How To Determine Which CSA-Rainbow-Table To Use

[SatEze]

When you run the CSA-Rainbow Tool to grab Crypt8 PID: 65h B8h-Crypt8:xx xx xx xx xx xx xx xx [E] Count:457 for example, how do you determine which Plain Type (B8hx00h, B8hxFFh or B8hx030000h) to use to calculate the CW? I would like to take out the guess work when using the Tool.

 

[dvlajkovic]

lol
human beings tend to learn with experience... well, the most of them (at least...)
the same applies here
if you want to eliminate the guessing part before being "experienced", then simply run the search in all three B8hx tables

 

[Dave5118]

If the crypt8 is from the video PID and uses the h264 codec, then it is the FFh table.
If the crypt8 is from the video PID and uses the mpeg2 codec, then it is the 00h table
If the crypt8 is from the audio PID, then it is the 00h table
If there are 3 similar high counting crypt8's, then may be the 030000h table, and all three crypt8's need to be searched until CW found.
Sometimes the RBT tool will indicate an 030000h crypt8, but not always.

Hope that helps.

 

[SatEze]

lol
human beings tend to learn with experience... well, the most of them (at least...)
the same applies here
if you want to eliminate the guessing part before being "experienced", then simply run the search in all three B8hx tables

That's neither helpful nor nice, dvlajkovic! I already do what you sarcastically, suggested in my initial post. You may know it all, which may not be possible, but some of us need a litlle pointer here or there to make sense of what we don't undertand. If you have a good suggestion, I will be more than glad to read such.

 

[SatEze]

If the crypt8 is from the video PID and uses the h264 codec, then it is the FFh table.
If the crypt8 is from the video PID and uses the mpeg2 codec, then it is the 00h table
If the crypt8 is from the audio PID, then it is the 00h table
If there are 3 similar high counting crypt8's, then may be the 030000h table, and all three crypt8's need to be searched until CW found.
Sometimes the RBT tool will indicate an 030000h crypt8, but not always.

Hope that helps.

Thank you for your detailed explanation and clarity on the topic.

 

[feed army]

When you run the CSA-Rainbow Tool to grab Crypt8 PID: 65h B8h-Crypt8:xx xx xx xx xx xx xx xx [E] Count:457 for example, how do you determine which Plain Type (B8hx00h, B8hxFFh or B8hx030000h) to use to calculate the CW? I would like to take out the guess work when using the Tool.

With experience you learn for example 200h/65h/21h with the ff