GM 5 byte seed key generator

User avatar
Tazzi
Posts: 3422
Joined: Thu May 17, 2012 8:53 pm
cars: VE SS Ute
Location: WA
Contact:

Re: GM 5 byte seed key generator

Post by Tazzi »

JandJSpeedShop wrote: Hmmm forgot the rest of it:

E92A: 2B1EFAE706
Have a go with F4B0B44F6A
Your Local Aussie Reverse Engineer
Contact for Software/Hardware development and Reverse Engineering
Site:https://www.envyouscustoms.com
Mob:+61406 140 726
Image
ecuunlock
Posts: 17
Joined: Mon Jun 11, 2018 12:36 pm

Re: GM 5 byte seed key generator

Post by ecuunlock »

E92A: 2B1EFAE706

key = F4B0B44F6A
dmaxben
Posts: 16
Joined: Thu Feb 19, 2015 12:54 am
cars: Duramax

Re: GM 5 byte seed key generator

Post by dmaxben »

Hi, does your tool work for 5-byte device control keys too? Or just 5-byte programming keys?

Here are some valid device control seed/key pairs... I can provide more valid pairs if needed.

seed...................................key
15 56 17 BC 01..............3C DD 23 18 A2

BB 53 2B 4F 01............13 7B 24 C0 20
User avatar
Tazzi
Posts: 3422
Joined: Thu May 17, 2012 8:53 pm
cars: VE SS Ute
Location: WA
Contact:

Re: GM 5 byte seed key generator

Post by Tazzi »

dmaxben wrote:Hi, does your tool work for 5-byte device control keys too? Or just 5-byte programming keys?

Here are some valid device control seed/key pairs... I can provide more valid pairs if needed.

seed...................................key
15 56 17 BC 01..............3C DD 23 18 A2

BB 53 2B 4F 01............13 7B 24 C0 20
What is the vehicle, vin and module these came from?
The above seeds use the newer 01 ending, I can still calculate them but need to know details about the module to identify algorithm number to use.
Your Local Aussie Reverse Engineer
Contact for Software/Hardware development and Reverse Engineering
Site:https://www.envyouscustoms.com
Mob:+61406 140 726
Image
dmaxben
Posts: 16
Joined: Thu Feb 19, 2015 12:54 am
cars: Duramax

Re: GM 5 byte seed key generator

Post by dmaxben »

Tazzi wrote:
dmaxben wrote:Hi, does your tool work for 5-byte device control keys too? Or just 5-byte programming keys?

Here are some valid device control seed/key pairs... I can provide more valid pairs if needed.

seed...................................key
15 56 17 BC 01..............3C DD 23 18 A2

BB 53 2B 4F 01............13 7B 24 C0 20
What is the vehicle, vin and module these came from?
The above seeds use the newer 01 ending, I can still calculate them but need to know details about the module to identify algorithm number to use.

The module is the GM Global-A BCM. 2017+ 5-byte, device control key.

The programming key for these BCM's is different algo. The programming seed ends in the more common "06". But the device control key ends in 01.
dmaxben
Posts: 16
Joined: Thu Feb 19, 2015 12:54 am
cars: Duramax

Re: GM 5 byte seed key generator

Post by dmaxben »

Tazzi wrote:
dmaxben wrote:Hi, does your tool work for 5-byte device control keys too? Or just 5-byte programming keys?

Here are some valid device control seed/key pairs... I can provide more valid pairs if needed.

seed...................................key
15 56 17 BC 01..............3C DD 23 18 A2

BB 53 2B 4F 01............13 7B 24 C0 20
What is the vehicle, vin and module these came from?
The above seeds use the newer 01 ending, I can still calculate them but need to know details about the module to identify algorithm number to use.

Here are some other BCM device control seed key pairs


VIN: 1GC1KWEY4HF193374
BCM programming seed: A3A3859E06
BCM programming key: F93006ADCE

BCM device control seed: 0EDB0E680C
BCM device control key: 6760BEE069

==========================================================

VIN: 1GC1KUEY2KF163981
BCM programming seed: DA31547F06
BCM programming key: 0C41ACBE44

BCM device control seed: D7B02EBA0C
BCM device control key: 5A6DCF4086
dmaxben
Posts: 16
Joined: Thu Feb 19, 2015 12:54 am
cars: Duramax

Re: GM 5 byte seed key generator

Post by dmaxben »

It seems some of the 2017+ BCM's use the seed ending in 0C, and others use the seed engine in 01...?

Heres another device control seed/key pair for a BCM.

VIN: 1GC1KWEY3JF171209
Device control seed: 1CA30AD90C
Device control Key: 623675209E

Programming seed: 70BDDB5006
Programming key: C4FC0CBBF1
User avatar
Tazzi
Posts: 3422
Joined: Thu May 17, 2012 8:53 pm
cars: VE SS Ute
Location: WA
Contact:

Re: GM 5 byte seed key generator

Post by Tazzi »

dmaxben wrote:It seems some of the 2017+ BCM's use the seed ending in 0C, and others use the seed engine in 01...?

Heres another device control seed/key pair for a BCM.

VIN: 1GC1KWEY3JF171209
Device control seed: 1CA30AD90C
Device control Key: 623675209E

Programming seed: 70BDDB5006
Programming key: C4FC0CBBF1
When you say "device Control", are you referring to the "AE" control mode? Or is it a different mode you are referring to?
I know the programming 5byte algo, thats the standard 06 type.
Your Local Aussie Reverse Engineer
Contact for Software/Hardware development and Reverse Engineering
Site:https://www.envyouscustoms.com
Mob:+61406 140 726
Image
dmaxben
Posts: 16
Joined: Thu Feb 19, 2015 12:54 am
cars: Duramax

Re: GM 5 byte seed key generator

Post by dmaxben »

Tazzi wrote:
dmaxben wrote:It seems some of the 2017+ BCM's use the seed ending in 0C, and others use the seed engine in 01...?

Heres another device control seed/key pair for a BCM.

VIN: 1GC1KWEY3JF171209
Device control seed: 1CA30AD90C
Device control Key: 623675209E

Programming seed: 70BDDB5006
Programming key: C4FC0CBBF1
When you say "device Control", are you referring to the "AE" control mode? Or is it a different mode you are referring to?
I know the programming 5byte algo, thats the standard 06 type.
Yes, the mode-AE device control.

On 2016 and older BCM operating system, the AE device control (to command lights, etc) is allowed any time.

On 2017+ BCM operating system, the AE device control is disabled when engine is running and/or vehicle speed is above 0.

If you request device control security access (02 27 03, BCM returns device control seed....then send the proper device control key with 07 27 04 AA BB CC DD EE), the BCM will then allow free operating of mode-AE device control with the engine running.

Is it possible to figure out the device control seed/key algorithm?
User avatar
Tazzi
Posts: 3422
Joined: Thu May 17, 2012 8:53 pm
cars: VE SS Ute
Location: WA
Contact:

Re: GM 5 byte seed key generator

Post by Tazzi »

dmaxben wrote:
Tazzi wrote:
dmaxben wrote:It seems some of the 2017+ BCM's use the seed ending in 0C, and others use the seed engine in 01...?

Heres another device control seed/key pair for a BCM.

VIN: 1GC1KWEY3JF171209
Device control seed: 1CA30AD90C
Device control Key: 623675209E

Programming seed: 70BDDB5006
Programming key: C4FC0CBBF1
When you say "device Control", are you referring to the "AE" control mode? Or is it a different mode you are referring to?
I know the programming 5byte algo, thats the standard 06 type.
Yes, the mode-AE device control.

On 2016 and older BCM operating system, the AE device control (to command lights, etc) is allowed any time.

On 2017+ BCM operating system, the AE device control is disabled when engine is running and/or vehicle speed is above 0.

If you request device control security access (02 27 03, BCM returns device control seed....then send the proper device control key with 07 27 04 AA BB CC DD EE), the BCM will then allow free operating of mode-AE device control with the engine running.

Is it possible to figure out the device control seed/key algorithm?
Ohhhh I see. 27 03 is actually called engineer/manufacture access. I was not aware of the 2017+ locking out after moving though, thats a new one.
The algorithm is on GM's servers, but.. can generate the required seeds by simulating a module to GM though, so I can give that a go.
Your Local Aussie Reverse Engineer
Contact for Software/Hardware development and Reverse Engineering
Site:https://www.envyouscustoms.com
Mob:+61406 140 726
Image
Post Reply