In post below from CrackZ,

http://www.woodmann.com/forum/showthread.php?15068-flexlm-11-8-known-pri-pub-key&p=94105&viewfull=1#post94105

> 1. Build a lmcrypt.exe for target vendor using your own LM_SEEDS.
> 2. Dig out the 3 public keys from generated lmcrypt. They are 0x10/0x16 & 0X1F bytes in length as I recall.

Anyone can guide how to dig out the 3 ecc public keys from generated lmcrypt? Same method for dig it out from vendor daemon file?

i also want to know,anyone can pls help us ?

Why not patch the pubkey verification function instead to make it always pass, instead of hitting on the ECC?

Dear Aimless,

Patch this way we need almost know nothing about ECC.
But replace pubkey, we should understand almost everything about ECC.
I want to learn more about it, so ask for help here.