Excell Wireless Platform Service Manual page 63

EXCELL PRECISION CO., LTD.
(3). Read "Temporary Code":
For UUID E812 handle write the following Commands :
Read "Temporary Code"
Command (Hex)
9C
(4). Read UUID E812 handle and request decryption of "Temporary Code"
Read UUID E812 handle, then you can get the following return value:
"Temporary Code" return
Command Length Sub-Command
(Hex) (Hex) (Hex)
9C 11 03
"Temporary Code" AES128 ECB encrypt
Input (16 bytes)
"Temporary Code"
Decrypt and get "Temporary Code", please refer to the table below:
"Temporary Code" AES128 ECB decrypt
Input (16 bytes)
NN NN NN NN NN NN NN NN NN
NN NN NN NN NN NN NN
(5).Usage"Temporary Password" enabled Calibration Mode :
"Temporary Password" AES128 ECB encrypt
Input (16 bytes)
"Temporary Code"
For UUID E812 handle write the following Commands :
Command Length Sub-Command
(Hex) (Hex) (Hex)
9C 11 44
For the above input commands, only 3 times of password errors are allowed. If password errors exceed
3 times, please re-establish connection and start over from Step (1).
TM
Length (Hex)
01
"Temporary Code" AES128 ECB Encrypted Data (16-byte Type B
Data)
NN NN NN NN NN NN NN NN NN NN NN NN NN NN NN NN
Key (16 bytes)
<CAL PASSWORD>
Key (16 bytes)
<CAL PASSWORD>
Key (16 bytes)
"Temporary Key"
"Temporary Password"(16-byte Type B Data)
UU UU UU UU UU UU UU UU UU UU UU UU UU UU UU UU
61
Sub-Command (Hex)
03
Output (16 bytes)
NN NN NN NN NN NN NN NN NN
NN NN NN NN NN NN NN
Output (16 bytes)
"Temporary Code"
Output (16 bytes)
"Temporary Password"
ZSME000000026