CANhack.de CAN-Interface RKS+CAN
CAN Hardware, CAN Software, CAN Protocols - CAN Bus Forum for Your CAN Bus Project.

Mercedes Security Access (27 XX)

 
New Topic Reply 🔗 🖨 CANhack.de - Index » Diagnostic CAN
Author Message
ecu1000
Guest




 


Free account, no CAN development support

Post11-05-2015, 22:01    Subject: Mercedes Security Access (27 XX) Quote

Hey everyone.

Can someone possibly help with the seed key for level 1 and 2 on a Mercedes? The situation is as follows.
CanID: 6BC

SIDH: D7
SIDL: 80
EID8: 50
EID0: 79
DLC: 08
Dm: 02 27 01 FF FF FF FF FF

CanID: 4FC
SIDH: 9F
SIDL: 80
EID8: FE
EID0: 10
DLC: 08
Dm: 04 67 01 24 D8 05 60 90

CanID: 6BC
SIDH: D7
SIDL: 80
EID8: 50
EID0: 79
DLC: 08
Dm: 04 27 02 C2 B4 FF FF FF

CanID: 4FC
SIDH: 9F
SIDL: 80
EID8: FE
EID0: 10
DLC: 08
Dm: 03 67 02 34 D8 05 60 90


Translated on 05-07-2026, 13:14.
Back to top
Surfjenser



Joined: 01/04/2012
Posts: 39
Karma: +0 / -0   Thank you, like it!
Location: Hannover

Free account, no CAN development support

Post15-05-2015, 16:14    Subject: Mercedes Security Access (27 XX) Quote

What exactly is the question now? How do you calculate the key from the seed?


Translated on 05-07-2026, 13:16.
Back to top Profile PM
Benzsport



Joined: 03/12/2017
Posts: 3
Karma: +0 / -0   Thank you, like it!
Location: Berlin

Free account, no CAN development support

Post12-03-2017, 9:10    Subject: Mercedes Security Access (27 XX) Quote

Any news?
Okay, hier ist die Übersetzung des Textes, gefolgt von einer möglichen Berechnung, falls vorhanden:

**Übersetzung:**

Please provide the text you would like me to translate from German to English. I will then provide the translation, followed by any relevant calculations if applicable.


Translated on 05-07-2026, 13:17.
Back to top Profile PM
postmann
CAN-Profi
CAN-Profi


Joined: 05/23/2013
Posts: 145
Karma: +64 / -0   Thank you, like it!


CAN Support

Post14-03-2017, 20:42    Subject: Mercedes Security Access (27 XX) Quote

The question is still missing.


Translated on 05-07-2026, 13:17.
Back to top Profile PM
Benzsport



Joined: 03/12/2017
Posts: 3
Karma: +0 / -0   Thank you, like it!
Location: Berlin

Free account, no CAN development support

Post27-03-2017, 17:56    Subject: Mercedes Security Access (27 XX) Quote

Well, the question is actually quite clear, isn't it?
How can I calculate that?


Translated on 05-07-2026, 13:17.
Back to top Profile PM
postmann
CAN-Profi
CAN-Profi


Joined: 05/23/2013
Posts: 145
Karma: +64 / -0   Thank you, like it!


CAN Support

Post28-03-2017, 11:24    Subject: Mercedes Security Access (27 XX) Quote

It depends on the algorithm, and it's specific to each control unit.

The process involves a parallel calculation performed by the engine control unit (ECU) and the diagnostic tester, using a random number (seed) provided by the ECU. If both calculated values (keys) match, the access, i.e., the advanced diagnostic mode, is activated.

Therefore, there is no "fixed" formula, but rather the algorithm is embedded within the diagnostic file (CBF, SMR-D, etc.).


Translated on 05-07-2026, 13:18.
Back to top Profile PM
Benzsport



Joined: 03/12/2017
Posts: 3
Karma: +0 / -0   Thank you, like it!
Location: Berlin

Free account, no CAN development support

Post28-03-2017, 11:41    Subject: Mercedes Security Access (27 XX) Quote

Can I find that information in the CBF file?
Where would that be?


Translated on 05-07-2026, 13:18.
Back to top Profile PM
postmann
CAN-Profi
CAN-Profi


Joined: 05/23/2013
Posts: 145
Karma: +64 / -0   Thank you, like it!


CAN Support

Post29-03-2017, 22:21    Subject: Mercedes Security Access (27 XX) Quote

I cannot specify the exact location of that information within the CBF file, especially since Mercedes uses UDS with SMR-D instead of KWP2000 with CBF.

I think that to do this, you would simply need to "unpack" a diagnostic file, for example, using CANdelaStudio or similar software.


Translated on 05-07-2026, 13:19.
Back to top Profile PM
wuerfel



Joined: 05/08/2017
Posts: 2
Karma: +0 / -0   Thank you, like it!
Location: Ludwigsburg

Free account, no CAN development support

Post08-05-2017, 15:15    Subject: Mercedes Security Access (27 XX) Quote

Sounds interesting.
I could provide CBF files (also known as SMD-R) from Mercedes.
Here's the translation:

MED40, CR43, M177.
* MB STAR DEV (Vediamo/Xentry) Coding *


Translated on 05-07-2026, 13:19.
Back to top Profile PM
wuerfel



Joined: 05/08/2017
Posts: 2
Karma: +0 / -0   Thank you, like it!
Location: Ludwigsburg

Free account, no CAN development support

Post13-05-2017, 21:22    Subject: Mercedes Security Access (27 XX) Quote

Is there anything else I can help you with?
* MB STAR DEV (Vediamo/Xentry) Coding *


Translated on 05-07-2026, 13:20.
Back to top Profile PM
CAN-Diagnose
Administrator
Administrator
Avatar-CAN-Diagnose

Joined: 06/07/2011
Posts: 573
Karma: +29 / -0   Thank you, like it!
Location: Ländle



Post14-05-2017, 13:21    Subject: Mercedes Security Access (27 XX) Quote

The topic probably won't be particularly relevant to most people... icon_wink.gif
Dipl.-Ing. (FH) Rainer Kaufmann - Embedded Software Freelancer
System RKS+CAN: CANHack.de CAN-Bus Interface


Translated on 05-07-2026, 13:20.
Back to top Profile PM WWW
New Topic Reply 🔗 🖨 CANhack.de - Index » Diagnostic CAN
Similar articles and topics
Topic Forum
No new posts Mercedes Diagnostics: Security Protocol Analysis Diagnostic CAN
No new posts CAN bus in Mercedes CAN Smalltalk, CAN News, Smalltalk
No new posts CAN im Mercedes C-Klasse (202) Vehicle-specific Hardware and Pin Assignments
No new posts Mercedes W204 EZS CAN ID? CANhack.de CAN-USB System: RKS+CAN
Jump to:  
You cannot post new topics in this forum.