From 032967b4027dd838e953d94e3b1c77422898c801 Mon Sep 17 00:00:00 2001 From: "DF&C Lab." <59814940+DFNC-Lab@users.noreply.github.com> Date: Sun, 9 Nov 2025 19:46:08 +0900 Subject: [PATCH 1/2] ADD PUEK-2017-09 Add PUEK-2017-09 to dji_imah_fwsig.py --- dji_imah_fwsig.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/dji_imah_fwsig.py b/dji_imah_fwsig.py index 2ee3b201..d935d503 100755 --- a/dji_imah_fwsig.py +++ b/dji_imah_fwsig.py @@ -77,6 +77,12 @@ ]), # There are multiple PUEK keys, as DJI tried changing them as soon as they are published, # without fixing vulnerabilities which allowed to read them + "PUEK-2017-09": bytes([ # Programming Update Enc Key whitebox AES v2; first discovered 2018-02-12 by Jan Dumon + # discovered and published 2025-11-04 by joint efforts DF&C Lab. at Kookmin University (South Korea) and the Korea Atomic Energy Research Institute + # first use on 2017-09-20; used for: + # WM100 FW V01.00.0700-V01.00.1000, WM620 FW V01.02.0100-V01.02.0500 + 0x52, 0x52, 0x36, 0x47, 0x0b, 0x80, 0x5a, 0x16, 0x19, 0x9e, 0x66, 0x35, 0x70, 0x4a, 0x89, 0x63 + ]), "PUEK-2017-07": bytes([ # Programming Update Enc Key whitebox AES v1; published 2017-10-25 by Freek van Tienen # first use on 2017-07-28; used for: WM335 FW V01.00.1000-V01.00.5200, # WM220 FW V01.04.0000-V01.04.0500, PM420 FW V01.01.0450-V01.01.0590, From 40f57cf50c033aeb9f323fcc780959fdf782325b Mon Sep 17 00:00:00 2001 From: "DF&C Lab." <59814940+DFNC-Lab@users.noreply.github.com> Date: Sun, 9 Nov 2025 21:30:41 +0900 Subject: [PATCH 2/2] UPDATE Contributor Name --- dji_imah_fwsig.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dji_imah_fwsig.py b/dji_imah_fwsig.py index d935d503..aa8d7554 100755 --- a/dji_imah_fwsig.py +++ b/dji_imah_fwsig.py @@ -78,7 +78,7 @@ # There are multiple PUEK keys, as DJI tried changing them as soon as they are published, # without fixing vulnerabilities which allowed to read them "PUEK-2017-09": bytes([ # Programming Update Enc Key whitebox AES v2; first discovered 2018-02-12 by Jan Dumon - # discovered and published 2025-11-04 by joint efforts DF&C Lab. at Kookmin University (South Korea) and the Korea Atomic Energy Research Institute + # discovered and published 2025-11-04 by joint efforts DF&C Lab. at Kookmin University (South Korea) and the Cyber Security Team at Korea Atomic Energy Research Institute (KAERI) # first use on 2017-09-20; used for: # WM100 FW V01.00.0700-V01.00.1000, WM620 FW V01.02.0100-V01.02.0500 0x52, 0x52, 0x36, 0x47, 0x0b, 0x80, 0x5a, 0x16, 0x19, 0x9e, 0x66, 0x35, 0x70, 0x4a, 0x89, 0x63