Input <Cal Password> To Enable Calibration Mode - Excell Wireless Platform Service Manual

EXCELL PRECISION CO., LTD.
Use the <CAL PASSWORD> and Default Key to perform AES128 ECB Encryption to produce the 16-byte
encrypted output XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX
Default Key is a fixed set of 16-byte Hex data = 0D 99 74 9F 3F 48 D1 9B 22 91 A2 77 24 44 74 9B
<CAL PASSWORD>, if the byte count is less than 16 bytes, then prefix instance(s) of 00(Hex) to fill up 16
bytes.
Example: <CAL PASSWORD>(Hex data) = 30 30 30 31 32 33
Then prefix 00(Hex) to fill up 16 bytes, then use the filled-up <CAL PASSWORD>(Hex data) = 00 00 00 00
00 00 00 00 00 00 30 30 30 31 32 33 and the Default Key to perform AES128 ECB to produce the
16-byte encrypted output XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX(Hex Data) = 5B 59 8F 71 85
5A 56 E8 4F DA 37 6A 09 D2 64 33. Write the 19-bytes Hex Data 9C 11 41 5B 59 8F 71 85 5A 56 E8 4F DA
37 6A 09 D2 64 33 to the UUID E812 handle, then <CAL PASSWORD> is now set as 30 30 30 31 32 33 .
12-2-4 Input <CAL PASSWORD> to Enable Calibration Mode
This setting can be modified only when the W1 bit (Enable Calibration Mode via Input Password), as
described in the section 12-1-28. Write Scale Function Settings, is set to 1.
If the following tasks are performed under Normal Mode, then Calibration Mode can be enabled.
(1). Read "Temporary Key":
For UUID E812 handle write the following Commands :
Read "Temporary Key"
Command (Hex)
9C
(2). Read UUID E812 handle and request decryption of "Temporary Key"
Read UUID E812 handle, then you can get the following return value
"Temporary Key" return
Command Length Sub-Command
(Hex) (Hex) (Hex)
9C 11 02
"Temporary Key" AES128 ECB encrypt
Input (16 bytes)
"Temporary Key"
Decrypt and get "Temporary Key", please refer to the table below:
"Temporary Key" AES128 ECB decrypt
Input (16 bytes)
KK KK KK KK KK KK KK KK KK KK
KK KK KK KK KK KK
TM
Length (Hex)
01
"Temporary Key" AES128 ECB Encrypted Data (16-byte Type B
Data)
KK KK KK KK KK KK KK KK KK KK KK KK KK KK KK KK
Key (16 bytes)
<CAL PASSWORD>
Key (16 bytes)
<CAL PASSWORD>
60
Sub-Command (Hex)
02
Output (16 bytes)
KK KK KK KK KK KK KK KK KK KK
KK KK KK KK KK KK
Output (16 bytes)
"Temporary Key"
ZSME000000026