Possible Ways to Crack the Bootloader

[aliasxerog]

I'm going to be taking a break on actual programming because I want to work on getting the bootloader unlocked. I will be getting those god damn keys sooner or later. That being said I need idea on how to do this. Throw them up here, with links to research.

[Snow02]

To be honest, if the efuse works the way I believe, you're not going to crack it short of a motorola leak.

From what I've been able to find, the efuse is a one time programmable key. There is absolutely no reprogramming this. That leaves properly signing a replacement image as the only work around. Unfortunately, there isn't any way to readily glean that info from what we have to work with.

As a disclaimer, I'm half talking out of my ass here. But again, from all the info I've been able to locate, you're going to need someone at moto to release that info.

I know that's not very helpful, and man, it'd be nice to see happen, but I'd hate to see you sink a bunch of time all for naught.

[Sitrick2]

I don't know anything on the subject, but wanted to say thank god someone is taking this attitude. I've been doing every kind of google search I can think of trying to find useful info for you guys as far as drivers and whatnot, but am just not smart enough (yet) to know what I'm looking for (hitting up the library for some tech books later today to start educating myself on some of this stuff).

Guess I really just want to say thanks for not giving up and continuing to fight the good fight. The community appreciates it.

Sent from my DROIDX using DroidForums App

[DJxPanda]

I don't know anything on the subject, but wanted to say thank god someone is taking this attitude. I've been doing every kind of google search I can think of trying to find useful info for you guys as far as drivers and whatnot, but am just not smart enough (yet) to know what I'm looking for (hitting up the library for some tech books later today to start educating myself on some of this stuff).

Guess I really just want to say thanks for not giving up and continuing to fight the good fight. The community appreciates it.

Sent from my DROIDX using DroidForums App

I agree 100% sir. Alias, the entire community is behind you and wants this to happen.we will do what we can to give u any info. Give it some time. It will come.
I also am not a very knowledgeable person on the actual workings of the bootloader. But I am total up to help test. Ive tested the original ipod touch 2g tethered jailbreaks and whatnot so im always down to give back to the community in any way I can. once again, thank you for fighting the good fight and keeping the hopes and dreams of many alive.

Sent from my DROIDX using DroidForums App

[KHeeney5]

-The way you are doing it now, we just need drivers now?
-Find a way to pull the codes from a device or SBF file.
-Find a way to edit an SBF file to accept changes
-Pass around a petition to get the codes from Motorola.
-Look into other Motorola devices (Xoom, D1) see if there is anything useful there.

...That's all I can think of.

[snwboard333]

I've read that the keys are RSA2048 encrypted and i've also read that recently the RSA keys were cracked. If somehow it gets how how RSA was cracked would be able to crack the keys on the eFuse?

[13th angel]

-The way you are doing it now, we just need drivers now?
-Find a way to pull the codes from a device or SBF file.
-Find a way to edit an SBF file to accept changes
-Pass around a petition to get the codes from Motorola.
-Look into other Motorola devices (Xoom, D1) see if there is anything useful there.

...That's all I can think of.

Ill kill your points 1 by 1 for ya...

Need the drivers for a kexec module, not a standard droid kernel.
Been tried, as far as I know the codes aren't in there because as I understand it the sbf file doesn't touch the bootloader.
Pretty sure that's been tried for a while now....
Xoom and d1 aren't really going to be helpful because they're already unlocked. Locked droids wont help because they're all encrypted the same way as I understand.

Don't mean to be a spoil sport or anything, just most things have already been tried.

Sent from my Liberated D2G

[UNC]

If the bootloader was simply "locked" all you would need would be the key, but since they are encrypted you will need to figure out what algorithm is used to create new keys as well as having an original key to use the algorithm with...

I don't think it'll ever be cracked.. and the only people to blame are the tethering abusers... I don't think MOTO would've paid to develop the encryption unless the carriers put them up to it, and the only reason they would've blocked that is to stop tethering, since that's the only for-cost service that is being "stolen"... If everyone keeps abusing their service all phones will be locked, block sideloading, and have meters/throttling.

The Thunderbolt has a folder named "throttle" in the /system so its coming soon.

Sent from my ADR6400L using DroidForums App

[dfuser312553]

^blame it on tether-ers? Hilarious

[Chloenaiter]

I honestly don't know what I can do to help but I am willing to sacrifice my Droid X for testing if you need it (I have really good relations with my local verizon dealer so I could probably get another one easily )