Well then. I think I might have found the MPT1343/MPT1327 Checkbits calculation function - used to figure out if the ESN on an MPT trunked radio has been illicitly modified.
The Motorola radio Labkit software (ESN Tool) that's been floating around for a while contains the algorithm.. it's in the function at address 0x401070.
#hamradio #MPT1327 #trunkedradio
Did TETRA Have A Backdoor Hidden In Encrypted Police And Military Radios?

Encrypted communications are considered vital for many organizations, from military users to law enforcement officers. Meanwhile, the ability to listen in on those communications is of great value …

Hackaday
Serious Vulnerability In European Trunked Radio System

Trunked radio systems can be difficult to wrap one’s mind around, and that’s partially by design. They’re typically used by organizations like police, firefighters, and EMS to sha…

Hackaday