E68 for CT6 V checksum

[e4life]

Has anyone messed with the E68 ECM they used in the ct6 v and now the C8 z06? I’ve been playing with the bins and looking through them for torque coefficient tables, DOD delete, and some DTCs I’d like to delete. I’m trying to find a checksum for it, doesn’t seem to have the CVN included with the checksum like the e92. It looks eerily familiar to the Bosch F83 M9r ECM on the Renault Trafic. I really believe that big time tuning company that allegedly cracked the E99 ECM, won’t get as lucky as they did cracking the E68, hope I’m wrong because if they crack that one the one on the CT6 V should be cake to provide a user friendly tuning solution. Currently using an engineering tool from GM to shoot cals to the E68.

[Tazzi]

I have not played with an E68 yet, but looks like its used in the 2019ish vehicles from what I can lookup online?

If so, its in the era of ECUs where the bootloader have to be modified to allow custom tuning, just like E90/E93/E99/E41 ect.

[kur4o]

Do you have a complete bin to look at.

[e4life]

Do you have a complete bin to look at.

I do actually
I'll try to attach it

2019 CT6 V ECM.zip

(1.73 MiB) Downloaded 166 times

[e4life]

I have not played with an E68 yet, but looks like its used in the 2019ish vehicles from what I can lookup online?

If so, its in the era of ECUs where the bootloader have to be modified to allow custom tuning, just like E90/E93/E99/E41 ect.

I wonder if it has a rolling seed/key deal like the e99, even though its kinda pre-Global B. I had an idea to get it unlocked long enough to possibly program using DPS without needing to have the gm server. Maybe using a Y-cable while using sps2 to unlock it right before a programming event and then send FE 01 continuously to keep it unlocked, then on the other end of y-cable have a GM mdi on another laptop with GM DPS start a programming event, only thing i need to figure out the checksum on the E68 somehow after i run it through Winols or ECM Titanium and find some of the maps I'm looking for, definitely have my work cut out for me but I'll take any help I can get, but I think this will be a good distraction for me while my son is going through Chemo fighting Leukemia.

[Gatecrasher]

I'm sorry to hear about your son. My mom just got done with 6 months of chemo for lymphoma. It wasn't as bad as we were all afraid it would be. Hopefully the same thing happens for your son.

I don't know how much this helps, but the E68 is externally identical to to the Ford Ti-VCT controllers. The 3.3L V6 and 5.0 Coyote V8. Might be others.

https://www.ebay.ca/itm/195254913211
https://www.ebay.com/itm/285790928897

I don't know how much would directly cross over between the two, but maybe there's enough to give you some insights.

With that said, I thought these used cryptographically signed firmware like the E99? Checksums won't be enough to fix it. That's why Taz mentioned modifying the bootloader.

[e4life]

I'm sorry to hear about your son. My mom just got done with 6 months of chemo for lymphoma. It wasn't as bad as we were all afraid it would be. Hopefully the same thing happens for your son.

I don't know how much this helps, but the E68 is externally identical to to the Ford Ti-VCT controllers. The 3.3L V6 and 5.0 Coyote V8. Might be others.

https://www.ebay.ca/itm/195254913211
https://www.ebay.com/itm/285790928897

I don't know how much would directly cross over between the two, but maybe there's enough to give you some insights.

With that said, I thought these used cryptographically signed firmware like the E99? Checksums won't be enough to fix it. That's why Taz mentioned modifying the bootloader.

Hey nice find on that Ford ECU its damn near identical to the E68! There's rumors GM DPS can program Global B without being on the GM server.

[Gatecrasher]

CT6-V should still be Global A. It would use the old fixed 5 byte seed/key and 8 byte CAN. Just like the E99 in the 2019 ZR1. Programming it shouldn't be a problem, IF you can deal with the firmware signatures.

Global B introduced the rolling 12(?) byte seed/key, CAN-FD, and CAN message authentication, among other things.

Just like the ZR1 E99 didn't get people into the C8 E99, I doubt the CT6 ECM will help all that much with the C8Z and similar cars.

I just read the rumors about the Global B security exploit/bypass. Could be useful for repair work, but it still won't help with the firmware signing.

[radrace19]

CT6-V should still be Global A. It would use the old fixed 5 byte seed/key and 8 byte CAN. Just like the E99 in the 2019 ZR1. Programming it shouldn't be a problem, IF you can deal with the firmware signatures.

Global B introduced the rolling 12(?) byte seed/key, CAN-FD, and CAN message authentication, among other things.

Just like the ZR1 E99 didn't get people into the C8 E99, I doubt the CT6 ECM will help all that much with the C8Z and similar cars.

I just read the rumors about the Global B security exploit/bypass. Could be useful for repair work, but it still won't help with the firmware signing.

I think you might be correct. The E68 in the CT6-V is different from the one in the C8 Z06 E68. Just like the E99 in the 2019 ZR1 is different from the E99 in the 2020 Stingray.

[Gatecrasher]

I was just looking at the utility file for this thing. It doesn't have an embedded reflash kernel. That's different. It's Global-A 5 byte security though.