1 (edited by cgrillo 2017-02-17 13:10:35)

Topic: Davinci Jr and Mini NFC Password requests.

There are a number of people who can now generate the password required for the NFC cards used in the Jr and Mini.
We have a hardware solution - not a way to decrypt anything.

To keep the other threads "clean", can you please request the password in this thread.
PMs for passwords will be ignored.

When we supply the passwords we do ask for the PACK code in return. (if you don't return the PACK,  don't expect a second card password smile )
All we need to start is the card UID - or the first 2 pages of data from the card (as it's in there)

The UIDs, Passwords and returned PACK codes will all be made public - so anyone can join in and try and crack the algorithm...
that's the goal ..

If you think you can help us and work out the algorithm, please look at the attached csv file.
Of general interest, I have added some card no's at the end starting with 0x0000000, then 0x0000001 and then bit-shifted until 0x8000000
Identical passwords occur in some of the bit-shifted passwords, this may help!

I think the encryption algorithm is AES as the chips on the main board have this functionality... anyone good at cracking AES?

For those who have a restrictive firmware in their Mini (all fw versions) or Jr (post 2.2.0) and want to be able to re-create tags at with different UIDs their own leisure - instead of swapping.  Follow this instructable.
http://www.instructables.com/id/EMUTAG- … -Printers/


Up to date file added (as of 2017-02-11 11:21:32 server time)

Post's attachments

Davinci Card Nos 2017-02-11 112132.csv 16.81 kb, 32 downloads since 2017-02-11 

You don't have the permssions to download the attachments of this post.

2

Re: Davinci Jr and Mini NFC Password requests.

Hi Cgrillo,

Please could you supply the password for the following:

[00] : 04277BD0
[01] : 229A3D81
[02] : 04480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE
[06] : 00000000
[07] : 00000000

I have tried to read my Davinci Jr with a logic analyser and got 0x09,0x78,0x09,0xDA after 1B but when i use this key to read tag it does not authenticate.

Thanks
Al

3

Re: Davinci Jr and Mini NFC Password requests.

Hi,

You have taken the first 4 numbers after the 1b, whereas you need to have taken the second number from the next 4 pairs of numbers after the "1b".  the "09" is just the request type (or something like that) and needs to be ignored.
The first 2 bytes will be 78, DA ....
Re-check your output file and if you're not successful, I'll have a look.


Bigalscot wrote:

Hi Cgrillo,

Please could you supply the password for the following:

[00] : 04277BD0
[01] : 229A3D81
[02] : 04480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE
[06] : 00000000
[07] : 00000000

I have tried to read my Davinci Jr with a logic analyser and got 0x09,0x78,0x09,0xDA after 1B but when i use this key to read tag it does not authenticate.

Thanks
Al

4 (edited by Bigalscot 2016-12-08 13:41:02)

Re: Davinci Jr and Mini NFC Password requests.

Cgrillo,

Thanks for that, I have now authenticated:

[00] : 04277BD0
[01] : 229A3D81
[02] : 04480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE
[06] : 00000000
[07] : 00000000

Password : 78 DA EA 41

Pack : 31 73

Thanks again
Al

cgrillo wrote:

Hi,

You have taken the first 4 numbers after the 1b, whereas you need to have taken the second number from the next 4 pairs of numbers after the "1b".  the "09" is just the request type (or something like that) and needs to be ignored.
The first 2 bytes will be 78, DA ....
Re-check your output file and if you're not successful, I'll have a look.


Bigalscot wrote:

Hi Cgrillo,

Please could you supply the password for the following:

[00] : 04277BD0
[01] : 229A3D81
[02] : 04480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE
[06] : 00000000
[07] : 00000000

I have tried to read my Davinci Jr with a logic analyser and got 0x09,0x78,0x09,0xDA after 1B but when i use this key to read tag it does not authenticate.

Thanks
Al

5

Re: Davinci Jr and Mini NFC Password requests.

@Bigalscot

Thanks for the PACK.

6

Re: Davinci Jr and Mini NFC Password requests.

Hello cgrillo, I would like to request a password for this Tag for my Da Vinci mini w. Thank you very much in advance.http://soliforum.com/i/?RyBnQ8L.jpg

7

Re: Davinci Jr and Mini NFC Password requests.

hi, need the password for my NFC Tag...

[00] : 04FACDBB
[01] : 32B44280
[02] : 44480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE


thanks

8

Re: Davinci Jr and Mini NFC Password requests.

Elenier wrote:

Hello cgrillo, I would like to request a password for this Tag for my Da Vinci mini w. Thank you very much in advance.]

Let us know if it worked and the pack code.

0x34 0x22 0x07 0xB3

9

Re: Davinci Jr and Mini NFC Password requests.

Loeter wrote:

hi, need the password for my NFC Tag...

[00] : 04FACDBB
[01] : 32B44280
[02] : 44480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE


thanks


Let us know if it worked and the pack code.

0x7E 0x33 0x03 0x3F

10

Re: Davinci Jr and Mini NFC Password requests.

Bozotclown1970 wrote:
Elenier wrote:

Hello cgrillo, I would like to request a password for this Tag for my Da Vinci mini w. Thank you very much in advance.]

Let us know if it worked and the pack code.

0x34 0x22 0x07 0xB3

Thank you! PACK is: F7 77
Now I was able to see the 200/200m in XYZware so that part definitely worked. When I got to printing however, program said something like: Cartridge cannot be recognized. Please replace a genuine XYZprinting cartridge and try again. After restoring the data to the chip it worked perfectly like before.
I have a few theories why it did not work:
Software version is 2.1.16.4
Firmware version on my mini is 1.0.6 (some of these versions might be too high, and they therefore block the changes, but I could not find if they are OK or not.)
I used filament that already came with the printer. In the time of my first use, the printer and the software were connected to the internet. I blocked the access later. If this is the case, I can try another filament chip I have (code is in the picture).
Any help is greatly appreciated and thanks once again.
http://soliforum.com/i/?F1ehEZd.jpg

11

Re: Davinci Jr and Mini NFC Password requests.

Elenier wrote:
Bozotclown1970 wrote:
Elenier wrote:

Hello cgrillo, I would like to request a password for this Tag for my Da Vinci mini w. Thank you very much in advance.]

Let us know if it worked and the pack code.

0x34 0x22 0x07 0xB3

Thank you! PACK is: F7 77
Now I was able to see the 200/200m in XYZware so that part definitely worked. When I got to printing however, program said something like: Cartridge cannot be recognized. Please replace a genuine XYZprinting cartridge and try again. After restoring the data to the chip it worked perfectly like before.
I have a few theories why it did not work:
Software version is 2.1.16.4
Firmware version on my mini is 1.0.6 (some of these versions might be too high, and they therefore block the changes, but I could not find if they are OK or not.)
I used filament that already came with the printer. In the time of my first use, the printer and the software were connected to the internet. I blocked the access later. If this is the case, I can try another filament chip I have (code is in the picture).
Any help is greatly appreciated and thanks once again.


0x9E 0xCD 0xE0 0x46


I hope this helps. Pack code please

12

Re: Davinci Jr and Mini NFC Password requests.

Hello,

I would like to request the password for the following tag:

Page : Data
[00]:043ADB6D
[01]:229A3D81
[02]:04480000
[03]:E1101200
[04]:0103A00C
[05]:340300FE
[06]:00000000
[07]:00000000

Thanks.. :-)

13

Re: Davinci Jr and Mini NFC Password requests.

finne wrote:

Hello,

I would like to request the password for the following tag:

Page : Data
[00]:043ADB6D
[01]:229A3D81
[02]:04480000
[03]:E1101200
[04]:0103A00C
[05]:340300FE
[06]:00000000
[07]:00000000

Thanks.. :-)


Pack code

0x9E 0xCD 0xE0 0x46

14

Re: Davinci Jr and Mini NFC Password requests.

hi there!

Could you please get me the password for this Tag (DaVinci Mini)?


[00] : 048E9496
[01] : 8A3E4D81
[02] : 78480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE
[06] : 00000000
[07] : 00000000

15 (edited by ernbale 2016-12-08 20:34:31)

Re: Davinci Jr and Mini NFC Password requests.

Hello
Could you please get the password for my Da Vinci mini w NFC Tag

Page : Data
[00]:0494938B
[01]:8A3E4D80
[02]:79480000
[03]:E1101200
[04]:0103A00C
[05]:340300FE
[06]:00000000
[07]:00000000

Tanks

16

Re: Davinci Jr and Mini NFC Password requests.

elcidel wrote:

hi there!

Could you please get me the password for this Tag (DaVinci Mini)?


[00] : 048E9496
[01] : 8A3E4D81
[02] : 78480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE
[06] : 00000000
[07] : 00000000


0xC9 0x06 0x03 0xFC

17

Re: Davinci Jr and Mini NFC Password requests.

Guys,

If you cannot take the time to provide us with the pack code. DO NOT BOTHER ASKING AGAIN!

18

Re: Davinci Jr and Mini NFC Password requests.

ernbale wrote:

Hello
Could you please get the password for my Da Vinci mini w NFC Tag

Page : Data
[00]:0494938B
[01]:8A3E4D80
[02]:79480000
[03]:E1101200
[04]:0103A00C
[05]:340300FE
[06]:00000000
[07]:00000000

Tanks



0xDD 0x1E 0xA1 0x4E

19

Re: Davinci Jr and Mini NFC Password requests.

Bozotclown1970 wrote:
ernbale wrote:

Hello
Could you please get the password for my Da Vinci mini w NFC Tag

Page : Data
[00]:0494938B
[01]:8A3E4D80
[02]:79480000
[03]:E1101200
[04]:0103A00C
[05]:340300FE
[06]:00000000
[07]:00000000

Tanks



0xDD 0x1E 0xA1 0x4E


Thank you! PACK is: 2E 7A

20

Re: Davinci Jr and Mini NFC Password requests.

Bozotclown1970 wrote:
Elenier wrote:
Bozotclown1970 wrote:

Let us know if it worked and the pack code.

0x34 0x22 0x07 0xB3

Thank you! PACK is: F7 77
Now I was able to see the 200/200m in XYZware so that part definitely worked. When I got to printing however, program said something like: Cartridge cannot be recognized. Please replace a genuine XYZprinting cartridge and try again. After restoring the data to the chip it worked perfectly like before.
I have a few theories why it did not work:
Software version is 2.1.16.4
Firmware version on my mini is 1.0.6 (some of these versions might be too high, and they therefore block the changes, but I could not find if they are OK or not.)
I used filament that already came with the printer. In the time of my first use, the printer and the software were connected to the internet. I blocked the access later. If this is the case, I can try another filament chip I have (code is in the picture).
Any help is greatly appreciated and thanks once again.


0x9E 0xCD 0xE0 0x46


I hope this helps. Pack code please

Thanks. PACK is : A9 67
It does not work either though. Now I also lost 200m of filament since this new chip cannot be reverted back. Bummer.

21 (edited by totalitarian 2016-12-08 22:42:46)

Re: Davinci Jr and Mini NFC Password requests.

Love to contribute. I'm on 2.2.7. Are there any guides on where to read the tag from, is from the machine or the spool?

22

Re: Davinci Jr and Mini NFC Password requests.

totalitarian wrote:

Love to contribute. I'm on 2.2.7. Are there any guides on where to read the tag from, is from the machine or the spool?

The tags are being read from either a NFC enabled cell phone or an external piece of hardware like an Arduino.

23

Re: Davinci Jr and Mini NFC Password requests.

Bozotclown1970 wrote:
totalitarian wrote:

Love to contribute. I'm on 2.2.7. Are there any guides on where to read the tag from, is from the machine or the spool?

The tags are being read from either a NFC enabled cell phone or an external piece of hardware like an Arduino.

Thanks. I have the android app but not sure where to put the phone to read the tag.

24

Re: Davinci Jr and Mini NFC Password requests.

Place the tag under the phone and read it from there. I do not have a NFC ready phone so I cannot help you,  sorry.  sad

25

Re: Davinci Jr and Mini NFC Password requests.

Thank you!
The PACK Number is 0F 7F.
I was able to edit the Tag, but afterwards I get a "unknown spool error".

Bozotclown1970 wrote:
elcidel wrote:

hi there!

Could you please get me the password for this Tag (DaVinci Mini)?


[00] : 048E9496
[01] : 8A3E4D81
[02] : 78480000
[03] : E1101200
[04] : 0103A00C
[05] : 340300FE
[06] : 00000000
[07] : 00000000


0xC9 0x06 0x03 0xFC