Booting

MR303 starts:

• get an IP address via DHCP
• initiate HTTP-POST based SOAP communication with cgbf0104n1.iptv.t-online.de
• key/certificate exchange,probably X.509 (de.wikipedia.org)-like
• see also: http://www.t-hack.com/forum/index.php?topic=461.0
• and: http://www.t-hack.com/forum/index.php?topic=75.0
• on these sites they mention several important points:
• keys/certificates are in "the chip" (Flash IC?) and
• the running programs are signed, meaning, you cannot modify the OS without bricking the box

x-tv2-auth-svrMsgNonce: 64bit random
struct x-tv2-auth-ticketReq {
char TicketRequestVersion;//01
long long key;//64bit random
long long sendTime;//DateTime.Tick, sollte in etwa 01.01.2003 20:00:00 Uhr + zeit die die box seit dem booten läuft sein (?)
long long ClientSWVersion;//1.0.0.0
ushort src.Length;
ushort myKeyLengthInBytes;//256
uchar MyCertificate[src.Length];
uchar Signature[myKeyLengthInBytes];//SHA256 hash/signatur
}

"Login"
"LoginEx"
"GetAccountSessionKey"
"GetUpgradeFilesUrls"
"GetUpgradeFilesUrlsForDevice"