ZXHN H168N V3.5

@mkst hi mate, how you doing.

any idea how can i decrypt the ZXHN H168N V3.5 config

also using router pass view tool(a closed source one) is able to decrypt the older version of it V3.1. tested on two routers of it and it gave me this output

Encrypted Data Start Position: 227
Encryption Algorithm: AES-128
Encryption Key: 34303263333864653339626564363635
Compression: zlib / deflate

and

Encrypted Data Start Position: 227
Encryption Algorithm: AES-128
Encryption Key: 4772574D33487A264C54767A26665E39
Compression: zlib / deflate

also someone told me

the encryption algorithm was changed to AES-256-CBC and key and iv are derived from MAC, SerialNumber and EncryKey.

snprintf(&g_keySeed, 65, “%s%sMcd5c46e”, EncryKey, SN); snprintf(&g_ivSeed, 65, “G21b667b%s%s”, MAC, EncryKey);

sha256(key_seed, key_seed_len, &aes_key); sha256(iv_seed, iv_seed_len, &aes_iv);

with out telling me what’s that encrykey and didn’t reply again.

ZXHN H168N V3.5.zip

[minanagehsalalma]

@kies83 i have already replied to you in email…

[snowsquizy]

With the testing I did with the H268A, the CRC as 0 means you are using the wrong type to encode the xml back to bin. Not sure about the key required or how to get it