Page 1 of 1

icom dPMR encryption

Posted: 21 May 2020, 10:39
by cisco1
Does anyone know if basic encryption in icom dPMR can be decrypted?
as far as I know there are only 32k code options? radio icom iF4062T/S

thx

Re: icom dPMR encryption

Posted: 21 May 2020, 12:49
by 26mb04
Absolutely. There is demo on youtube showing enhanced DMR encryption key recovery with free software (albeit a custom build), so dPMR encryption will be a very similar approach. It's fine for stopping Most People (myself included) listening to you, but it's not unbreakable to someone who really wants to listen in. The raw data can also be recorded now, and decoded at a later date, so there's that to consider.

Re: icom dPMR encryption

Posted: 21 May 2020, 15:49
by thelad
26mb04 wrote:
21 May 2020, 12:49
Absolutely. There is demo on youtube showing enhanced DMR encryption key recovery with free software (albeit a custom build), so dPMR encryption will be a very similar approach. It's fine for stopping Most People (myself included) listening to you, but it's not unbreakable to someone who really wants to listen in. The raw data can also be recorded now, and decoded at a later date, so there's that to consider.
Do you have a link to said video? I assume you mean from the radio its self rather than in the transmission.

Re: icom dPMR encryption

Posted: 21 May 2020, 16:12
by cisco1
26mb04 wrote:
21 May 2020, 12:49
Absolutely. There is demo on youtube showing enhanced DMR encryption key recovery with free software (albeit a custom build), so dPMR encryption will be a very similar approach. It's fine for stopping Most People (myself included) listening to you, but it's not unbreakable to someone who really wants to listen in. The raw data can also be recorded now, and decoded at a later date, so there's that to consider.
coul you please send me a link here or via pmessage?
p.s. the question is not about decoding dPMR signal, its about encrypted voce ;)

Re: icom dPMR encryption

Posted: 23 May 2020, 10:15
by 26mb04
The spec for the F4062 doesn't mention encryption in the dPMR mode. Do you mean the standard voice inversion? That's not really encryption as such, there are loads of ways to listen to that. The other options are either the UT109 non-rolling scrambler (as before) or the ut110 rolling scrambler. I don't know much about that, but I'd imagine the technique would be similar to fixed frequency. As for the dPMR mode, the spec I have seen makes no mention of encryption so I doubt it will have that capability.

I can't find the vid of the enhanced break. Here is a thread from the DSD devs who say it is possible to build DSD+ in a way that will decrypt enhanced DMR privacy. This probably involves using other programs that aren't included with DSD+, so it won't be straightforward. I would think the same techniques will apply to dPMR encryption too. Enhanced privacy was never meant to be unbreakable, just quite good.

Re: icom dPMR encryption

Posted: 23 May 2020, 11:23
by Metradio
Little known fact, the AOR family of digital receivers (DV1, DV10 and AR 5700D) are able to find the key and unscramble speech within 2 seconds on basic privacy in NXDN/IDAS protected systems..

Mike

Re: icom dPMR encryption

Posted: 25 May 2020, 17:45
by moj
no that's not correct sadly Mike , i know it can decrypt the nexedge and idas 4800 code but the idas trunking it didn't work for me which was the reason i bought the DV1 for in the first place and if i remember right there 32'767 combinations and no it's not easily crackable and had to be done manually ;)

Also the enhanced video will be the one made by the dsd maker who vowed to never release it to the public due to all encryption would probably go the AES route then .

The rolling code also can not be cracked with an inversion descrambler program on the UT110r board either , i tested all these theorys on the idas ic-f4162d handheld and the ic-f6062d base !

hope that help's ;)

Re: icom dPMR encryption

Posted: 25 May 2020, 20:49
by Metradio
The DV1 it seems is only capable of receiving NXDN/Idas 4800 and not 9600, DV10 and the new AR5700D are the same.. Luckily for me the stuff I can hear is all 4800 with just one scrambled user - an f this and f that skip hire firm...

Mike

Re: icom dPMR encryption

Posted: 28 May 2020, 10:54
by cisco1
For example, I have a recorded transmission in dPMR format, encrypted, is there any software/device through which I can decrypt it or even manually guess the 32,767 possible keys? i think, i cannot do it via R-8600, R-8600 needs a real transmition?

DV1 has a code option, but it only for NXDN, not for dPMR

Re: icom dPMR encryption

Posted: 28 May 2020, 13:51
by 26mb04
Well, moj, it's good to know someone has tried all these things.

cisco1, it depends on whether you recorded the transmission as audio, or data from the iq output. If the latter, you could hold on to the recording until a future point when there's a chance you'll be able to use another programme to decrypt it. It's only a matter of time (perhaps a LOT of time) before enhanced privacy keys become more easily compute-able, like CTCSS tones are today. I reckon an enhanced privacy decryption programme will be in the wild within 15 years. You'll probably need a decent GPU to run it though.

Re: icom dPMR encryption

Posted: 17 Jun 2020, 17:26
by troffasky
cisco1 wrote:
28 May 2020, 10:54
For example, I have a recorded transmission in dPMR format, encrypted, is there any software/device through which I can decrypt it or even manually guess the 32,767 possible keys?
32k possibilities are trivially easy to exhaust with modern computing resources. You just need to write the software.

Re: icom dPMR encryption

Posted: 18 Jun 2020, 02:18
by moj
Well if you can create this program it will be a useful tool to add to our scanning toolkit Troffasky ;)