AOS2 utility

[CheBuzz]

archutil download: http://download.openpma.org/archutil/archutil.tbz

Well, since everything has been active on the Archos hacking front, I think I will take this opportunity to release archutil. I have been working on this utility for a while and I consider it to be mostly bug free. Please leave me a note if you find anything that doesn't work as advertised.

This will allow you to decrypt nearly all AOS2 files. There is no documentation besides the code and the built-in help. If you have any questions, I'd be happy to answer them. It also verifies different signatures and will tell you what key was used to verify it. Code is also included to sign files with a built-in private key, or with a private key passed on the command-line. And finally, functionality is included to sign a firmware update file with your own private key.

Most of this has been initially tested. None of it has been thoroughly tested. Again, feel free to let me know of any bugs that you find.

And let me just get the first question out of the way: it will not work for A5IT files. It probably would if somebody could find its keys.

Now let me get the second question out of the way: this is not useful for hacking your Archos unless you know their private key. And let's not waste time talking about brute-forcing the key, shall we? It's just not feasible at this time.

[Deejay300]

How is this utility used?

[CheBuzz]

Extract the contents of the archive into a folder, go to the folder on the commandline and type "make".

[Deejay300]

Do I need to put an aos file in there? And what do I need to do to decrypt a .aos file?

[grond]

Do I need to put an aos file in there? And what do I need to do to decrypt a .aos file?

Just call the program and it will tell you.

[Deejay300]

It didnt work, it says it is not recognised as a internal or external command, operable program or a batch file. Could you post an example?

[soviet123]

It didnt work, it says it is not recognised as a internal or external command, operable program or a batch file. Could you post an example?

...are you running MassiveSoft Doors?

[grond]

It didnt work, it says it is not recognised as a internal or external command, operable program or a batch file. Could you post an example?

Am I right in guessing that you are using a Windows computer? Then this is not for you.

[Deejay300]

Ok then

[archilles]

seems to work well chebuzz. easier than my method and you have signing stuff. have you tested that the signing stuff works?

[CheBuzz]

Most of this has been initially tested. None of it has been thoroughly tested. Again, feel free to let me know of any bugs that you find.

[Omega Frost]

It didnt work, it says it is not recognised as a internal or external command, operable program or a batch file. Could you post an example?

Am I right in guessing that you are using a Windows computer? Then this is not for you.

http://www.mediafire.com/download.php?omzlznizfnj

Tested with FW 2.1.04 Flash AOS, each file compared with the Linux app generated ones.
May be unstable, use at your own risk.

It will be a pleasure for me to keep porting the app to Win32 as long as updates came out, with CheBuzz permission of course

[soviet123]

Guys...? I don't want to scare anyone but on Ubuntu 9.04 it gave me this:

Code: Select all

rm -f *.o archutil 
gcc  -g -o  md5.o -c md5.c
gcc  -g -o  utility.o -c utility.c
gcc  -g -o  arch_crypto.o -c arch_crypto.c
In file included from arch_crypto.c:12:
arch_crypto.h:18:25: error: openssl/aes.h: No such file or directory
arch_crypto.h:19:24: error: openssl/bn.h: No such file or directory
arch_crypto.c: In function ÔÇÿsign_md5ÔÇÖ:
arch_crypto.c:117: error: ÔÇÿBIGNUMÔÇÖ undeclared (first use in this function)
arch_crypto.c:117: error: (Each undeclared identifier is reported only once
arch_crypto.c:117: error: for each function it appears in.)
arch_crypto.c:117: error: expected ÔÇÿ;ÔÇÖ before ÔÇÿbn_resultÔÇÖ
arch_crypto.c:117: error: expected ÔÇÿ;ÔÇÖ before ÔÇÿbn_md5ÔÇÖ
arch_crypto.c:117: error: expected ÔÇÿ;ÔÇÖ before ÔÇÿbn_modÔÇÖ
arch_crypto.c:117: error: expected ÔÇÿ;ÔÇÖ before ÔÇÿbn_expÔÇÖ
arch_crypto.c:117: error: ÔÇÿBN_CTXÔÇÖ undeclared (first use in this function)
arch_crypto.c:117: error: ÔÇÿctxÔÇÖ undeclared (first use in this function)
arch_crypto.c:118: error: ÔÇÿbn_resultÔÇÖ undeclared (first use in this function)
arch_crypto.c:118: error: ÔÇÿbn_md5ÔÇÖ undeclared (first use in this function)
arch_crypto.c:118: error: ÔÇÿbn_modÔÇÖ undeclared (first use in this function)
arch_crypto.c:118: error: ÔÇÿbn_expÔÇÖ undeclared (first use in this function)
arch_crypto.c: In function ÔÇÿrsa_decryptÔÇÖ:
arch_crypto.c:141: error: ÔÇÿBIGNUMÔÇÖ undeclared (first use in this function)
arch_crypto.c:141: error: expected ÔÇÿ;ÔÇÖ before ÔÇÿbn_resultÔÇÖ
arch_crypto.c:141: error: expected ÔÇÿ;ÔÇÖ before ÔÇÿbn_sigÔÇÖ
arch_crypto.c:141: error: expected ÔÇÿ;ÔÇÖ before ÔÇÿbn_modÔÇÖ
arch_crypto.c:142: error: expected ÔÇÿ;ÔÇÖ before ÔÇÿbn_expÔÇÖ
arch_crypto.c:142: error: ÔÇÿBN_CTXÔÇÖ undeclared (first use in this function)
arch_crypto.c:142: error: ÔÇÿctxÔÇÖ undeclared (first use in this function)
arch_crypto.c:144: error: ÔÇÿbn_resultÔÇÖ undeclared (first use in this function)
arch_crypto.c:144: error: ÔÇÿbn_sigÔÇÖ undeclared (first use in this function)
arch_crypto.c:144: error: ÔÇÿbn_modÔÇÖ undeclared (first use in this function)
arch_crypto.c:144: error: ÔÇÿbn_expÔÇÖ undeclared (first use in this function)
make: *** [arch_crypto.o] Error 1

Please help!

[Omega Frost]

i had the same problem install libssl-dev via apt-get and it should work

[CheBuzz]

Of course it's fine by me. Just make sure a copy of the GPL gets included.

And yes, you were missing ssl headers. I hope to take out the ssl dependency when I get some time.

[Analias]

Guys...? I don't want to scare anyone but on Ubuntu 9.04 it gave me this:

Code: Select all

gcc  -g -o  arch_crypto.o -c arch_crypto.c
In file included from arch_crypto.c:12:
arch_crypto.h:18:25: error: openssl/aes.h: No such file or directory
arch_crypto.h:19:24: error: openssl/bn.h: No such file or directory

Please help!

Soviet123, I'm running Ubuntu 9.04 also. I simply did a

Code: Select all

sudo apt-get install openssl openssl-doc libssl-dev

and recompiled. If you don't want the rest of openssl, installing just libssl-dev should be enough.

-Analias

[strazzere]

Most of this has been initially tested. None of it has been thoroughly tested. Again, feel free to let me know of any bugs that you find.

And let me just get the first question out of the way: it will not work for A5IT files. It probably would if somebody could find it's keys.

Now let me get the second question out of the way: this is not useful for hacking your Archos unless you know their private key. And let's not waste time talking about brute-forcing the key, shall we? It's just not feasible at this time.

I could be completely wrong, which I probably am too. Though I do have a question regarding the keys.

Could the default MPK key not be used?

[EiNSTeiN_]

I did not confirm this but my feeling is that the default key is not a copy of the key that is in flash memory...

[edembowski]

...
And let me just get the first question out of the way: it will not work for A5IT files. It probably would if somebody could find its keys.
...

It does seem to do a fair job of unpacking the file for the A5IT I just downloaded, although with some errors:

Code: Select all

A subdirectory or file aos\COPY\ already exists.
COPY size:480160 filename:upselling/upselling_dvrtraveladapter.swf
A subdirectory or file aos\COPY already exists.
A subdirectory or file aos\COPY\ already exists.
COPY size:3896464 filename:upselling/upselling_gps.swf
A subdirectory or file aos\COPY already exists.
A subdirectory or file aos\COPY\ already exists.
COPY size:580592 filename:upselling/upselling_helmetcam.swf
A subdirectory or file aos\COPY already exists.
A subdirectory or file aos\COPY\ already exists.
COPY size:380576 filename:upselling/upselling_remotefm.swf
A subdirectory or file aos\COPY already exists.
A subdirectory or file aos\COPY\ already exists.
COPY size:387824 filename:upselling/upselling_dvbtstick.swf
A subdirectory or file aos\COPY already exists.
A subdirectory or file aos\COPY\ already exists.
DLET size:272 filename:System/clouds.AAW
DLET size:272 filename:System/clouds.avi
DLET size:272 filename:System/New waterfall.avi
DLET size:272 filename:System/New waterfall.AAW
DLET size:272 filename:System/waterfall.avi
DLET size:272 filename:System/waterfall.AAW
DLET size:272 filename:Widgets/7932_1.4.zip
DLET size:272 filename:Widgets/8412_1.0.zip
COPY size:294112 filename:Widgets/8412_1.1.zip
A subdirectory or file aos\COPY already exists.
A subdirectory or file aos\COPY\ already exists.

I need to take some time & look at the source to see what's happening, but I'd probably want to rename the conflicting items just to see what's going on there. Although it may not be of direct use to hack the A5IT by putting new firmware on, it is of great value to see more detail about what's going on there.

Thanks much.

- Ed

[BamBam]

1. Great work on the AOS2 Utility - fantastic.
2. Anyone got the A705 Keys ? ( At least the AES )

I'd like to extract rootfs for 1.7.13 and place it on my drive if it's possible ( My machine is 2.1.04 ).
Would that at least allow GFT - even though to install moldy cheese we would need to work around the flash lock ?

BamBam.