MobileRead Forums - View Single Post

geekmaster · 04-08-2016, 07:21 AM

I have been investigating my K1 (Kindle 1st generation), and amongst many differences with newer kindles, the password algorithm (now built into kindletool) DOES NOT WORK for this device. The generated passwords (both 3 and 4 hex digit fiona passwords) are incorrect.

However, using the wordlist above, JOHN immediately found a DIFFERENT 4 hex digit fiona password, after JOHN had been trying to crack it for some time (on an admitted already very busy CPU).

Hmm... On my K1, the fiona hex digits are still md5sum bytes 8-11 of the serial number. Because DES passwords are only 8 chars, SSH root password is truncated to 3 hex digits. I wonder why kindletool is not calculating this correctly??? Need to check the source code after some sleep.

EDIT: The online Amazon Kindle root password tool calculates the correct root password(s), so it seems that kindletool has a problem. Too tired to fix it at the moment. TTYL...

EDIT2: I examined the latest kindletool source code, and it *appears* correct. I need to step through it with my K1 serial number and see where it fails in the (pre-Wario) password computation.

04-08-2016, 07:21 AM	#17
geekmaster Carpe diem, c'est la vie. Posts: 6,433 Karma: 10773670 Join Date: Nov 2011 Location: Multiverse 6627A Device: K1 to PW3	I have been investigating my K1 (Kindle 1st generation), and amongst many differences with newer kindles, the password algorithm (now built into kindletool) DOES NOT WORK for this device. The generated passwords (both 3 and 4 hex digit fiona passwords) are incorrect. However, using the wordlist above, JOHN immediately found a DIFFERENT 4 hex digit fiona password, after JOHN had been trying to crack it for some time (on an admitted already very busy CPU). Hmm... On my K1, the fiona hex digits are still md5sum bytes 8-11 of the serial number. Because DES passwords are only 8 chars, SSH root password is truncated to 3 hex digits. I wonder why kindletool is not calculating this correctly??? Need to check the source code after some sleep. EDIT: The online Amazon Kindle root password tool calculates the correct root password(s), so it seems that kindletool has a problem. Too tired to fix it at the moment. TTYL... EDIT2: I examined the latest kindletool source code, and it appears correct. I need to step through it with my K1 serial number and see where it fails in the (pre-Wario) password computation. Last edited by geekmaster; 04-08-2016 at 08:18 AM.