Absolute +1 on this project to get out of Boschs closed-garden

[chron0]

As soon as I have my bike, I may be able to contribute additional ECU/Battery handshake data.

[hackrid]

Any progress on the project? what is the current state ?

[gregyedlik]

No update on this - waiting for some idea on how to crack the handshake.

[hackrid]

collecting all possible responses is not an option?
That's not directly cracking it but i think what ever works is fine.

[gregyedlik]

Not really. it has been running for many weeks, and yet most of the handshakes are not-yet-seen.

[chron0]

collecting enough would possibly create a plane to determine if bosch botched on the crypto implementation, which so far I fear they strangely didnt...

[hackrid]

thanks for your replies.
@gregyedlik are you still capturing the challenge and response data?

in the readme you state

the challenge and the answer consist of 2 bytes

but looking at the .csv files it seems it's more like 2 CAN frames with 8 bytes each?

[gregyedlik]

That is correct, the readme is wrong. I'll fix it.

[gregyedlik]

And no, the capturing is not going now.

[chron0]

there is a guy on telegram who seems to have been going at it as well but only seems to be reachable over there @bitslover101 - if any of you guys have telegram it may also be worth a try to find out what he has/knows (https://t.me/joinchat/HAonoHZMkVkBSM1N was a link i found)

[hackrid]

so it seems like a 128 bit challenge response which would mean 3.4028237E38 (2^128) challenge/response pairs that need to be recorded?
so the the storage to hold this data would be kind of insane??
@chron0 where did you find this link? Telegram says its i"invalid or expired"

[chron0]

in some pedelec forums (where he was getting banned by the admins seemingly out of fear of bosch legal retaliation)
can you lookup the user bitslover101 somehow?

[chron0]

https://www.pedelecforum.de/forum/index.php?threads/performance-line-cx-2020-diagnose-tool-ohne-dongle-verwenden.75447/page-4

seem to have been deleted as well now...

[chron0]

and https://mhhauto.com/Thread-Bosch-E-bike-Diagnostic-Tool-IBD-Software?pid=2048162#pid2048162

[chron0]

if we could use the software, we may be able to extract some info with it as well...

[hackrid]

https://cyclurba.fr/forum/702597/logiciel-diagnostic-bosch-ibd-dongle.html?from=1&discussionID=28510&messageID=702597&rubriqueID=112&pageprec=

bitslover01:

Somebody is really angry at me, made the Telegram group closed and banned me from Telegram ;) But I'm not dead.