I tried to crack sunwlicd on Solaris using SDK v6.1 and adb.
sunwlicd implemented user crypt filter, so Nolan Blender's
latest essay is a big help in this. I found the two seeds,
the five keys, xor values and permutation table:
The 1th seed: 1b55a399
The 2th seed: a91834d8

The 1th key: 74d8dbd7
The 2th key: e3ee474
The 3th key: 30776cf
The 4th key: de024b81
The 5th key: b7ef0e08

xor values:
int xorvals[]=
{
0x1e, 0x16, 0x3e, 0x24,
0x04, 0x1e, 0x1e, 0x13,
0x15, 0x0c, 0x2d, 0x33,
0x3d, 0x21, 0x26, 0x2e,
0x12, 0x34, 0x01, 0x2b
};

permutation table:
permute_t tab1[] = {
{0,4,5,3,1,2,6,7}, /* idx 00 */
{4,0,5,2,1,3,6,7}, /* idx 01 */
{7,1,3,4,0,5,2,6}, /* idx 02 */
{4,7,3,6,1,5,2,0}, /* idx 03 */
{0,3,7,4,2,5,6,1}, /* idx 04 */
{4,3,5,6,7,0,1,2}, /* idx 05 */
{2,7,4,0,6,5,3,1}, /* idx 06 */
{4,5,1,7,0,3,6,2}, /* idx 07 */
{1,0,5,4,3,6,7,2}, /* idx 08 */
{2,7,5,3,0,6,1,4}, /* idx 09 */
{3,5,7,0,6,4,2,1}, /* idx 10 */
{7,6,5,0,4,3,2,1}, /* idx 11 */
{3,4,5,6,0,2,1,7}, /* idx 12 */
{0,4,6,3,5,2,1,7}, /* idx 13 */
{1,5,0,2,6,3,4,7}, /* idx 14 */
{2,6,5,7,4,3,1,0}, /* idx 15 */
{2,3,0,5,1,7,6,4}, /* idx 16 */
{1,7,4,2,3,0,6,5}, /* idx 17 */
{1,5,2,3,4,7,6,0}, /* idx 18 */
{3,0,6,7,4,5,2,1} /* idx 19 */
};

But I can't get the right license. Could you, especially nblender, help
me? Thanks in advance.

Hmm - check your XOR table.
int xorvals[]=
{
0x1e,0x16,0x3e,0x24,
0x04,0x1e,0x1e,0x13,
0x15,0xc9,0x2d,0x33,
0x3d,0x21,0x26,0x2e,
0x12,0x34,0x01,0x2b
};
is what I have.

[QUOTE]nblender (05-14-2001 23:23):

Thanks a lot

I donot want to start a new thread, although this one is pretty old, sorry.

I have some questions when keygen the sun workshop 6 update 2 (Forte6U2) license. i also find the seeds and user crypt filter stuff, it's the same as happywolf, nb said happywolf's xor values had one error, it doesnot matter, sun only use the 0~7th.

My question is sun uses 20 digitals as the license code, only -verfmt 5 supports 20 digitals. when i use this option, it doesn't work. I have validated the user crypt filter side is correct, the problem is in the normal flexlm side(license codes feed into user_crypt_filter), anyone has some hints in building the lmcrypt for sun forte6. thanks.

SkyOcean

ps
only for intereesting, not asking crack, we have an unlimited site license.

the seed is not correct !!!!

Hello , Nolan.
Thank you very much !
Your tutorials (FlexLM) greatest !

I need Your help - i can't find VENDOR KEYs for FlexLM SDK ver 9 and 10.

Your source VKLIB.C don't work with this versions.
How find Vendor keys ?
I found
case 8:
versionno = 8;
var1 = 0x3cde3ebf;
var2 = 0x6f7330b8;
break;
case 9:
versionno = 9;
var1 = 0x72346b53;
var2 = 0x6f7330b8;
break;
case 10:
versionno = 10;
var1 = 0x5332322f;
var2 = 0x6f7330b8;
break;


With version 8 all works perfectly, and with versions 9 and 10 does not work.