Automotive Seed-Key Algorithm Reverse-Engineering
Budget: €250 – €750 EUR
My goal is to understand and reproduce its seed-key security algorithm so I can calculate valid keys locally without querying the vehicle. Its a Motorola MPC55x-based ECU from year 2004-2010, which have some commons with the SAEJ1939 protocol.
Here is what I need back:
• A clear explanation of the algorithm’s logic and any relevant constants
• Working code (C or Python preferred) that converts an arbitrary seed to the correct key
• A short test sheet showing that your routine matches the ECU’s responses for at least five seeds I provide
If reversing shows multiple possible variants, document each branch and note how to detect which one is active. Turn-around time is flexible but please outline how long you expect for each phase—initial analysis, implementation, and validation—so I can plan my bench sessions accordingly.
If you bid into this project, and have a previous history of reverse engineering this type of problem, i will send you:
3x seed key pairs.
3x CAN trace of full session
3X BDM flash backup of ECU matching CAN traces.
I will be avaliable to assist in any way i can.
Here is what I need back:
• A clear explanation of the algorithm’s logic and any relevant constants
• Working code (C or Python preferred) that converts an arbitrary seed to the correct key
• A short test sheet showing that your routine matches the ECU’s responses for at least five seeds I provide
If reversing shows multiple possible variants, document each branch and note how to detect which one is active. Turn-around time is flexible but please outline how long you expect for each phase—initial analysis, implementation, and validation—so I can plan my bench sessions accordingly.
If you bid into this project, and have a previous history of reverse engineering this type of problem, i will send you:
3x seed key pairs.
3x CAN trace of full session
3X BDM flash backup of ECU matching CAN traces.
I will be avaliable to assist in any way i can.