Methodology for Reverse Engineering Yaesu FT-70D Firmware Encryption
By
austinallegro
If you only eat one bagel today, this is the bagel.
Summary
This article provides a detailed, accessible methodology for reverse engineering the firmware encryption of the Yaesu FT-70D ham radio. The author documents their complete process of analyzing the radio's firmware, including initial research, hardware examination, firmware extraction, encryption analysis, and ultimately discovering and documenting the encryption algorithm. The article is written as a technical guide aimed at making reverse engineering accessible to those who aren't advanced practitioners, with step-by-step explanations and visual documentation.
Key quotes
· 5 pulledHam radios are a fun way of learning how the radio spectrum works, and more importantly: they're embedded devices that may run weird chips/firmware!
I got curious how easy it'd be to hack my Yaesu FT-70D, so I started doing some research.
The only existing resource I could find for Yaesu firmware was a brief mention in a forum post.
This article dives into my full methodology for reverse engineering the tool mentioned in this article.
It's a bit longer but is intended to be accessible to folks who aren't necessarily advanced reverse-engineers.
You might also wanna read
wolfCOSE: A Lightweight COSE + CBOR Library for Embedded Systems with PQC and FIPS 140-3 Support
wolfCOSE is a lightweight C library implementing CBOR (RFC 8949) and COSE (RFC 9052/9053) for embedded systems, using wolfSSL as the crypto
Running Rust and Slint on a Jailbroken Kindle Paperwhite
A developer jailbreaks their 7th generation Kindle Paperwhite to use it as a nightstand clock, then explores running Rust (and Slint) on the
MuseLab nanoCH32H417: $17 RISC-V MCU Board with USB 3.0 and Fast Ethernet
MuseLab has released the nanoCH32H417, a third-party development board for the WCH CH32H417 dual-core RISC-V MCU. Priced at $17, the board f
cnx-software.com·4d agoFlipper One Technical Documentation: Hardware, Software, and Testing Guide
This is technical documentation for the Flipper One device, covering hardware specifications (power subsystem, Wi-Fi/Bluetooth, M.2 port, GP
rkdebian: Run Debian 12 on Doogee U10 Tablet via SD Card Without Bootloader Unlock
This article presents rkdebian, a build system that enables running full Debian 12 Bookworm on a Doogee U10 tablet (RK3562 chipset) without
Hosting a website on an 8-bit AVR64DD32 microcontroller
A technical blog post detailing the author's experiment of hosting a functional website on an AVR64DD32 microcontroller — an 8-bit AVR chip
