Does anyone happen to have a pcap of the serial comms with a non-plus KG-UV8D? This will be helpful in my decryption attempts. So far, I have discovered that they appear to be using the "Cryptography API: Next Generation (CNG)", but it supports a number of different encryption algorithms.
https://msdn.microsoft.com/en-us/library/windows/desktop/aa376210(v=vs.85).aspx
I have also extracted the strings from the exe using aluigi's exestringz, and discovered 2 differences between the 8D and the pluis. One of the strings is simply 123456, which sure looks to me like a lazy developer making up a key, so I'm optimistic that this may be as easy as I had hoped.
The other interesting difference is an additional string with a value of "ENSJBXP8E-V1.00-150525". I have no idea what that is, and Google is not helping either.
|
msdn.microsoft.com
Purpose. Cryptography API: Next Generation (CNG) is the long-term replacement for the CryptoAPI. CNG is designed to be extensible at many levels and cryptography ...
|