All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 28 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 10:04 
Offline

Joined: January 18th, 2010, 23:53
Posts: 335
Location: india
Can someone Provide Donor ROM for this hdd ST2000DM005-2U9102
Attachment:
HDD.jpg
HDD.jpg [ 161.64 KiB | Viewed 9986 times ]


Close to
Attachment:
ROM.jpg
ROM.jpg [ 64.85 KiB | Viewed 9986 times ]



HDD comes with Motor IC burned. PCB number is 100870255
Donor PCB with Original ROM Shows like this
Quote:
Flash boot code Digital Signature Verification failure!
0x00000040
0x00001200
0x00000001
0x00000001
0x00000001

Attachment:
ST2000DM005-2U9102-001-Patient.rar [251.57 KiB]
Downloaded 276 times


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 11:46 
Offline

Joined: October 3rd, 2005, 0:40
Posts: 4311
Location: Hungary
what do you get if you change the byte at 0x40000 (just to corrupt that header) ?

pepe

_________________
Adatmentés - Data recovery


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 12:31 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
I'm guessing, but I suspect these are the digital signatures.

Digital signature in active segment

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00047080  01 00 00 00 8F 22 01 9C 26 4B C1 59 47 F2 82 D3  .....".œ&KÁYGò‚Ó
00047090  AA 5C 6D C9 AE F4 47 D2 E3 DC 4E E3 58 58 1E A1  ª\mÉ®ôGÒãÜNãXX.¡
000470A0  E0 FE 83 9C 04 30 37 19 9D 2E 37 7F 68 91 33 32  àþƒœ.07...7.h‘32
000470B0  D6 08 CB A5 9F 5C E8 62 26 89 BC 61 5C 10 94 E2  Ö.Ë¥Ÿ\èb&‰¼a\.”â
000470C0  42 1A 44 38 50 0A FF 75 BE E7 7A 6B DE 83 35 30  B.D8P.ÿu¾çzkÞƒ50
000470D0  71 D4 1C 18 47 F3 AA 05 A5 84 DE 2F D7 BF 45 89  qÔ..Góª.¥„Þ/׿E‰
000470E0  0F 96 D5 46                                      .–ÕF

Digital signature in inactive segment

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00007080  33 22 11 00 00 00 00 00 00 00 00 00 00 00 00 00  3"..............
00007090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000070A0  00 00 00 00 32 32 32 32 32 32 32 32 32 32 32 32  ....222222222222
000070B0  32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32  2222222222222222
000070C0  32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31  2222111111111111
000070D0  31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31  1111111111111111
000070E0  31 31 31 31                                      1111

Are these signatures matched to a security/encryption key in the MCU? If so, does the patient ROM now have to be patched with the digital signature of the donor ROM?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 13:28 
Offline

Joined: October 3rd, 2005, 0:40
Posts: 4311
Location: Hungary
ah, i missed that the sig in containter0 is invalid :s so it won't work with the corrupted header at 40000

_________________
Adatmentés - Data recovery


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 13:52 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
HRK = Hidden Root Key

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00004800  0A 0D 48 52 4B 20 4E 75 6B 65 64 2E 00 00 00 00  ..HRK Nuked.....
00004810  00 00 04 44 0D 0A 48 52 4B 20 46 75 73 65 20 42  ...D..HRK Fuse B
00004820  79 70 61 73 73 65 64 00 00 30 04 44 00 B0 4C 80  ypassed..0.D.°L€


https://patentimages.storage.googleapis.com/f4/9e/b3/3885da9c00ccc2/US20170230178A1.pdf
https://patentimages.storage.googleapis.com/2b/c1/fc/43a2a7a33c4bd5/US9659191.pdf

Quote:
In some aspects of the present disclosure, a portion of an encryption key may be stored, for example, in an electronically erasable programmable read only memory (EEPROM). A remainder of the encryption key may be stored in a one-time writable storage location, Such as an electronic fuse (eFuse) array. Data received at the data storage device may be encrypted using the encryption key, and may be stored in a storage medium. In the event that access to the stored data is to be prevented, the one or more bits of the encryption key stored in the one-time Writable storage location may be modified.

For example, the eFuses containing the remainder of the encryption key may be blown, thereby rendering the portion of the encryption key stored in the one-time writable memory unreadable. Thus, decryption of the encrypted data is prevented and the data stored in the data storage medium rendered unreadable.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 14:08 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
It appears that part of the key is stored in the MCU while the remaining part is stored in ROM. ???

Attachment:
MCU_ROM_key.gif
MCU_ROM_key.gif [ 10.57 KiB | Viewed 9928 times ]

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 14:56 
Offline

Joined: October 3rd, 2005, 0:40
Posts: 4311
Location: Hungary
these seem to be 2 different things: decryption key and signature 'salt'... we could check that by comparing 2 drives purchased together, having the same firmware. If sigs are different on these two, MCU is involved and the shit is deep...

pepe

_________________
Adatmentés - Data recovery


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 15:49 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
Another way to check would be to download an official firmware update and see if it includes a signature at the same location.

One question I would ask is, does the kernel produce the same error message if the ROM is absent? What error is reported if the ROM's Data Out pin is shorted to ground?

_________________
A backup a day keeps DR away.


Last edited by fzabkar on November 30th, 2022, 16:04, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 15:50 
Offline

Joined: September 17th, 2016, 16:06
Posts: 430
Location: India
Hi Fzabkar, hope you are doing great! The HRK segment resides on almost all LM Series drives too mfg couple of years ago. I don't think so they used it for the older drives. Not sure with the newer ones.

A single byte change in the ROM CODE will cause signature verification error..
The LZMA segments added by 3k unlock or mrt unlock will cause LED error.

Using similar donor rom from another family that would spin the hdd and making an adaptive using patients modules was possible with lot of struggle with F3 Editor (adjustment of sizes RAP SAP CAP aswell). However it wont spin the drive and will be stuck at Boot RST 0x40 I guess but no LED errors.(possibly the motor controllers are updated/changed).


Hi Pepe...i think you can refer to our last PMs that we exchanged.
Chipwhisperer was on my mind but you suggested something more repeatable.... (to unlock or bypass the signature verification?)


Sourcerer introduced me to the whisperer but I havent purchased one due to lack of funds. Worth the experiment :)


--


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 16:42 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
When I compare 0x0 - 0x3FFFF with 0x40000 - 0x7FFFF, the only differences are in the headers, CRCs and signatures. Therefore ISTM that the ROM code is OK. If there is a bit error, then it must be in the signature itself, or in the CRCs??? In fact F3RomExplorer is reporting CRC errors, but I don't know if they are real.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 18:11 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
There is a segment at 0x66F0 - 0x70E3 and a copy at 0x466F0 - 0x470E3. It appears to contain several signatures, some 0x100 bytes long and others 0x20 bytes. These appear to be digital signatures for several firmware components.

Here are the signatures (see attached file):

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  A0 00 00 00 00 00 00 00 F5 1F 00 00 66 90 27 00   .......õ...f.'.
00000010  04 5E 00 00 02 04 01 00 00 00 33 30 35 35 36 37  .^........305567
00000020  00 00 00 0A 1E 70 92 32 30 32 31 2D 30 34 2D 31  .....p’2021-04-1
00000030  36 30 37 3A 35 31 3A 31 34 00 08 00 00 02 02 01  607:51:14.......
00000040  04 00 05 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 9E 37 75 12 4D 5E D1 ED FE AD 54 86  ....ž7u.M^Ñíþ.T†
                      ^^ 0x100-byte sig

00000060  FE E8 E2 51 D2 87 C8 CF 9F 7F D3 21 01 B4 E8 4D  þèâQÒ‡ÈÏŸ.Ó!.´èM
00000070  76 CB CB D3 AD C0 CC 3B BD 97 09 44 D3 C7 D5 47  vËËÓ.ÀÌ;½—.DÓÇÕG
00000080  88 97 E2 D6 1F 78 B0 BD 5C 66 09 D4 55 87 5A 0B  ˆ—âÖ.x°½\f.ÔU‡Z.
00000090  90 60 09 DB E4 96 F4 0C 4E 8D D9 45 AA 38 80 14  .`.Ûä–ô.N.ÙEª8€.
000000A0  3C C0 A5 FD 7D 75 3B E4 35 5A CB 26 B4 95 E4 1D  <À¥ý}u;ä5ZË&´•ä.
000000B0  F3 6C D2 DA 1F 96 87 DF 1D 5E AC EB 82 EF CF 66  ólÒÚ.–‡ß.^¬ë‚ïÏf
000000C0  B6 60 66 AD FF EC B4 5F AC C1 DD 86 69 CF FC 8B  ¶`f.ÿì´_¬Á݆iÏü‹
000000D0  BB DE A5 46 D3 B3 74 BE EB E0 66 C0 47 B2 32 45  »Þ¥FÓ³t¾ëàfÀG²2E
000000E0  BF 97 01 0E 69 D9 8F 5E C4 B3 EB EF 33 A6 90 78  ¿—..iÙ.^ijëï3¦.x
000000F0  96 85 6A 90 AF 6A DE 99 43 C2 78 48 8E 86 42 1B  –…j.¯jÞ™CÂxHŽ†B.
00000100  6A 5D D0 6D CB 78 FE 0D 77 D3 5C 91 BB 3A B9 EF  j]ÐmËxþ.wÓ\‘»:¹ï
00000110  79 24 DD 32 CC 9D D9 AD 99 94 61 AB 0C B6 50 64  y$Ý2Ì.Ù.™”a«.¶Pd
00000120  8C 08 06 AB F8 B9 7D 40 77 C3 55 A7 89 A0 1D B5  Œ..«ø¹}@wÃU§‰ .µ
00000130  EC 91 41 11 F4 33 13 C7 E0 4E 12 DA AA 05 87 57  ì‘A.ô3.ÇàN.Úª.‡W
00000140  00 81 A3 3F E9 06 05 5A 90 1E 52 AF 27 E4 A7 03  ..£?é..Z..R¯'ä§.
00000150  75 A1 4C 76                                      u¡Lv

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000001F0                          44 65 76 53 41 4B 30 00          DevSAK0.
00000200  00 00 00 00 00 00 00 00 41 DF 5E 99 91 7D A4 6A
                                  ^^ 0x20-byte sig

00000210  76 BF 61 6E 0A 9D C9 03 03 10 FE E0 DC 16 25 C3
00000220  A2 1E 59 92 C5 7E D5 75

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000220                          50 72 6F 64 53 41 4B 31          ProdSAK1
00000230  00 00 00 00 00 00 00 00 71 24 0C 90 90 1A AB A9
                                  ^^ 0x20-byte sig

00000240  49 B8 5D 31 2B 33 D0 96 17 C4 26 CE 26 29 CF 24
00000250  D6 AD 6C 85 FB F5 ED 1D

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000250                          44 65 76 53 41 4B 32 00          DevSAK2.
00000260  00 00 00 00 00 00 00 00 1C EE B6 74 9D B6 6F 3B
                                  ^^ 0x20-byte sig

00000270  3A E5 A4 0B 09 31 C4 4A B0 AE 8E AE 65 F2 32 45
00000280  3F C0 03 E1 8F 1B 52 D2

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000280                          50 72 6F 64 53 41 4B 33          ProdSAK3
00000290  00 00 00 00 00 00 00 00 23 98 5E 9C D9 31 E3 35
                                  ^^ 0x20-byte sig

000002A0  93 EB 22 27 53 D3 E0 9F 89 18 0C 14 B7 4E 95 FD
000002B0  1C 40 5D 48 4A 77 A3 82

Another 0x100-byte sig

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000002F0                          51 AD AE 9E 66 D7 6F 29          Q.®žf×o)
00000300  50 E2 37 52 97 AE 48 4A 4B E0 6D 23 E8 EF DB DB  Pâ7R—®HJKàm#èïÛÛ
00000310  00 D8 8E 60 8E FF B3 9B E4 2F 78 26 A4 CC 68 43  .ØŽ`Žÿ³›ä/x&¤ÌhC
00000320  3E 4B 48 DA 10 A4 5B 87 A5 16 0A A9 F1 59 F6 AD  >KHÚ.¤[‡¥..©ñYö.
00000330  CF 1C 09 5E 22 34 53 DF 45 87 C2 F4 11 88 EF 74  Ï..^"4SßE‡Âô.ˆït
00000340  9B 3E 26 AA C0 C0 71 3F 5C 9D D0 74 C0 3D 14 57  ›>&ªÀÀq?\.ÐtÀ=.W
00000350  67 EC 2A 22 52 49 D8 3B 9D EF 73 DE A4 84 60 18  gì*"RIØ;.ïsÞ¤„`.
00000360  12 AC 55 38 85 83 E0 07 26 6A 28 A8 93 A1 A0 5A  .¬U8…ƒà.&j(¨“¡ Z
00000370  32 8F BA 8B 9A 85 63 56 F1 54 58 BE 9C 00 60 16  2.º‹š…cVñTX¾œ.`.
00000380  C6 C7 5C 8C 5B C8 1B 51 6F 15 A9 27 2B 30 E1 CF  ÆÇ\Œ[È.Qo.©'+0áÏ
00000390  D9 11 D7 F3 B0 94 81 30 44 F1 39 FB 65 52 4D 7A  Ù.×ó°”.0Dñ9ûeRMz
000003A0  65 7E 20 2A BC 2A 47 AD 5F 8A 27 35 8F A4 34 E2  e~ *¼*G._Š'5.¤4â
000003B0  4F F2 39 9B 54 0E 59 F9 48 6E FA D2 6C 24 66 2C  Oò9›T.YùHnúÒl$f,
000003C0  0E 68 85 36 DA F0 3F 07 36 91 A6 66 A3 CD 0D EB  .h…6Úð?.6‘¦f£Í.ë
000003D0  9E 9F 36 65 AB 7D C7 BE 7E 5A 91 12 CE 55 37 7D  žŸ6e«}Ǿ~Z‘.ÎU7}
000003E0  84 2F FE 91 B7 69 BE BA 1C 49 8F 5D DE 9A E3 65  „/þ‘·i¾º.I.]Þšãe
000003F0  89 77 10 E7 DE 74 7C 10                          ‰w.çÞt|.

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000470  00 00 00 00 00 00 00 00 30 82 03 CB 30 82 02 B3  ........0‚.Ë0‚.³
00000480  A0 03 02 01 02 02 15 00 BB A1 10 F0 08 61 47 95   .......»¡.ð.aG•
00000490  3D D1 E5 1D C0 23 03 AB 6F 41 C0 15 30 0D 06 09  =Ñå.À#.«oAÀ.0...
000004A0  2A 86 48 86 F7 0D 01 01 0B 05 00 30 7F 31 0B 30  *†H†÷......0.1.0
000004B0  09 06 03 55 04 06 13 02 55 53 31 1F 30 1D 06 03  ...U....US1.0...
000004C0  55 04 0A 13 16 53 65 61 67 61 74 65 20 54 65 63  U....Seagate Tec
000004D0  68 6E 6F 6C 6F 67 79 20 4C 4C 43 31 20 30 1E 06  hnology LLC1 0..
000004E0  03 55 04 0B 13 17 53 65 61 67 61 74 65 20 54 65  .U....Seagate Te
000004F0  63 68 6E 6F 6C 6F 67 79 20 54 44 43 49 31 2D 30  chnology TDCI1-0
00000500  2B 06 03 55 04 03 13 24 53 65 61 67 61 74 65 20  +..U...$Seagate
00000510  54 65 63 68 6E 6F 6C 6F 67 79 20 50 4B 20 43 68  Technology PK Ch
00000520  65 6F 70 73 20 55 6C 74 72 61 4C 43 30 1E 17 0D  eops UltraLC0...
00000530  31 36 31 31 30 38 30 32 33 35 32 32 5A 17 0D 34  161108023522Z..4
00000540  39 31 32 33 31 32 33 35 39 35 39 5A 30 81 87 31  91231235959Z0.‡1
00000550  0B 30 09 06 03 55 04 06 13 02 55 53 31 1F 30 1D  .0...U....US1.0.
00000560  06 03 55 04 0A 0C 16 53 65 61 67 61 74 65 20 54  ..U....Seagate T
00000570  65 63 68 6E 6F 6C 6F 67 79 20 4C 4C 43 31 20 30  echnology LLC1 0
00000580  1E 06 03 55 04 0B 0C 17 53 65 61 67 61 74 65 20  ...U....Seagate
00000590  54 65 63 68 6E 6F 6C 6F 67 79 20 54 44 43 49 31  Technology TDCI1
000005A0  35 30 33 06 03 55 04 03 0C 2C 53 65 61 67 61 74  503..U...,Seagat
000005B0  65 20 54 65 63 68 6E 6F 6C 6F 67 79 20 53 41 4B  e Technology SAK
000005C0  20 31 20 43 68 65 6F 70 73 20 55 6C 74 72 61 4C   1 Cheops UltraL
000005D0  43 20 50 72 6F 64 30 82 01 22 30 0D 06 09 2A 86  C Prod0‚."0...*†
000005E0  48 86 F7 0D 01 01 01 05 00 03 82 01 0F 00 30 82  H†÷.......‚...0‚
000005F0  01 0A 02 82 01 01 00 DB EA 41 DB BA 3B 98 57 E1  ...‚...ÛêAÛº;˜Wá
                               ^^ 0x100-byte sig

00000600  BF C1 1B E2 15 27 28 6F 9B BC A5 7F 83 D0 0C 95  ¿Á.â.'(o›¼¥.ƒÐ.•
00000610  72 0B 5D DF BB 7F 9B 69 F9 36 AB 5C 23 E6 26 CC  r.]ß».›iù6«\#æ&Ì
00000620  AC 04 15 91 77 67 49 CF 7C 75 4A AE 2F 7F F8 20  ¬..‘wgIÏ|uJ®/.ø
00000630  C8 60 95 AD 4E 5E 4E 33 6F 60 9E DF 08 AB 4B 52  È`•.N^N3o`žß.«KR
00000640  E2 06 EA B4 95 DE 1D BE A2 0D 2E 27 03 33 F2 B8  â.ê´•Þ.¾¢..'.3ò¸
00000650  A0 ED 64 25 71 B2 B3 12 AE 6C 66 FC E8 83 68 E5   íd%q²³.®lfüèƒhå
00000660  D2 48 8B 35 BD B0 47 30 75 91 6A 6F 87 62 C9 DB  ÒH‹5½°G0u‘jo‡bÉÛ
00000670  18 EF 7D 79 FA 80 AD 79 E7 AF B1 9F 39 01 0D 93  .ï}yú€.y篱Ÿ9..“
00000680  AA 78 93 76 09 4F 5F 7D CA C2 F8 34 D2 3D A2 31  ªx“v.O_}ÊÂø4Ò=¢1
00000690  99 DC B3 FE 5F DC 8C 09 4C E7 3B 81 C2 AB CE 83  ™Ü³þ_ÜŒ.Lç;.«΃
000006A0  35 8F 3C 2A 14 B6 36 F0 3B FC 94 58 7D 51 49 3D  5.<*.¶6ð;ü”X}QI=
000006B0  0B 4E 1F 76 8A 63 55 27 76 65 EF BD 6E 18 8E B5  .N.vŠcU'veï½n.Žµ
000006C0  C1 9A 64 25 B7 51 7F 7B 99 87 6D 88 BC 86 F3 50  Ášd%·Q.{™‡mˆ¼†óP
000006D0  2F 84 9D 71 C5 82 31 C8 3C DF 46 F8 22 25 F9 45  /„.qÅ‚1È<ßFø"%ùE
000006E0  4C D5 BA 08 81 C2 CE B5 04 3E A3 23 03 56 B7 63  LÕº..Âε.>£#.V·c
000006F0  5C 6C 84 11 E5 63 F7                             \l„.åc÷

Another 0x100-byte sig

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000740                       70 76 58 77 72 FD 37 AB A7         pvXwrý7«§
00000750  B0 8C FF FB CA F8 F5 20 98 D1 CF 08 AB 9C 53 D9  °ŒÿûÊøõ ˜ÑÏ.«œSÙ
00000760  C2 78 1C BC 46 D7 36 A5 E8 D3 64 96 64 19 86 F2  Âx.¼F×6¥èÓd–d.†ò
00000770  9C E3 FB 75 F9 EA E1 44 2F 29 C3 B5 25 D5 8C 21  œãûuùêáD/)õ%ÕŒ!
00000780  FD 1E 46 3A E0 E7 22 50 D2 97 E8 EB F7 8D 98 1E  ý.F:àç"PÒ—èë÷.˜.
00000790  46 60 DF E0 E3 EA 35 6D 69 B8 14 BE DF E4 F7 23  F`ßàãê5mi¸.¾ßä÷#
000007A0  EA DF 9A 37 91 0B 58 5F 11 DE BD 06 E9 72 2F 1E  êßš7‘.X_.Þ½.ér/.
000007B0  A9 F1 48 C3 D0 5B 4C 1A 10 F8 F6 F6 25 50 90 08  ©ñHÃÐ[L..øöö%P..
000007C0  EB E8 F6 DB 97 85 56 64 48 D2 32 8A DC 26 3E D0  ëèöÛ—…VdHÒ2ŠÜ&>Ð
000007D0  B5 08 F5 7F 32 A4 22 06 DC 0A 1E 14 3D 7D 3E 92  µ.õ.2¤".Ü...=}>’
000007E0  33 E3 66 55 54 45 B7 79 B8 E6 EF C0 72 F1 2B 8C  3ãfUTE·y¸æïÀrñ+Œ
000007F0  EB 5E 89 42 A6 90 00 AF 60 D1 8A 5A D1 55 51 8F  ë^‰B¦..¯`ÑŠZÑUQ.
00000800  10 41 55 75 35 87 E4 CB 84 D8 89 E5 A4 00 CC DC  .AUu5‡ä˄؉å¤.ÌÜ
00000810  F8 5F 2D 1F 4F AB DD 65 0B 1D CE 3D 47 DE 52 17  ø_-.O«Ýe..Î=GÞR.
00000820  F8 B9 3E 52 E0 AB 02 81 4B 90 32 CC 73 BC D9 95  ø¹>Rà«..K.2Ìs¼Ù•
00000830  4F CF 85 E5 02 08 8F 2E 40 27 A5 7E 3C 51 50 AE  OÏ…å....@'¥~<QP®
00000840  16 77 24 C1 88 F9 AE                             .w$Áˆù®

The final signature was posted earlier.


Attachments:
Sigs.7z [1.72 KiB]
Downloaded 237 times

_________________
A backup a day keeps DR away.
Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 18:38 
Offline

Joined: October 3rd, 2005, 0:40
Posts: 4311
Location: Hungary
Quote:
Another way to check would be to download an official firmware update and see if it includes a signature at the same location.

this struck me with an idea: If something in the MCU was used to generate ROM code signature, it would imply to recalculate the sig on a fw update. This would release the private key for generating the sig, and would be a stupid thing to do.
The only way this could be done reasonably is to hash an orig signature with the MCU id, so this is still plausible.
it would be nice to see 2 drives with identical fw version...

pepe

_________________
Adatmentés - Data recovery


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: November 30th, 2022, 20:45 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
Here is another digital signature problem, this time in a Seagate ST2000LM007 ROM:

https://groups.google.com/g/datarecoverycertification/c/oLmECBs1Pzk/m/kELCcawhAAAJ

I tried swapping the csiD headers to make the firmware boot from the other container, but the problem remained the same (because the other sig was uninitialised). The OP in that thread did not solve the case.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: December 2nd, 2022, 11:23 
Offline

Joined: January 18th, 2010, 23:53
Posts: 335
Location: india
I got one 2TB ROM but Date is different

Attachment:
New ROM.jpg
New ROM.jpg [ 105.89 KiB | Viewed 9696 times ]



This Family can't be unlocked, So i can't use ldr.

So waiting for ROM with close date to my ROM

Note: I also have one 4TB ROM of this family with same codes as in above picture


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: December 3rd, 2022, 19:10 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
Could you upload your 4TB ROM?

Can PC3K unlock this ROM? If so, then how does Ace circumvent (?) the signature after injecting its code?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: December 3rd, 2022, 22:05 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3561
Location: Chicago
fzabkar wrote:
Here is another digital signature problem, this time in a Seagate ST2000LM007 ROM:

https://groups.google.com/g/datarecoverycertification/c/oLmECBs1Pzk/m/kELCcawhAAAJ

I would reply to that conversation but I have read only permissions
First I would make sure that PCB (not the ROM) is original, its SN is W239EASD (requires scanning of the QR code)
If it is then I would guess the ROM code is not original.

This code if from a newer version of the Rosewood drive that can't be unlocked by PC3K, it requires a newer CPU as well (can't be told apart just by looking on its markings).
Using older type of the CPU would result in signature validation failure (just as the OP is having problems with)

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: December 3rd, 2022, 22:27 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3561
Location: Chicago
One more thing, in addition to what I said.
ROM could have been somewhat incorrectly modified by one of many DR tools that do ROM unlocks and this could have resulted in signature failure.

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: December 3rd, 2022, 22:33 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
Doomer wrote:
fzabkar wrote:
Here is another digital signature problem, this time in a Seagate ST2000LM007 ROM:

https://groups.google.com/g/datarecoverycertification/c/oLmECBs1Pzk/m/kELCcawhAAAJ

I would reply to that conversation but I have read only permissions


Thanks, I'll make them aware of your comments.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: December 3rd, 2022, 22:39 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3561
Location: Chicago
gps31 wrote:
HDD comes with Motor IC burned. PCB number is 100870255
Donor PCB with Original ROM Shows like this

Did you take PCB from the SAME model or you just found a PCB with the same PN?
if the model is not the same - it is the problem.

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.


Top
 Profile  
 
 Post subject: Re: Req: ST2000DM005-2U9102 Donor ROM
PostPosted: December 4th, 2022, 0:38 
Offline

Joined: January 18th, 2010, 23:53
Posts: 335
Location: india
Attachment:
4TB-1.jpg
4TB-1.jpg [ 137.27 KiB | Viewed 9613 times ]


PCB: 100870255 Rev. A and QR in PCB: 100870642 E E241624F

ROM 4TB
Attachment:
ST4000DM004-2U9104-001.rar [276.79 KiB]
Downloaded 239 times



Patient 2TB PCB: 100870255 Rev. A and QR in PCB: 100870642 D E1527AVU
Attachment:
Label.jpg
Label.jpg [ 270.23 KiB | Viewed 9613 times ]


ROM is in First Post


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 28 posts ]  Go to page 1, 2  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 47 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group