CrypKey Site Key Generator
 

I got a problem with the Site Key Generator of CrypKey.
I downloaded a program and I extracted the Master and User Key from it. Squidge said that this info needs to be copied into the skw ini file in order to use the Site Key Generator to generate keys for the program. But how do I do it? Here's an extracted passage of my skw ini file:

[General]
NumConfigs=4
ContactString=blah blah blah

[1]
Name=example.exe
Company=0
Number=1
Password=KENONIC
NumOptions=16
NumLevels=0
DefaultLevel=0
LicenseCount=3
Networked=0
AddTo=0
Restriction=1
RestrictionNum=3
Option1=
Option2=
.....
Option29=
.....

So where do I copy the Master and User Key to in order to create the keys for the program?
I'm using the CrypKey SDK 6.0

You need to seperate the master and user keys into there original parts before placing them into the ini file. Once you have seperated these you will get things like Company name, Company number, Password, etc. You also need to know the valid license levels and options for the program you want to create a license for.

You'll also need to modify the Site Key Generator so that it'll make keys for the application you want a license for, otherwise it'll only makes keys for the demo applications in the SDK.

thx
 

Thanx for your reply.
However, I'm fairly new to CrypKey. May you (or sb. else) tell me how I seperate the master and user keys into their original parts?

Also, I'd like to know how to modify the Site Key Generator to generate keys for this app. It's currently running in Master mode (i.e.: Unlimited License / No Restrictions).

I need some help...
Thx

(PS: Is it correct that CrypKey uses 16-bit RSA for its keys?)

can you share the app. I want to learn to crack Crypkey

Crypkey SDK is on Exetools FTP.

As for the Sitekey gen, it sounds like you downloaded my unlocked copy, so, in which case, it's already modified to allow it to create keys for any application. I'll assume you have unpacked my program to remove the time limits and nags.

For a newbie to Crypkey, a quite rare application by the name of "Ckinfo" will give you most of the information you need to create a license from the master/userkey. For the information such as license options you need to debug your target program and find out what the modes are by breaking on the crypkey API calls (nb: they could be statically linked, so you may have to use a signature search).

Ne one willing to share ckinfo and the IDA signatures ???

Nope, I didn't download the cracked version of the skw from the exetools ftp. I cracked it on my own. As you probably know the guys at Kenonic have configured SKW so that it is possible to use it to generate keys for itself. In order to do so you need a master license. I patched the unlicensed version with softice so that it allows to generate unrestricted master keys for itself. Then I generated a master key and I entered it.

But how do I modify the skw so that it generates keys for any app?

Thx

(PS: May you give me a download link for ckinfo? It seems I'm too stupid to find it on the net :( :rolleyes: )

It isn't necessary to patch skw if it is already running in unrestricted master mode, right?

But I still have a problem: Where do I enter the seperated parts of the Master and User Key? If I configure a new application in SKW, it never asks for any of the seperated parts of the Master and/or User Key. It only wants to know the ID of my app, what type of licenses to generate (EasyLicense, Addon-License, Network-License), the password, the restrictions of generated licenses (temporary license (limited by days or runs) or permanent licenses), the number of available levels and the number of available options. That's it.

The skw ini file doesn't reveal anything interesting either. If I look at the configuration lines of the three pre-defined apps (ck_demo.exe, example.exe and skw.exe) I only find what I mentioned in my first post. E.g.:

name=xxx
company=x
number=x
password=abc
etc.

I can't find anything about the seperated parts of the master and/or user key in the skw ini file. I've attached the file so that everyone can view it directly.

PS: I'm still waiting for a download link for ckinfo. I would also be pleased about a document which describes how to manually sperate master and user keys and how to manually decrypt the password.

I'm waiting for your replys...........

Uuups

I forgot to attach the file in my previous post.........

Unrestricted master mode only allows you to create keys for other SKW. You will need to modify the program in order for it to produce keys for a different company.

The information required to setup a license needs to be entered directly into the ini file, as there is no where to put inside the actual program itself (this is because when you obtain the skw, the program is locked to your company, so there no need to ask for company number or name, etc)

Your not going to find a document on how to decrypt the master keys as this information is closely guarded by those that have broken it. The best you'll get is old plain-style hacking attempt by changing jumps/etc. You need to figure out the information by yourself, or get the ckinfo program, unpack it, and then disassemble it. Be warned that the actual routine to take a master key and seperate it into it's parts, and then generate the proper auth key is about 50 A4 pages of assembler listing, so not many people are going to document it once they have written a program to do it themselves.

However, C code to generate a valid authorisation code from a master/userkey can be done quite easily in 20 pages (most of the assembler seems like an obfuscation attempt).

Is there a way that one can get ckinfo atleast. BTW unpacking the code is still in progress.

Now I understand. Thx Squidge

Soft_Ice: Good! There IAT encryption is really quite lame and very easy to undo - not even a need for ImpREC or similar. There Armadillo-like protection isn't much better when you find all the decrypted parts of the program sitting in memory just waiting to be pieced together.

IAT Encryption ??? Isnt that the same used in Vbox 4.X versions. I am surprised if that is the same one

The IAT encryption in Crypkey is a simple XOR, so I doub't it.

Tut available
 

Squidge, you said there're no tuts for decrypting and seperating master and user keys available.

At Anticrack.de I found a tut which discusses the complete internals of CrypKey including how CrypKey stores license info on the HD, how CrypKey encrypts/decrypts Site Codes/Site Keys/Master Keys/User Keys, the structures of (decrypted) Site Codes/Site Keys/Master Keys/User Keys, how it generates Site Keys from Site Codes and much much more. :)

It's quite interesting to see that CrypKey uses Slack Space on FAT partitions in order to store the license info securely.

Also it is interesting to read how the guys at Kenonic implemented RSA into CrypKey. Very "secure" :D

The complete tut/essay about this "battle-proven software protection system" is very interesting and I suggest to read it :)

Well, that's something I didn't know. I pretty much did all the reversing work myself. Thanks for the info :)

ckinfo
 

ckinfo can be downloaded from:

_http://thewd.webhop.org

Thx for this link
 

However, I couldn't download it from there... :(

When I press "executable" in download section it simply displays a Lycos page in a small window and then it returns to the main page :confused:

Any suggestions?

to download from lycos you need to submit your brower referrer information. if you have a firewall installed this information may be blocked.

Normally, I tell people to go and find the tools themselves, but on this occasion, I think it'll be easier for everyone if it was just uploaded here.

So here goes.

Note that this is the executable version ONLY. No example/scripts etc. You'll have to get those from the website that thewd posted.

This is v1.08, which I assume is the latest (public) version.

I didn't post this earlier, as I didn't know whether thewd wanted the tool made this public, but since it's on his website...

Thx
 

Thanx Squidge

@thewd: I have no firewall running and my browser security setting is set to low. But I can't download it. I've just tried it. :(

thanks squidge, thewd and arc. am working on crypkey now. btw does ne one have CrypKey Instant 5.4 ??? thanks a lot people

BTW arc i have the downloaded versions, if u want i can mail it to you.

CrypKey Instant 5.4
 

I'll check my private file server for it :)
Wait for my reply.....

@Soft_Ice: Well, thx for your offer. I've downloaded all CrypKey versions I found on the exetools ftp in the "sdk of protection systems" folder.