fi2 encoder/decoder - page 6 - DryOS Development - CHDK Forum  

fi2 encoder/decoder

  • 100 Replies
  • 67037 Views
*

Offline fe50

  • ******
  • 3147
  • IXUS50 & 860, SX10 Star WARs-Star RAWs
    • fe50
Re: fi2 encoder/decoder
« Reply #50 on: 15 / February / 2009, 06:29:17 »
Advertisements
i used the CHDK-Shell with the trunk (707) version. The fi2.inc.txt was renamed to fi2.inc and edited with the right keys.
In the GUI under "compile options" i set the "OPT_FI2" flag. After compiling for the ixus80 (101a) i take the ps.fi2
of the archive out to the root of my SD-Card (removed the DISKBOOT.BIN). After turn the Camera on i don't so the menuentry for firmware-update (in both modes play/record).

The Firmware update menu item should be available, when a file named "PS.FI2" is placed on the card's root dir & the camera is started in playback mode (only the presence of the file is necessary, the content will be not checked at this moment).
When you switch between playback and record mode, the menu item will not be available.

After activating the firmware update procedure the camera checks the PS.FI2 file - if it is not correctly encrypted or has the wrong P-ID number the file will be rejected with an error message.

So if you don't have the fw update menu item, something is going wrong when you store the file to your memory card...is there a difference between locked / unlocked card ?

BTW - there's no need to delete the diskboot.bin, you can also use the fw update method also from a running CHDK...

Re: fi2 encoder/decoder
« Reply #51 on: 15 / February / 2009, 07:41:41 »
@FE50

Ahhh my mistake. It works very well in my ixus80 now !

Thanks  :D :D :D :) :) :)

Cu
Nos

*

Offline snc

  • **
  • 64
    • vware
Re: fi2 encoder/decoder
« Reply #52 on: 06 / March / 2009, 08:37:28 »
After inspecting, it seems like the ixus 970 has a different KEY but the same IV as the G9/A720/SX100? In the firmware dump, the KEY is at 0x7E33E0, and the IV at 0x305088. Could somebody please take a look at it and confirm? Maybe I'm making a major mistake here... Values taken from ixus970_sd890-100c.

Re: fi2 encoder/decoder
« Reply #53 on: 28 / June / 2009, 21:51:14 »
we havent yet decided how to distribute the keys, however in this very thread here there is a detailed explanation how to get the keys from the dumps.

First key for a590 101b easy, but second key is not obvious to me, I'm missing something?

Need to find keys on a580 101b too, has same (similar?) first key, can't see the other :(

Help!

Edit: I've got IDA on windoze, and set up linux compile environment, can't make a ps.fi2 for a590 101b yet.
Edit: found other key, does the fi2.inc want what data, file offset, 16 byte key, address?
« Last Edit: 28 / June / 2009, 22:24:13 by scattered »


*

Offline reyalp

  • ******
  • 14082
Re: fi2 encoder/decoder
« Reply #54 on: 28 / June / 2009, 22:42:05 »
key as a sequence of hex digits, eg. FI2KEY=FEEDBABEDEADBEEF...
Don't forget what the H stands for.

Re: fi2 encoder/decoder
« Reply #55 on: 28 / June / 2009, 23:30:30 »
Thanks reyalp, got a running ps.fi2 on the a590 with good timestamp, unlike when I thought I had compiled chdk other day.  :)

Re: fi2 encoder/decoder
« Reply #56 on: 20 / August / 2009, 21:09:16 »
Hi,

I need a little shove in the right direction regarding the "KEY" and "IV" values. I've found a dump of my camera (SD950) but the addresses specified in this thread seem to be off the end of the image. Perhaps an incorrect image?

Could someone briefly outline how to find these values? Apologies for being a noob here!

Thanks

*

Offline reyalp

  • ******
  • 14082
Re: fi2 encoder/decoder
« Reply #57 on: 20 / August / 2009, 21:19:09 »
Hi,

I need a little shove in the right direction regarding the "KEY" and "IV" values. I've found a dump of my camera (SD950) but the addresses specified in this thread seem to be off the end of the image. Perhaps an incorrect image?

Could someone briefly outline how to find these values? Apologies for being a noob here!

Thanks
See this post earlier in the thread: http://chdk.setepontos.com/index.php/topic,2995.msg28117.html#msg28117

If FFFF0000 is past the end of the dump, and the dump is loaded at the correct address, then it is indeed short dump. Many of the early dumps were trimmed like this, because people didn't realize there might be useful stuff there.

If you have an SD950, I'd suggest making a full dump yourself.

Alternately, the SD950 is known to use the same keys as other early digic III cams (see platform/ixus960_sd950/sub/100d/makefile.inc KEYSYS=d3) so if you have a full dump of any other camera that uses the same keys, you can get it from that.
Don't forget what the H stands for.


Re: fi2 encoder/decoder
« Reply #58 on: 21 / August / 2009, 15:41:53 »
Thanks,

I dumped the fw from the SD950. Seems to have the right signature in the beginning and is 7EFFFD bytes long. Bit of a trick with an 8GB memory card.

How do I figure out what the correct load address for the image?

*

Offline fe50

  • ******
  • 3147
  • IXUS50 & 860, SX10 Star WARs-Star RAWs
    • fe50
Re: fi2 encoder/decoder
« Reply #59 on: 21 / August / 2009, 16:21:03 »
« Last Edit: 21 / August / 2009, 16:22:58 by fe50 »

 

Related Topics