Sorry, my point was... the two are not even the same zip code of relationship in operation or function so why even mention it to confuse people. The ONLY thing they have in common is the housing they sit in.

 

That was a concern, that the RFID chip was also using a rolling code. This does not appear to be true.

 

They could be serialized with a unique code though Meaning the data can be programmed and cloned but the "S/N" so to speak cannot be cloned. And the SKREEM might need both S/N and data to allow a start.

 

 

Donno........

 

Just checked my second working FOB and the first line of data is different. Still wonder how it can tell the difference between a good one and a true clone. Only difference is the model number but perhaps there is a checksum. Will have to get a real 7930 to find out. 7935 and 7931 may fail a checksum when just copied and not programmed to the car.

 

I wonder if the first line of data for each FOB is the "secret" mentioned in the service manual where the SKREEM can get it from the PCM? And it would coincide with the PCM holding only 8 FOB's in memory before it needs programming.

Sort of the same thing trying to clone a CF memory card for a computer, they are serialized so you can clone all the contents of the data you want but not the S/N.

 

I am getting more and more skeptical about cloning our keys, I looks like Mercedes used a rolling code system between 1998 and 2008:

 

Are you talking about cloning the ability to start our cars, or lock/unlock remotely?

You talking about Appendix 1 #10? It looks to be a micro controller for the lock/unlock circuit board.
picture of chip

 

Start our cars

 

OK, but this looks like the microchip to the rolling code remote door lock.

The chip to start the car is an RFID chip. Does that document address the RFID security elsewhere than where we can see?

 

See chapter 2 in the preview, "The Transponder"

 

OK, the "transponder" is not part of the rolling code system. Look a page or two back for the key functions. #1 is the rolling code unauthorized entry and #2 is security against unauthorized starting or the transponder. Two separate functions. Padgett is looking at the transponder portion.

 

Tried the cloning the PCF7931 chip today , no luck on starting the car. Will try the T5 when I receive them.

 

We appreciate your efforts and your persistence. Hope the next try is successful!

 

What frequency is our RFID chip?

 

When you try the cloned chip and the car does not start did you notice on the dash display these words? "start error"

 

I wish you look. I have already tried to clone the transponder. I have used the following tools:
1. xhorse key tool witch says the transponder in the key is a PCF7935 ID33 and the clone to an PCF7935 was successful. But the car don't start with the new transponder.
2. FVDI Abrites Commander this tool says the Transponder is an PCF7931 or T5 but to my Transponders the Tool can't write...



Aribes Comander

xhorse key tool

a few transponder

 

Anyone use one of these?

 

Is there any progress being made on cloning the transponder chips? I graduated with honors but failed electricity . . . So this area is way outside of my comfort zone. Hope the experts here are not giving up! Please update us with your progress . . .