Omnimaga: The Coders Of Tomorrow
Welcome, Guest. Please login or register.
 
Omnimaga: The Coders Of Tomorrow
23 May, 2013, 04:04:18 *
Welcome, Guest. Please login or register.

Login with username, password and session length
 
   home   news downloads projects tutorials misc forums rules new posts irc about Login Register  
+-OmnomIRC

You must Register, be logged in and have at least 40 posts to use this shout-box! If it still doesn't show up afterward, it might be that OmnomIRC is disabled for your group or under maintenance.

Note: You can also use an IRC client like mIRC, X-Chat or Mibbit to connect to an EFnet server and #omnimaga.

Pages: [1] 2 3 ... 7   Go Down
  Print  
Author Topic: Bypassing TI-Nspire RSA signatures now possible? -  (Read 5962 times) Bookmark and Share
0 Members and 1 Guest are viewing this topic.
DJ Omnimaga
Retired Omnimaga founder (Site issues must be PM'ed to Netham45, Eeems, Shmibs, Deep Thought and AngelFish, not me.)
Editor
LV15 Omnimagician (Next: --)
*
Online Online

Gender: Male
Last Login: Today at 03:42:08
Date Registered: 25 August, 2008, 07:00:21
Location: Québec (Canada)
Posts: 50225


Total Post Ratings: +2615

View Profile WWW
« on: 29 March, 2011, 08:40:39 »
+2
As reported in French by TI-BANK, it seems that bsl might have managed to bypass the RSA protection on the TI-Nspire in some ways. He has released a program called DiagsLauncher, that allows you to launch any Diagnostic software images (stored in a .tns file) on your TI-Nspire, ignoring any protection against executing such image on the calculator:

<a href="http://www.youtube.com/watch?v=1zmKE-QeGO0" target="_blank">http://www.youtube.com/watch?v=1zmKE-QeGO0</a>

Normally, the TI-Nspire includes a diagnostic software that can be accessed by holding Esc+Menu+G (ClickPad) or Esc+Menu+Moins (TouchPad) on boot. However, it is possible that your calculator doesn't include this software or that you might have previously deleted it. Also, some might have an older version that doesn't include as many options, such as ones for the Touchpad keypad.

Unfortunately, TI didn't make it possible to re-install this software on your calculator or even update it. If you deleted it, it's gone forever. With DiagsLauncher, this problem is solved. Although this software might not be useful for the average calculator user, these images contains interesting test features that can be useful for developers and could possibly allow them to accomplish even more things on the calculator in the future. Not only that, but since this software completely ignores the RSA signature of the model (TI-Nspire, TI-Nspire CAS or even prototypes) to launch diagnostic images of any commercial models or prototypes, could this mean such method could be applied to the boot1, boot2 or even the OS?

DiagsLauncher is available in TI-BANK archives.
« Last Edit: 29 March, 2011, 08:46:09 by DJ_O » Logged
Retired 83+ coder, Omnimaga/TIMGUL founder. Now doing power metal music (formerly did electronica)

Follow me on Bandcamp|Facebook|Reverbnation|Youtube|Twitter|Myspace
critor
Editor
LV10 31337 u53r (Next: 2000)
*
Offline Offline

Gender: Male
Last Login: Yesterday at 20:03:59
Date Registered: 14 July, 2009, 23:57:37
Location: Aix-Marseille, France
Posts: 1723


Total Post Ratings: +369

View Profile WWW
« Reply #1 on: 29 March, 2011, 11:23:59 »
0
Great news! Smiley
Logged
TI-Planet co-admin.
Munchor
LV13 Extreme Addict (Next: 9001)
*************
Offline Offline

Gender: Male
Last Login: 21 May, 2013, 17:58:01
Date Registered: 16 October, 2010, 15:39:13
Location: Position
Posts: 6209


Total Post Ratings: +174

View Profile
« Reply #2 on: 29 March, 2011, 13:44:56 »
0
This looks sweet, so we can access that menu, which I never heard of, in other times rather than when booting Smiley
It also seems like we're closer from getting the RSA algorithm Smiley
Logged
critor
Editor
LV10 31337 u53r (Next: 2000)
*
Offline Offline

Gender: Male
Last Login: Yesterday at 20:03:59
Date Registered: 14 July, 2009, 23:57:37
Location: Aix-Marseille, France
Posts: 1723


Total Post Ratings: +369

View Profile WWW
« Reply #3 on: 29 March, 2011, 13:53:21 »
0
To be more precise, DiagsLauncher just runs any diagnostic image. It's completly independant from the diagnostic present in the NAND ROM, which is neither used nor altered.

You'll need at least a diagnostic image in order to use it.

You can find a dumper in another topic, but for Ndless 1.0/1.1.

You can find the most complete list of diagnostic images here:
http://tibank.forumactif.com/t6212-table-versions-nspire


Feel free to report any unlisted diags version.
Logged
TI-Planet co-admin.
graphmastur
King Graphmastur
LV11 Super Veteran (Next: 3000)
***********
Offline Offline

Gender: Male
Last Login: 02 February, 2013, 08:34:45
Date Registered: 03 June, 2010, 21:15:55
Posts: 2262


Total Post Ratings: +60

View Profile
« Reply #4 on: 29 March, 2011, 13:53:22 »
0
Quote from: Scout on 29 March, 2011, 13:44:56
This looks sweet, so we can access that menu, which I never heard of, in other times rather than when booting Smiley
It also seems like we're closer from getting the RSA algorithm Smiley
What RSA algorithm? Are you talking about solving the RSA problem? If so, I know of no algorithm to solve it.
Logged
critor
Editor
LV10 31337 u53r (Next: 2000)
*
Offline Offline

Gender: Male
Last Login: Yesterday at 20:03:59
Date Registered: 14 July, 2009, 23:57:37
Location: Aix-Marseille, France
Posts: 1723


Total Post Ratings: +369

View Profile WWW
« Reply #5 on: 29 March, 2011, 13:54:01 »
0
We're not solving: we're bypassing Tongue
Logged
TI-Planet co-admin.
Munchor
LV13 Extreme Addict (Next: 9001)
*************
Offline Offline

Gender: Male
Last Login: 21 May, 2013, 17:58:01
Date Registered: 16 October, 2010, 15:39:13
Location: Position
Posts: 6209


Total Post Ratings: +174

View Profile
« Reply #6 on: 29 March, 2011, 13:55:10 »
0
Quote from: graphmastur on 29 March, 2011, 13:53:22
Quote from: Scout on 29 March, 2011, 13:44:56
This looks sweet, so we can access that menu, which I never heard of, in other times rather than when booting Smiley
It also seems like we're closer from getting the RSA algorithm Smiley
What RSA algorithm? Are you talking about solving the RSA problem? If so, I know of no algorithm to solve it.

I mean whatever lets you make 3rd party OSs, which I think is the RSA key, right?
Logged
compu
LV5 Advanced (Next: 300)
*****
Offline Offline

Gender: Male
Last Login: Yesterday at 21:53:16
Date Registered: 09 January, 2011, 22:45:52
Location: Germany
Posts: 226

Total Post Ratings: +53

View Profile
« Reply #7 on: 29 March, 2011, 19:35:19 »
0
Nice work. Couldn't this code be used to make a simple program loader?
Logged
Nspire I/O Discussion|Website - cross-compatible with Prizm!
TI-Nspire Programming Statistics
DJ Omnimaga
Retired Omnimaga founder (Site issues must be PM'ed to Netham45, Eeems, Shmibs, Deep Thought and AngelFish, not me.)
Editor
LV15 Omnimagician (Next: --)
*
Online Online

Gender: Male
Last Login: Today at 03:42:08
Date Registered: 25 August, 2008, 07:00:21
Location: Québec (Canada)
Posts: 50225


Total Post Ratings: +2615

View Profile WWW
« Reply #8 on: 29 March, 2011, 20:01:33 »
0
Now if only we could use this method to launch an OS image... maybe we could have some sort of Linux for the TI-Nspire, even if not executed directly on boot like the regular OS?
Logged
Retired 83+ coder, Omnimaga/TIMGUL founder. Now doing power metal music (formerly did electronica)

Follow me on Bandcamp|Facebook|Reverbnation|Youtube|Twitter|Myspace
mikehill2003
LV5 Advanced (Next: 300)
*****
Offline Offline

Last Login: 17 February, 2013, 06:33:36
Date Registered: 16 March, 2011, 06:38:01
Posts: 280

Total Post Ratings: +9

View Profile
« Reply #9 on: 29 March, 2011, 20:58:26 »
0
Can you use this to launch an OS image with an invalid signature? (Or just an OS image?)
« Last Edit: 29 March, 2011, 20:59:10 by mikehill2003 » Logged
DJ Omnimaga
Retired Omnimaga founder (Site issues must be PM'ed to Netham45, Eeems, Shmibs, Deep Thought and AngelFish, not me.)
Editor
LV15 Omnimagician (Next: --)
*
Online Online

Gender: Male
Last Login: Today at 03:42:08
Date Registered: 25 August, 2008, 07:00:21
Location: Québec (Canada)
Posts: 50225


Total Post Ratings: +2615

View Profile WWW
« Reply #10 on: 29 March, 2011, 20:59:27 »
0
I'M not sure yet, but as the news says, maybe the same method could be used to do so.
Logged
Retired 83+ coder, Omnimaga/TIMGUL founder. Now doing power metal music (formerly did electronica)

Follow me on Bandcamp|Facebook|Reverbnation|Youtube|Twitter|Myspace
critor
Editor
LV10 31337 u53r (Next: 2000)
*
Offline Offline

Gender: Male
Last Login: Yesterday at 20:03:59
Date Registered: 14 July, 2009, 23:57:37
Location: Aix-Marseille, France
Posts: 1723


Total Post Ratings: +369

View Profile WWW
« Reply #11 on: 29 March, 2011, 21:02:13 »
0
It's probably what the (never released) RunOS was using.
Logged
TI-Planet co-admin.
mikehill2003
LV5 Advanced (Next: 300)
*****
Offline Offline

Last Login: 17 February, 2013, 06:33:36
Date Registered: 16 March, 2011, 06:38:01
Posts: 280

Total Post Ratings: +9

View Profile
« Reply #12 on: 29 March, 2011, 21:04:24 »
0
Quote from: critor on 29 March, 2011, 21:02:13
It's probably what the (never released) RunOS was using.

I just got my nspire today (YAY!), do you think it would be safe to test loading an OS this way?
Logged
critor
Editor
LV10 31337 u53r (Next: 2000)
*
Offline Offline

Gender: Male
Last Login: Yesterday at 20:03:59
Date Registered: 14 July, 2009, 23:57:37
Location: Aix-Marseille, France
Posts: 1723


Total Post Ratings: +369

View Profile WWW
« Reply #13 on: 29 March, 2011, 21:09:54 »
0
In the worst case, you'll just have to reinstall an OS.


In fact, from my point of view we would need a similar boot2launcher program.
You could then launch a modified boot2 image, in order to launch an OS without checking the RSA signature.
Logged
TI-Planet co-admin.
Goplat
LV5 Advanced (Next: 300)
*****
Offline Offline

Gender: Male
Last Login: 21 May, 2013, 02:54:09
Date Registered: 08 December, 2009, 13:17:47
Posts: 289

Total Post Ratings: +77

View Profile
« Reply #14 on: 29 March, 2011, 21:49:08 »
0
I'm not sure I see the point in running OSes this way.

It could be nice to be able to run significantly different versions, like have 2.x installed for Ndless but run 3.0 for the additional math features (e.g. 3d graphing), but this doesn't work too well because you get mixed-up text that basically makes everything incomprehensible (see below for an example - 2.1 running on a 2.0.1 installation).

If you want to run your own code, just make it its own Ndless program. No reason to make extra work for yourself by putting it in .tno format.

* wrongversion.png (10.34 KB, 640x480 - viewed 408 times.)
Logged
Numquam te deseram; numquam te deficiam; numquam circa curram et te desolabo
Numquam te plorare faciam; numquam valedicam; numquam mendacium dicam et te vulnerabo
Pages: [1] 2 3 ... 7   Go Up
  Print  
 
Jump to:  

Powered by EzPortal
Powered by MySQL Powered by SMF 1.1.18 | SMF © 2013, Simple Machines Powered by PHP
Page created in 0.321 seconds with 30 queries.
Skin by DJ Omnimaga edited from SMF default theme with the help of tr1p1ea.
All programs, games and songs avaliable on this website are property of their respective owners.
Best viewed in Opera, Firefox, Chrome and Safari with a resolution of 1024x768 or above.