reverse engineering "encrypted" vtech walkie talkie
sillychannel32
0:00 / 0:00
reverse engineering "encrypted" vtech walkie talkie
963 просмотра · 5 месяцев назад
sillychannel32
529 подписчиков
963 просмотра · 5 месяцев назад
VTech claims this KidiGo kids walkie talkie has AES encrypted voice. i have an insatiable urge to discover the contents of electronic devices. you bet we are gonna see whats inside it :3 AND do some bus sniffing and data extraction with a microcontroller!
hyperlinks
for the chips:
the transceiver chip with the dreaded "32 bits key length" is an Amiccom A7137: https://web.archive.org/web/202311301...
the 2kb EEPROM is an Atmel 24C02A: https://ww1.microchip.com/downloads/e...
for the software:
pico-i2c-sniffer by jjsch-dev: https://github.com/jjsch-dev/pico_i2c...
articles and stuffz:
product page and manual: https://www.vtechkids.com/product/det...
this is the article i got the "aes encrypted" quote from: https://www.which.co.uk/news/article/... (they say they sent it off to some security group to look at. but i dont really think the threat vector they are talking about , someone intercepting the pairing process slash key exchange , is really very feasible.. which is funny because its possible the entire thing is not meaningfully encrypted anyways if it rlly does use that AES32)
also, one Jake R started taking a look at this device a few years ago! https://hackaday.io/project/176980-vt...