Panasonic Lumix FT1 (TS1)

hm62

2

« on: 22 / September / 2009, 15:05:37 »

Advertisements

Hi all,

is there a chance to modify the firmware of the Lumix FT1, especially the recording time limit of 15 minutes in AVCHD format?

Thx

Logged

RaduP

926

Re: Panasonic Lumix FT1 (TS1)

« Reply #1 on: 23 / September / 2009, 00:01:40 »

No, CHDK only works on a subset of Canon cameras, and Panasonic cameras use a totally different system and probably CPU.

Logged

mx3

372

Re: Panasonic Lumix FT1 (TS1)

« Reply #2 on: 23 / September / 2009, 09:32:13 »

Quote from: hm62 on 22 / September / 2009, 15:05:37

is there a chance to modify the firmware of the Lumix FT1...?

until someone manages to decrypt their's firmware it is impossible to tell.
I did some searching on this subject and did not find any information.
Also I did some analysis of firmware files and it shows there is possibility to decrypt it.
I have analysed following files : DLX4_120.bin LX3__110.bin TS1__110.bin TZ7__120.bin
FT1__110.bin LX3__120.bin TS1__120.bin ZS3(TZ7)__110.bin
FT1__120.bin LX3__130.bin TZ7__110.bin ZS3(TZ7)__120.bin
But I see no point in further investigation because there are little number of models which have same firmware structure.
and main point is - I don't have any of these models :-)

« Last Edit: 23 / September / 2009, 09:34:02 by mx3 »

Logged

skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler

hm62

2

Re: Panasonic Lumix FT1 (TS1)

« Reply #3 on: 27 / September / 2009, 16:18:28 »

Hi mx3,

the result of your analysis sounds interesting.

If you think it would be possible to modify the firmware, it would be nice if you can give me some hints how to decrypt the firmware, because I'm not familiar with these things.

Then I will see if I can do anything.

The main thing for me is only to change the record time limit.

Thx

Logged

mx3

372

Re: Panasonic Lumix FT1 (TS1)

« Reply #4 on: 29 / September / 2009, 11:18:30 »

First of all I spent not very much time for analysis.
I'm not sure I can explain all things even to myself which came to me when I compared files.
I'm not cryptanalyst at all so don't take all I say as a last truth...
Also some time time passed so I maybe forgot something.
I will try to explain my declaration about possibility of decryption.

comparing of twin-brothers (FT1 vs TS1) gives as rules #1 and #2:
rule#1: bytes 0x40-0x4F are not decryption key because begining block is very big(~80kb) and almost identical. actually it is a bit complicated and contradictory conclusion which can be not true.

rule#2: encryption algorithm is "very" simple. input data stream does not affect further encrypted data. only 4 bytes in first encrypted block ( first 80kb) are different which lead as to think about FT and TS...
000210 d4 98 2d e8 34 27 36 2e bf f6 38 56 73 b7 bf 38 |
000210 d4 98 2d e8 34 27 36 2e ad cf 38 56 73 b7 bf 38

004e00 f5 3a a9 10 73 bc b1 fa 10 77 ce 29 f6 26 11 d6
004e00 f5 3a a9 10 73 bc b1 fa 10 77 ce 29 e4 1f 11 d6
I have given this fact very little thought actually also it can mean very big advantage in decryption.
it can give some hints about encryption block size.

Also comparison of subsequent firmware update files also gives some hints ( so I dont actually remember which :-))...

Logged

skype: max_dtc. ICQ: 125985663, email: win.drivers(at)gmail, eVB decompiler