[OpenWrt-Devel] [PATCH][RESEND.3] ar71xx:stops qihoo c301 booting into backup firmware

swigger swigger at gmail.com
Mon Sep 22 04:42:47 EDT 2014

NO, not seama. Seama is only a container, not an encrypted format.

The original OEM firmware is encrypted by AES ECB mode and have a
RSA-1024 signuature.
The aes key is base64_decode("lbhySwdj31NGnuebNn9FmQ==");

The oem's upgrade firmware web page ONLY allows encrypted firmware
while the u-boot allows only decrypted.

There is a program in OEM firwmare whose path is /usr/sbin/rom_decrypt
to decrypt OEM firmware.

Encrypted OEM firmware can be downloaded at
http://luyou.360.cn/rom.html (Simplified Chinese Only).

On Mon, Sep 22, 2014 at 4:10 PM, Yousong Zhou <yszhou4tech at gmail.com> wrote:
> Just got the device... Wow
> On 22 September 2014 15:47, swigger <swigger at gmail.com> wrote:
>> Well, it's a good idea.
>> But I don't know how to create a wiki page.
>> QIhoo 360 C301 (http://luyou.360.cn/parameter.html, Simplified Chinese
>> ONLY), has two 16M flash.
>> The first flash is full functional, and the second has just a backup firmware.
>> U-boot will boot into the second flash when it believes firmware on
>> the first is broken.
> Yeah, when (image1trynum > imagemaxtry) with imagemaxtry defaults to
> 3, and in this case, image1status would be set to 1 to mark it as not
> viable.
>> To flash openwrt, disconnect power source, hold down the reset button
>> and power on, keep holding reset button for about 20 seconds.
>> Go to and upload the openwrt firmware to flash.
> Good.
>> To flash back to OEM firmware from openwrt, use the same instructions
>> above and upload a decrypted OEM firmware which can be founded
>> somewhere by a search engine.
> How about flashing back through OpenWrt's sysupgrade process?
>> There is also some tools for decrypting OEM firmware (no tool for
>> encrypting yet), but they are not part of openwrt, so it is not
>> necessary to discuss here.
> You mean seama?  That code is already in OpenWrt.
> I think I have a better patch for working with this U-Boot.  Please
> hold on for a moment.
> Regards
>                yousong
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org

More information about the openwrt-devel mailing list