Hello radio friends.
If you own an Anytone D878UVII DMR radio (because it supports AES encryption in DMR mode but don't do that because FCC says so), you need to check your firmware and update it to v3.03 if it isn't already.
Previous versions used a zero-value IV at the start of all transmissions. I don't know the precise mode of AES used by Anytone, Motorola, et al (not specified, though soon I'll be digging), but having a predictable IV is never a good thing.
Matt Hamilton /
npub1hq…ls7lf
2024-05-12 02:06:11
Author Public Key
npub1hqyd2qg8e5j40n4tzg6sy77mcdgyn3jva7xz7wapm8hn63wxq0pqtls7lfPublished at
2024-05-12 02:06:11Event JSON
{
"id": "b06b7b46926179b3012df251c5f4e4900972425d493792d7d610c0837c9a3168",
"pubkey": "b808d50107cd2557ceab1235027bdbc35049c64cef8c2f3ba1d9ef3d45c603c2",
"created_at": 1715479571,
"kind": 1,
"tags": [
[
"proxy",
"https://noauthority.social/users/eriner/statuses/112425669207022257",
"activitypub"
]
],
"content": "Hello radio friends.\n\nIf you own an Anytone D878UVII DMR radio (because it supports AES encryption in DMR mode but don't do that because FCC says so), you need to check your firmware and update it to v3.03 if it isn't already.\n\nPrevious versions used a zero-value IV at the start of all transmissions. I don't know the precise mode of AES used by Anytone, Motorola, et al (not specified, though soon I'll be digging), but having a predictable IV is never a good thing.",
"sig": "7c6a0ff243144aa524d8d9769b3b135e6c3a38d5af6a5dad89858bad3452689a5a6e1b35187f760bc4ee364ca0c877c10eeca771d425ac990d799362f5d4f064"
}