What Forts said.

If it's mototrbo and there is a PI header it is extremely likely it's 40 bit RC4.

Hytera DMR systems set a privacy bit to indicate encryption. If it indicates just "enc", it's Hytera Basic Encrypt in either 40,128, or a 256 bit key. If there's indications of MI's on a Hytera system, it can be Hytera Full Encrypt in either 40 bit (RC4), AES 128 or 256 DMRA or Hytera proprietary AES.

Hytera XPT systems are limited to Hytera Basic Encrypt or Hytera Full Encrypt proprietary AES 128 or 256.

Hytera AES 256 DMRA works with MotoTRBO AES.

Sorry, but since you don't own that encrypted system, I cannot take a look at it.

On Oct 25, 2016 2:56 PM, "Forts117" notifications@github.com wrote:

You can't tell the difference over the air. The presence of the PI header basically indicates that it's EP/RC4 or AES. They don't use a true AlgID like P25 does.

On October 25, 2016 2:49:05 PM EDT, Tristan M Tozer < notifications@github.com> wrote:

EP ambe.zip

Not looking for a crack , but anyone know from the amb samples what encryption protocol is being used and whether it's AES128 or ARC4?

You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: https://github.com/travisgoodspeed/md380tools/issues/50#issuecomment- 256137036

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/travisgoodspeed/md380tools/issues/50#issuecomment-256140152, or mute the thread https://github.com/notifications/unsubscribe-auth/ATplqf7YW0lJ1nn-KyZZL8vYKu5LVI_Sks5q3lDKgaJpZM4H5TVe .

Originally posted by @cryptonomicon in https://github.com/travisgoodspeed/md380tools/issues/50#issuecomment-256188450

travisgoodspeed / md380tools

What Forts said. #939