Is this Basic, Enhanced or AES Encryption...DMR MOTOTRBO

[phantomcrow]

This attachement is of a recorded DMR Slot 1 Color 7 transmission on VHF that was recorded today. Does anyone know what type encryption they are using here? I know its a DMR MOTOTRBO radio that can also transmit in analogue mode. Is it basic, enhanced or AES 256 bit encryption? I have listened to all three of these encryption protocols of samples and I cannot pick one. Thanks in advance

 

[Forts]

What did you record this with/from? If you are using DSD+ it'll tell you if it's BP or EP. Also to be properly analyzed you need a recording of the raw data, not the audio output.

 

[phantomcrow]

It's recorded from ezscan trx2. I have DSD but not savy enough to make it work. Yet anyway. How do I get a raw recording? Thank you

 

[Forts]

You need DSD+ for that unfortunately.... If you have an SDR dongle it's really not that difficult to get up and running, and there are lots of folks on here that would help you along the way. If you are looking to see more details about digital signals etc it's really the only way to go...

 

[phantomcrow]

You need DSD+ for that unfortunately.... If you have an SDR dongle it's really not that difficult to get up and running, and there are lots of folks on here that would help you along the way. If you are looking to see more details about digital signals etc it's really the only way to go...

I have tried about 10 times to no avail. Maybe Ill make a post to get some help thanks

 

[LD723]

Dsdplus cannot as of yet tell the difference between enhanced privacy and AES256

 

[racingfan360]

If you're still struggling with DSD+ then switch the audio output of your TRX2 to discriminator output, make a good quality recording of the signal from that, post the file here.

 

[Ubbe]

The raw audio from a TXR-2 IF out from the earphone jack are perfect for DSD+ to decode without errors. You'll need a 3,5mm audio cable from the scanner to your computers line in jack. Read the text file in the DSD+ folder to see what argumnents to use to get it to decode from line in.

You can also let DSD+ decode a recorded raw file if you specify the file name when you start the DSD+ program. Start up a command window (cmd.exe) and change to the folder where the DSD program are installed (cd c:\program\DSD) and start dsd.exe so that you see what it reports back.

Actually you will need a recorded wav file to tune the settings of dsd to make it decode 100% by using the dsdtune.exe program that will give you the correct parameters. My startup line for the TRX-2 looks like this: DSDPlus.exe -i1 -dr4 -dh8 -ds62 -dd59 -dv26

/Ubbe

 

[kayn1n32008]

Motorola refuses to sell AES256 EID in North America to force customers in North America to buy P25 gear at 5 times the price of DMR.

The Gen 2 Motorola gear IS capable of AES256, they just refuse to sell it.

 

[n3obl]

But some people have it.

 

[RRR]

With "Advanced privacy", is AES256 really necessary? I mean, it would take forever to crack the code, even if you had some way to do it. Basic Privacy with a key of "1" would effectively render scanners useless.

 

[kayn1n32008]

With "Advanced privacy", is AES256 really necessary? I mean, it would take forever to crack the code, even if you had some way to do it. Basic Privacy with a key of "1" would effectively render scanners useless.

Well considering RC4 uses a 16 bit shorter key space than DESis a weaker cipher than DES, even if the key-space was the same.

DES has been considered owned since the late 90’s you do the math. DES and RC4 will keep scanners out but someone with the right software skills and some processing horse power would likely recover a DES or RC4 key in less time than we would think.

If you want secure conversations AES256 is the cipher you should be using.

‘Enhanced’ privacy will keep scanners out, and that’s it. A determined adversary would set around 40 bit RC4 in little time.

Basic privacy is like PL. There are 255 unique ‘keys’, you could run every key in a matter of minutes with a properly programmed DMR radio.

 

[slicerwizard]

With "Advanced privacy", is AES256 really necessary? I mean, it would take forever to crack the code, even if you had some way to do it.

According to the manager at one of our local airtime providers (Mobile Business Communications), a group of hams thought exactly that when they pirated a commercial Capacity Plus system and tried to use 40 bit EP (two different keys on two talkgroups) to cover their tracks, but the company has decrypted audio (from both keys/talkgroups) of them right from their initial transmissions on the Cap+ system:

Initial.mp3

drive.google.com

The audio has chatter about how long it'd take for someone to notice and update the RR database. Apparently not very long:

https://1.bp.blogspot.com/-dnYUkFrhoHY/Wg8HIj6tPfI/AAAAAAAABME/DigwlsfedTU6Hpr7gxWPIoXSHK-EMteKQCLcBGAs/s1600/Sushi3.png

RAS was activated and bye bye pirates.

 

[phantomcrow]

If you're still struggling with DSD+ then switch the audio output of your TRX2 to discriminator output, make a good quality recording of the signal from that, post the file here.

Will do ty

 

[phantomcrow]

The raw audio from a TXR-2 IF out from the earphone jack are perfect for DSD+ to decode without errors. You'll need a 3,5mm audio cable from the scanner to your computers line in jack. Read the text file in the DSD+ folder to see what argumnents to use to get it to decode from line in.

You can also let DSD+ decode a recorded raw file if you specify the file name when you start the DSD+ program. Start up a command window (cmd.exe) and change to the folder where the DSD program are installed (cd c:\program\DSD) and start dsd.exe so that you see what it reports back.

Actually you will need a recorded wav file to tune the settings of dsd to make it decode 100% by using the dsdtune.exe program that will give you the correct parameters. My startup line for the TRX-2 looks like this: DSDPlus.exe -i1 -dr4 -dh8 -ds62 -dd59 -dv26

/Ubbe

I have the jack and I get DSD up and running but its greek from there for me anyway. Havent had time maybe some today to figure it out once again. Very frustrating

 

[RRR]

According to the manager at one of our local airtime providers (Mobile Business Communications), a group of hams thought exactly that when they pirated a commercial Capacity Plus system and tried to use 40 bit EP (two different keys on two talkgroups) to cover their tracks, but the company has decrypted audio (from both keys/talkgroups) of them right from their initial transmissions on the Cap+ system:

Well, they apparently didn't know that, in order for the Enc to pass, the repeater would have to be programmed with the ENC info also. Just programming Enc in the mobiles / portables going into the repeater isn't going to do anything.

 

[slicerwizard]

Well, they apparently didn't know that, in order for the Enc to pass, the repeater would have to be programmed with the ENC info also. Just programming Enc in the mobiles / portables going into the repeater isn't going to do anything.

That's 100% incorrect.

 

[kayn1n32008]

Well, they apparently didn't know that, in order for the Enc to pass, the repeater would have to be programmed with the ENC info also. Just programming Enc in the mobiles / portables going into the repeater isn't going to do anything.

Nope entirely wrong.

The repeater simply receives the data, applies error correction if needed, and spits it back out. It doesn’t matter if it’s encrypted or not.

 

[RRR]

Must be different on IP site connect Mototrbo repeaters then....

 

[kayn1n32008]

Must be different on IP site connect Mototrbo repeaters then....

Nope. Maybe DMR-MARC and BM are somehow stopping encryption use on the network end, but it’s not anything to do with Motorola DMR repeaters.