Recent content by bit-twiddler

  1. B

    Encoding scheme for digcap.dav

    The key and the algorithm are more than likely in the uImage file.
  2. B

    Encoding scheme for digcap.dav

    Okay gentlemen, Hikvision is still using an XOR-based encoder (technically, a coder-decoder). I have been able to derive the first 1024 bytes of the XOR sequence using well-known cryptanalysis techniques. I performed a frequency count on the sequence to see what kind of distribution we are...
  3. B

    Encoding scheme for digcap.dav

    Maybe I am missing something here, but the files in the compressed ROM file system (cramfs.img) are not encoded to obfuscate information like the header is in the camera digicap.dav file. They are merely tarballs that have been compressed with the lzma (Lempl-Ziv-Markov) algorithm or the gzip...
  4. B

    Encoding scheme for digcap.dav

    Concur! The people who are being hurt by Hikvision's actions are not those who are selling re-flashed cameras or those who knowingly purchase re-flashed cameras. It's consumers who unaware that many Hikvision cameras are grey market items that have been re-flashed with hacked code. I am now...
  5. B

    Encoding scheme for digcap.dav

    Actually, I am kind of new to Hikvision cameras, and quite frankly, I would have been happy using my Hivision cameras like appliances if I had not unknowingly purchased a re-flashed Chinese camera off of Amazon. I pulled an all-nighter on Sunday night after attempting to re-flash the camera and...
  6. B

    Encoding scheme for digcap.dav

    I left my decoder test code at work, but I noticed something about the data in my posting a few minutes ago. It appears that the encoding/decoding algorithm is even simpler than I originally assumed. Upon closer inspection, the seed value (a.k.a. key) is actually 16 bytes long, not 15 bytes...
  7. B

    Encoding scheme for digcap.dav

    I am sorry if this information has been covered in the past, but I decided to take crack at figuring out the encoding scheme for digicap.dav after playing around with hiktools last night. I figured that I would start by looking to see if the author was using an XOR-based encoding scheme. I...
  8. B

    Help reverting or fixing a 5.3.0 firmware update

    While I may be wrong, if your camera is issuing an ARP request for the MAC address associated with IP address 192.168.1.1, then it is past the point in the boot process where it looks for a TFTP server on 192.0.0.128. The address 192.168.1.1 is node number 1 on class C network 192.168.1. Node...
  9. B

    Custom Firmware Downgrader 5.3.0 Chinese to 5.2.5 English

    I can personally attest that the Chinese 5.3 to English 5.2.5 downgrade firmware works flawlessly. I naively purchased a DS-2CD2032 camera from an Amazon seller to supplement two 2032s I own that were acquired from Anixter via an acquaintance that installs security systems and networks for a...
  10. B

    Hikvision DS-2CD2032-I Camera and Version 5.3 Firmware

    I was not aware that there was a difference between U.S. market and Chinese market cameras until last night. I acquired the other two Hikvision 2032 cameras that I own from an acquaintance that installs security systems and communication networks for living. They were left over from a one-off...
  11. B

    Hikvision DS-2CD2032-I Camera and Version 5.3 Firmware

    I think I know what happened with this camera. It all makes sense now that I found the 5.3 Chinese to 5.2.5 English downgrader. Unlike the other two DS-2CD2032-Is that I own, this camera was acquired from an Amazon seller. I made the assumption that U.S. fulfillment meant U.S. camera, which...
  12. B

    Hikvision DS-2CD2032-I Camera and Version 5.3 Firmware

    This network is closed off from the world (i.e., no Internet access); therefore, using Google Translate is not going to be easy.
  13. B

    Hikvision DS-2CD2032-I Camera and Version 5.3 Firmware

    I had a Hikvision DS-2CD2032-I camera with a manufacture date of 5/2015 brick on me last night when I attempted to flash it with the 5.3 firmware. The box states that the camera shipped with firmware version 5.3. The sticker that is affixed to the bottom of the camera also states that the...
Top