3G Rainbow Pog RAMDLD Signature Question Поделиться Опции

[FlashTato]

Hi 2 all,

well, we know that in RAMDLD, there are the tables of CG Used in Firmware (if it is wrong Motorola Flashing Program will not accept it and will give an error).

Well, in V3x's RAMDLD i found this:

Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F

00008EE0 00 B8 12 93 60 05 0F 00 12 82 06 53 06 E2 20 70 .¸.“`....‚.S.â p
00008EF0 00 68 21 F0 00 CF 43 72 69 74 69 63 61 6C 20 45 .h!ð.ÏCritical E
00008F00 72 72 6F 72 3A 00 41 44 44 52 00 42 49 4E 00 50 rror:.ADDR.BIN.P
00008F10 4F 57 45 52 5F 44 4F 57 4E 00 52 51 48 57 00 52 OWER_DOWN.RQHW.R
00008F20 51 53 4E 00 52 51 56 4E 00 52 45 53 54 41 52 54 QSN.RQVN.RESTART
00008F30 00 52 51 53 49 00 52 51 46 49 00 52 51 43 53 00 .RQSI.RQFI.RQCS.
00008F40 52 51 52 43 53 00 45 52 41 53 45 00 52 42 52 4B RQRCS.ERASE.RBRK
00008F50 00 42 41 55 44 00 52 45 41 44 00 00 52 53 43 53 .BAUD.READ..RSCS
00008F60 00 52 53 52 43 53 00 52 45 41 44 00 53 57 20 55 .RSRCS.READ.SW U
00008F70 70 67 72 61 64 65 00 69 6E 20 70 72 6F 67 72 65 pgrade.in progre
00008F80 73 73 2E 2E 00 53 57 20 55 70 67 72 61 64 65 00 ss...SW Upgrade.
00008F90 63 6F 6D 70 6C 65 74 65 64 00 00 00 08 00 47 00 completed.....G.

I would like to mod that it highlited in Bold, yes i did but no lucky because i didn't mod the RAMDLD Signature (Last 2 KB Block).

Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F

000187F0 FF ÿ
00018800 B1 00 BC 02 14 DA 95 1B 6D DC 97 07 CE 40 EA 53 ±.¼..Ú•.mÜ—.Î@êS
00018810 0F 90 20 91 B5 20 DD 2F F3 30 FF FF 00 00 02 3D . ‘µ Ý/ó0ÿÿ...=
00018820 01 01 0C 30 00 11 02 08 00 00 00 00 00 01 00 08 ...0............
00018830 00 01 C0 00 01 86 40 00 00 03 C7 01 31 0C 73 41 ..À..†@...Ç.1.sA
00018840 BA E8 68 FD B6 B9 8C 27 5C D4 6D 5F FD 4C 53 34 ºèhý¶¹Œ'\Ôm_ýLS4
00018850 07 DB A5 9C D8 D7 89 18 8F 74 3B BB 26 D1 FB 5D .Û¥œØ׉.t;»&Ñû]
00018860 D0 39 A1 50 55 E0 4C 15 20 8E 9E BA 0B 94 E8 2B Ð9¡PUàL. Žžº.”è+
00018870 03 41 F0 00 A6 39 B7 96 E9 24 E7 7F B8 62 AB 31 .Að.¦9·–é$ç¸b«1
00018880 CF 0A E7 D8 E0 76 9D A8 5F 32 2F 41 3E 24 6D 4F Ï.çØàv¨_2/A>$mO
00018890 93 7A 9B 78 FA 8E 46 E5 71 76 89 E1 EC 4C 3B 1E “z›xúŽFåqv‰áìL;.
000188A0 7F BE B8 91 12 A9 02 59 3B 7B 55 83 E8 0E 13 C9 ¾¸‘.©.Y;{Uƒè..É
000188B0 ED EE 76 78 A1 08 B0 F7 85 C4 B1 01 01 02 01 00 íîvx¡.°÷…ı.....
000188C0 04 32 43 4E 3D 4D 6F 74 6F 72 6F 6C 61 20 50 43 .2CN=Motorola PC
000188D0 53 20 43 41 33 2C 4F 55 3D 4D 6F 74 6F 72 6F 6C S CA3,OU=Motorol
000188E0 61 20 50 4B 49 2C 4F 3D 4D 6F 74 6F 72 6F 6C 61 a PKI,O=Motorola
000188F0 20 49 6E 63 3F 9E 13 F0 52 6E 0B 70 01 00 04 32 Inc?ž.ðRn.p...2
00018900 43 4E 3D 43 53 46 20 43 41 20 33 2D 36 2C 4F 55 CN=CSF CA 3-6,OU
00018910 3D 4D 6F 74 6F 72 6F 6C 61 20 50 4B 49 2C 4F 3D =Motorola PKI,O=
00018920 4D 6F 74 6F 72 6F 6C 61 20 49 6E 63 3B 53 4E 3D Motorola Inc;SN=
00018930 31 30 02 00 00 03 01 00 01 00 80 D2 04 31 4A 48 10........€Ò.1JH
00018940 9D 03 BB 10 44 B7 1D EE 11 3E AD F6 F8 48 E8 92 .».D·.î.>­öøHè’
00018950 EC 8A 98 05 07 35 B9 8E 49 43 A5 B6 AE 71 28 39 슘..5¹ŽIC¥¶®q(9
00018960 EE F8 8F 41 67 0A 1E 73 65 FF B9 7C B1 C1 95 1F îøAg..seÿ¹|±Á•.
00018970 22 89 17 BA C8 7F 07 D0 E4 B5 FD DC 04 1C 0D E8 "‰.ºÈ.ÐäµýÜ...è
00018980 0F 18 0D 6B 1E A8 B5 2C B0 D2 E4 70 DE 99 F9 DD ...k.¨µ,°ÒäpÞ™ùÝ
00018990 59 EE 79 4A 08 0E BF 10 3A 22 86 29 39 25 13 53 YîyJ..¿.:"†)9%.S
000189A0 0E 53 D0 63 8B AA AB 04 38 88 CE 39 98 42 9C 85 .SÐc‹ª«.8ˆÎ9˜Bœ…
000189B0 F5 46 23 43 BC 1B 85 20 0F 31 61 00 80 8D A3 64 õF#C¼.… .1a.€£d
000189C0 DD D2 A9 D5 AF 38 A9 19 88 CA 50 AD 5D E3 D2 A7 ÝÒ©Õ¯8©.ˆÊP]ãÒ§
000189D0 D3 E0 E6 DF 18 D1 09 EB BA ED A5 CA 5B D0 65 B6 Óàæß.Ñ.ëºí¥Ê[Ðe¶
000189E0 0B 5A A4 82 8D 5C 34 D6 BA 0B 76 FE 21 3D 50 CF .Z¤‚\4Öº.vþ!=PÏ
000189F0 6A 2F C6 A5 92 8F E9 0C CF A3 D9 4A B0 79 36 C2 j/Æ¥’é.Ï£ÙJ°y6Â
00018A00 AD 12 51 4C 71 A7 5E 3B CB 04 9D D2 40 8E 38 F5 ­.QLq§^;Ë.Ò@Ž8õ
00018A10 54 A5 D9 02 29 69 3A 5C BB BA A4 0E 9A C3 AE 0E T¥Ù.)i:\»º¤.šÃ®.
00018A20 9C 1E 23 20 68 48 49 1C 0F 21 BB 11 96 BD CD CC œ.# hHI..!».–½ÍÌ
00018A30 87 68 1B B2 C3 93 2F BC B2 6E 23 1D B3 01 02 01 ‡h.²Ã“/¼²n#.³...
00018A40 00 04 2C 43 4E 3D 43 53 46 20 43 41 20 33 2D 36 ..,CN=CSF CA 3-6
00018A50 2C 4F 55 3D 4D 6F 74 6F 72 6F 6C 61 20 50 4B 49 ,OU=Motorola PKI
00018A60 2C 4F 3D 4D 6F 74 6F 72 6F 6C 61 20 49 6E 63 3F ,O=Motorola Inc?
00018A70 A9 F1 70 52 6E 0B 70 01 00 04 41 43 4E 3D 41 70 ©ñpRn.p...ACN=Ap
00018A80 70 6C 69 63 61 74 69 6F 6E 20 53 69 67 6E 69 6E plication Signin
00018A90 67 20 33 2D 36 2D 31 2C 4F 55 3D 4D 6F 74 6F 72 g 3-6-1,OU=Motor
00018AA0 6F 6C 61 20 50 4B 49 2C 4F 3D 4D 6F 74 6F 72 6F ola PKI,O=Motoro
00018AB0 6C 61 20 49 6E 63 3B 53 4E 3D 30 35 02 00 00 03 la Inc;SN=05....
00018AC0 01 00 01 00 80 C6 E5 4C DE 92 F3 89 F4 CA C5 CD ....€ÆåLÞ’ó‰ôÊÅÍ
00018AD0 C0 34 A5 63 72 5D 15 C5 E4 73 2F 78 C6 E7 D1 72 À4¥cr].Åäs/xÆçÑr
00018AE0 1A D3 51 8C E1 74 C8 A3 F2 7C B5 C9 16 5A B0 E9 .ÓQŒátÈ£ò|µÉ.Z°é
00018AF0 D7 47 CA 72 68 1E A8 B9 52 CA 1C 3F F7 DF B5 91 ×GÊrh.¨¹RÊ.?÷ßµ‘
00018B00 15 75 96 EB 9E 03 89 BF 36 95 5B 7F 7C 0E 53 8E .u–ëž.‰¿6•[|.SŽ
00018B10 74 37 68 1F FE 31 7A 6D 9F 24 D0 E6 45 59 E3 D1 t7h.þ1zmŸ$ÐæEYãÑ
00018B20 A9 38 5C 45 5E 21 35 72 9B 2F 12 97 F9 17 02 D1 ©8\E^!5r›/.—ù..Ñ
00018B30 62 18 D6 10 2E 43 50 AC 1A A5 06 30 3E 93 5C 93 b.Ö..CP¬.¥.0>“\“
00018B40 FA B8 13 27 AF 00 80 93 4B 7E DA 2A A5 49 23 34 ú¸.'¯.€“K~Ú*¥I#4
00018B50 7A EE EA 3C 69 35 6D 35 C1 3E AE 70 BA DF 6D AA zîê<i5m5Á>®pºßmª
00018B60 DB 33 A5 0E C9 76 FC 45 B2 4C 72 2B AE 88 A2 33 Û3¥.ÉvüE²Lr+®ˆ¢3
00018B70 FF 5F D9 EE 49 A8 B4 E6 69 5B 46 66 31 C1 89 94 ÿ_ÙîI¨´æi[Ff1Á‰”
00018B80 9F 20 3F 83 A8 F1 42 8C B4 6B 54 52 67 B2 DA 70 Ÿ ?ƒ¨ñBŒ´kTRg²Úp
00018B90 8E 84 A9 CF 97 65 C4 2D 28 F8 DE 7F 18 19 7C F0 Ž„©Ï—eÄ-(øÞ..|ð
00018BA0 F9 E4 A2 91 A3 C9 83 98 5F 4A 11 85 A6 15 46 2B ù䢑£Éƒ˜_J.…¦.F+
00018BB0 69 DA 11 C9 FF B1 A2 75 86 F6 7C 03 05 81 80 BD iÚ.Éÿ±¢u†ö|..€½
00018BC0 E1 1B CB C1 6E 46 0C 8B EA 63 D7 CF 42 09 B0 DA á.ËÁnF.‹êc×ÏB.°Ú
00018BD0 D4 CF 18 36 59 DC 2E 29 FB 96 79 2F E4 4A 04 63 ÔÏ.6YÜ.)û–y/äJ.c
00018BE0 02 AC C5 37 3B F8 2C 80 CD 65 E8 B2 6F 12 95 A2 .¬Å7;ø,€Íeè²o.•¢
00018BF0 6D 05 EF 1A 47 29 76 A1 B8 FA 10 D9 97 1C C6 8B m.ï.G)v¡¸ú.Ù—.Æ‹
00018C00 8B A8 7B 03 FF FE 28 ED 33 BE A1 E5 1C 11 54 C7 ‹¨{.ÿþ(í3¾¡å..TÇ
00018C10 66 09 01 CF 78 C6 CF 32 D7 FD 9F A2 FC EC 5C 6B f..ÏxÆÏ2×ýŸ¢üì\k
00018C20 AF C9 67 0E AF 46 6A 78 9C 5A C2 4E EB FE 00 62 ¯Ég.¯FjxœZÂNëþ.b
00018C30 E1 F2 62 B8 E1 9D EB 0C 1F 98 55 3C 65 30 B2 C8 áòb¸áë..˜U<e0²È
00018C40 E2 36 6D 85 7C B1 30 FF FF FF FF FF FF FF FF FF â6m…|±0ÿÿÿÿÿÿÿÿÿ
00018C50 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018C60 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018C70 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018C80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018C90 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018CA0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018CB0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018CC0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018CD0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018CE0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018CF0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D10 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D20 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D30 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D40 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D50 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D60 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D70 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018D90 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018DA0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018DB0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018DC0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018DD0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018DE0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018DF0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E10 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E20 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E30 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E40 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E50 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E60 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E70 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018E90 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018EA0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018EB0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018EC0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018ED0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018EE0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018EF0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F10 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F20 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F30 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F40 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F50 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F60 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F70 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018F90 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018FA0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018FB0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018FC0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018FD0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018FE0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00018FF0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

My question is: do you know the Signature's Alghoritm?!

[Active]

Hi 2 all,

well, we know that in RAMDLD, there are the tables of CG Used in Firmware (if it is wrong Motorola Flashing Program will not accept it and will give an error).

Well, in V3x's RAMDLD i found this:
I would like to mod that it highlited in Bold, yes i did but no lucky because i didn't mod the RAMDLD Signature (Last 2 KB Block).
My question is: do you know the Signature's Alghoritm?!

FlashTato, i try to translate your post =)

привет всем

мы знаем, что в RAMDLD есть группы CG, используемые в прошивке (если это кривой прошивальщик, программа не принимает их, и выдает ошибку)

В V3x RAMDLD я нашел следующее:

таблица =)

я хочу изменить следующее (выделено шрифтом Bold), я пробовал сделать это, но безуспешно, потомучто я не изменял RAMDLD Signature (подпись) (последний 2КВ блок)

таблица =)

Вопрос: вы знаете алгоритм Signature (подписи)


От меня: че такое RAMDLD? может Ramldr?

[Random]

The signature check alghoritm is:

1. Calculating SHA1 hash
2. Extracting original hash from RSA-encrypted signature
3. Comparing original hash to calculated

Because RSA key is unknown we cannot decrypt original hash and modify it.

От меня: че такое RAMDLD? может Ramldr?

Все правильно, RAMDLD. Это загрузчик для залития прошивки в телефон.

Сообщение отредактировал Random - 25.3.2007, 7:21

[FlashTato]

That is bad

3G Rainbow Pog RSA seems to have another alghoritm respect to LTE2.

The boot-sign seems to be in CG8, maybe into CG8 there is a place where to place an our own code for disabling CG1-CG18 Verification.