ct-Open-Source / ct-Open-Source/tuya-convert
How can I contribute to PSK reverse engineering?
- Dominant language
- Python
- Stars
- 5.1k
- Forks
- 523
- PR merge metrics
- No merged PRs in 30d
Description
I would like to contribute (time permitting) to the reverse engineering of the #483 PSK issue, but at the moment it is unclear how i can do so.
The issue has been closed, and the only resource seems to be the Wiki page at https://github.com/ct-Open-Source/tuya-convert/wiki/Collaboration-document-for-PSK-Identity-02
But it feels a bit silly to make random suggestions in that Wiki page, or should I do so? Or is there a discussion forum somewhere where I could drop suggestions?
One suggestion I have: I've opened up a freshly purchased lightbulb, so I now have the virgin TYLC6E module sitting on my desk. I could get another one from the same store and repeat the process, then I could read out the flash of both modules and possibly rule out (or confirm, which would be unfortunate) a factory-installed unique PSK seed.
Another suggestion is that we could try flashing the image onto an ESP8266 module with JTAG support (which I think exist nowadays) so we could run the initial contact of the module under a debugger.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading closed issue #483 and the linked PSK Identity 02 collaboration wiki page. Review the proposed flash-dump comparison and ESP8266/JTAG debugging ideas, then determine where contributors should coordinate. Done would mean an agreed contribution path and documented findings or next steps, but the issue does not define a concrete deliverable.
Written by the indexing model from the issue text.
Assessment
- Domain
- embedded-iot, reverse-engineering
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100