3835

58 C435

59 DB35

60 0236

61 1D36

62 E136

63 FE36

64 2B49

65 3449

66 C849

67 D749

68 0E4A

69 114A

ED4 a 70

71 F24A

72 614c

73 AE4C

74 824C

75 9D4C

76 444F

77 5B4F

78 A74F

79 B84F

80 0D51

81 1251

82 EE51

83 F151

84 2852

85 3752

86 CB52

87 D452

88 4754

89 5854

90 A454

91 BB54

92 6257

93 7D57

94 8157

95 9E57

96 6061

97 7F61

98 8361

99 9C61

100 4562

101 5A62

102 A662

103 B962

104 2A64

105 3564

106 C964

107 D664

108 0F67

109 1067

110 Ec67

111 F367

112 4679

113 5979

114 A579

115 BA79

116 637A

117 7C7A

118 807A

119 9F7A

120 0C7C

121 137C

122 EF7C

123 F07C

124 297F

125 367F

126 CA7F

127 D57F

128 4D89

129 5289

130 AE89

131 B189

132 688A

133 778A

134 8B8A

135 948A

136 078C

137 188C

138 E48C

139 FB8C

140 228F

141 3D8F

142 C18F

143 DE8F

144 6B91

145 7491

146 8891

147 9791

148 4E92

149 5192

150 AD92

151 B292

152 2194

153 3E94

154 C294

155 DD94

156 0497

157 1B97

158 E797

159 F897

160 06A1

161 19a1

162 E5A1

163 FAA1

164 23A2

165 3CA2

166 C0A2

167 DFA2

168 4CA4

169 53A4

170 AFA4

171 B0A4

172 69A7

173 76A7

174 8AA7

175 95A7

176 20B9

177 3FB9

178 C3B9

179 DCB9

180 05BA

181 1ABA

182 E6BA

183 F9BA

184 6ABC

185 75BC

186 89BC

187 96BC

188 4FBF

189 50BF

190 ACBF

191 B3BF

192 66CO

193 79C0

194 85C0

195 9AC0

196 43C3

197 5CC3

198 A0C3

199 BFC3

200 2CC5

201 33C5

202 CFC5

203 DCO

204 09C6

205 16C6

206 EAC6

207 F5C6

208 84D0

209 85DF

210 8AD3

211 8BDC

212 B6D5

213 B7DA

214 B8D6

215 B9D9

216 FINA

217 D1D5

218 DED9

219 DFD6

220 E2DF

221 E3D0

222 CEPCD

223 EDD3

224 2DE8

225 32E8

226 CEE8

227 D1E8

228 08EB

229 17EB

230 de passagem

231 F4EB

232 67ED

233 78ED

234 84ED

235 9BED

236 42EE

237 5DEE

238 A1EE

BEEM a 239

240 0BF0

241 14F0

242 E8F0

243 F7F0

244 2EF3

245 31F3

246 CDF3

247 D2F3

248 41F5

249 5EF5

250 A2F5

251 BDF5

252 64F6

253 7BF6

254 87F6

255 98F6

No caso eu teria que colocar cada chave aqui: http://ap.imagensbrasil.org/image/0deVhI

No caso tenho 16 chaves de identificação. E eu teria que colocar 16 valores de ID de cada tecla assim: http://ap.imagensbrasil.org/image/0de5vn ??

Se não deu certo com essas 16 posições que eu teria que fazer 17-32 e assim vai. Veja: http://ap.imagensbrasil.org/image/0deIRj

Isto é como faço para configurar cada ID com uma chave pessoal?

E então nos canais que eu conectar-se a cada tecla? Http://ap.imagensbrasil.org/image/0deO5y

Http://ap.imagensbrasil.org/image/0deXJp

Http://ap.imagensbrasil.org/image/0deU0R

Http://ap.imagensbrasil.org/image/0debyG

Http://ap.imagensbrasil.org/image/0defRf

[gabri...@gmail.com]

Amigo, você conseguiu fazer funcionar ? Estou tentando no Anytone 878 sem sucesso.
Se puder me ajudar, agradeço muito!
Obrigado.

[Mark Potter]

Only on MD380. Will not work on any other type to my knowledge.

Scott.

[Thibaut]

Hi,

I own both (MD380 and D878UV), i can confirm that Motorola BP works on MD380, but not on D878 :( 

--
You received this message because you are subscribed to the Google Groups "md380tools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to md380tools+...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/C87E1BEA-7CAB-43FA-8FB2-2192CE3931DD%40gmail.com.

[Raúl Fernando Estrada Ramos]

como pudiste trabajar con md380 puedes explicarlo ? 

[Thibaut]

The custom firmware MD380toolz is able to decode BP if you enter the hex key (from number 1 to 255) in the enhanced privacy section of the CPS.

For example, if your motorola BP key is 11, the hex value to enter in CPS will be "B" (followed by 0, not F by default).

Regards

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/3b9066b3-4eeb-4d21-ba6a-a59fd3357021n%40googlegroups.com.

[Raúl Fernando Estrada Ramos]

ya lo intente pero no me permite utilizar el tyt con mi repetidor mi clave es la bp 140 pero no logro hacer que interactue el tyt  ¿en realidad si se puede ? 

[Mark Potter]

Have you tried converting the 140 to Hex, (8C). If you enter 8C into the enhanced privacy section of the CPS, see if that works. 

It does work however, finding the compatible tools is difficult because they taken this feature off the latest edition. 

If you can find a KD4Z original tools, you might have more luck. 

Good luck. 👍

Ps. If it’s not simplex, make sure the RX and TX are at least 12.5khz apart. 

Scott. 

On 9 Apr 2021, at 08:29, Raúl Fernando Estrada Ramos <lic.es...@gmail.com> wrote:

ya lo intente pero no me permite utilizar el tyt con mi repetidor mi clave es la bp 140 pero no logro hacer que interactue el tyt  ¿en realidad si se puede ? 

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/9a6ff7d4-d70b-453c-af3e-21d3d19e724dn%40googlegroups.com.

[Marco Boehm]

Alguem sabe onde consigo a senha do Siate, utiliza radio motorola, pra mim utilizar a tabela do amigo

[Craig Duffield]

Tried a BP Key of 1 in the new MD380Tools and Still Doesn't Work when using Key in Enhanced Key Section. Tried the Key With All Zeros in Front of KEY ID 1 and After 1 and Still No Clear Voice Still Encrypted.

[Mark Potter]

Convert the Key ID to hex and try that. 

Scott. 

On 3 May 2021, at 04:16, Craig Duffield <spook...@gmail.com> wrote:

Tried a BP Key of 1 in the new MD380Tools and Still Doesn't Work when using Key in Enhanced Key Section. Tried the Key With All Zeros in Front of KEY ID 1 and After 1 and Still No Clear Voice Still Encrypted.

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/6b9becee-792d-4401-9d81-e887cee44903n%40googlegroups.com.

[Craig Duffield]

The RX Signal that I want to Monitor NOT TX is Mototrbo BP Key 1. DSD in SDrsharp showed this. So on the CPS on MD380 using the Latest MD380tools. in The Privacy Enhanced I Enter the Key as all Zero's ending with 1. And Also Tried it in Reverse 1 followed by Zero's. Still Not un-encrypted Voice. Still Sounds Garbled. 
Any Ideas??

[Thibaut]

Hi,

BP key id shown in dsd is not the real number, it would have been too easy :D

If you don't know the BP key number you will have to try one by one, i'm afraid :/

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/050d1e3b-fc32-4a4b-9204-7ac05faf761en%40googlegroups.com.

[Vip Vip]

Hello, if alg-Ep keyID 155, this is 155 basic privacy key or not ?

[Thibaut]

Hello,

No, BP and EP are not the same, in EP the KeyID seen in DSD infos is the id arbitrary choosen by the programmer and defined in the codeplug, it just tells which pre-programmed key is used.

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/cbc20534-5ccc-46a5-b630-d97a5b808daen%40googlegroups.com.

[paul gautier]

Hi, 

could you share this running version of DSD that shows the BP key, please?

Kind regards

[The American Silverback]

Anything new on the Motorola Basic Encryption Key 1 debunk?   I have an Anytone 878 and have just begun researching this.

[Thibaut]

Hello,

Unfortunatly no. :/

I wanted to test on my D878UV, but the privacy section (not AES256 witch works great with Motorola radios) does not allow more than 4 caracters, so it is impossible to enter the full key corresponding to the BP code (for exemple, predefined BP Key 1 is equal to 1F001F001F0000).

But, as we talk in md380tools list, i can say that this firmware works great with BP Keys, we just have to enter the hex number of the key as discussed earlier ;)

Best Regards

Thibaut

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/a13ccf59-352e-4021-a521-3d86107af3cfn%40googlegroups.com.

[Mark Potter]

Thibaut, have you anything to extract a key from a dPMR RAW recording? 

On 8 Dec 2023, at 09:34, Thibaut <mcf...@gmail.com> wrote:



To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/CAA-SSmJ6y4pkFpSZRs4SPHTpFD%2Bi5TkBKjCE1bsZNz1F_Ozzrg%40mail.gmail.com.

[Thibaut]

Hello,

No, i'm sorry, i've never worked on this subject.

Regards

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/7C67ECD0-A6F8-4FDC-968D-E1FEE9B6420A%40gmail.com.

[james]

a new firmware was published on archive.org

voice crypt firmware which handle motorola basic privacy, rc2 ....

https://archive.org/details/voice-crypt-1.0a

[Thibaut]

Hi James,

Did never notice this FW, thanks for the share.

I will test it, especially BP Scan :P

--
You received this message because you are subscribed to the Google Groups "md380tools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to md380tools+...@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/96154f9f-f905-4d83-881c-672f8dd388f4n%40googlegroups.com.

[Thibaut]

I confirm the working of the BP scan.... ;) :P

The firmware is based on md380tools, but with extra functions ;)

(the volume bar i used to have is no longer there, but i don't care, it's only a detail ;))

Thanks again.

[C]

hello i have installed voice crypt i am looking for the frequency that the sdrsharp receives but in the md380 nothing sounds, the green light comes on as if it is receiving signal but nothing sounds what parameters can i change.

[Thibaut]

Hello,

Are you sure the DMR channel you are listening has no RAS activated ?

I guess the promiscuious mode is activated and the right slot configured ?

If using a SDR, do you have the possibility to see what DSDPlus writes when decoding this channel ?

To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/d9b0743e-848c-4c19-b5ed-1be1e8d4cb26n%40googlegroups.com.

[Mark Potter]

Make sure the RX & TX are at least 12.5 kHz apart IF your listening to a repeater. 

Scott. 

On 31 Jan 2024, at 13:14, Thibaut <mcf...@gmail.com> wrote:



To view this discussion on the web, visit https://groups.google.com/d/msgid/md380tools/CAA-SSmL8ziWojgfDwo8yT6tx%2BzJw12%2BCzp1QgpMxa4kGW81Odg%40mail.gmail.com.

[vselic]

Hello,

there is a high probability, the system is secured with RAS - Motorola feature. I have suggested several times, if developers can do something in a way, radio ignores crc checksum. If you look around the net you can get silly answers, that RAS is ignored only by motorola radio, scanners and SDR-s, which is not true. OPENGD77 system ignores ras, but on the other hand, it does not support any kind of encryption, as it is HAM oriented FW. Over and over, it is possible, that low budget radio can ignore RAS, it's not only MOTOROLA ones. If radio would ignore ras, than it would be definetely be a game changer, as many motorola systems are more and more secured with RAS - easy, cheap solution to make communication a little safer.

Best regards

četrtek, 1. februar 2024 ob 07:49:45 UTC+1 je oseba icatchc...@gmail.com napisala: