AES-NI support in TrueCrypt (Sandy Bridge problem)

Link should still work http://dl.dropbox.com/u/8126588/G73SW205_AES.zip

 

I cant flash that BIOS , says it failed.

 

Someone else tested it recently, and it worked then. There are certain possibilities:

1. The file is corrupt - download it again.
2. The method you use to flash the BIOS doesn't work, try another.
3. The G73SW you have is a different variant that is not compatible with the BIOS. Download the regular one from the Asus US site and try that, as it should be the same, except without the bits flipped for AES. If it doesn't work either, that's the issue.

 

It says "read file failed" when i try to flash it

 

Teazle had the same problem, and posted a solution:

 

Actually I specified in my instructions that came with the file NOT to use Winflash. This also goes under bullet #2 I posted above about trying another method.

 

"The BIOS file version does not match the BIOS rom version" on winflash.

 

If your existing bios version is the same as you want to flash then you must add .rom extension to file and use easyflash.

I flashed my modded 203 version bios for G74SX, over official 203 version. Of course you have to put the modded .rom file on a FAT32 memory stick.

 

hello,

I have a G73SW with a i7 2630QM
I downloaded the file G73SW205_AES, flashed with easy flash, no complains, the laptop runs fine, but i still can't get aes. What could have i miss ?

is the link Skywise posted contains the same bios than this one ?

Thanks

 

Some 2630QM CPUs don't support AES-NI out of the box and need a microcode update in the BIOS. The file I uploaded doesn't have that, and unfortunately I don't know how to add the necessary code. There's some more information further back in the thread on how to do it however.

 

duh, I guess i'll have to put my hands in it then.
I thought Carlicious uploaded a bios fixing that too, because i feel quite unsafe about doing this myself :/ Can't we send PM in this board ? I can't find any way to do it. Is it because i'm a newbie ?

Thanks for your answer anyway

 

According to Carlicious's file description, the mod you flashed has already contained both MSR patch and microcode update. I'm afraid modding it yourself won't get you any farther.
I doubt you have one of those ES(engineering sample) 2630QM, which can't unlock AES. I remember somewhere in this long thread somebody encountered a similar situation.
I suggest you run HWINFO64 to check your CPU model(if it's ES) and microcode update revision(if it's 1B).

 

The bios I flashed, as far as I understand, doesn't contain the micro code update and i had to use the link of skywise. (the link of Carlicious is broken)

hwinfo report microcode update revision 6, production unit
Cpuz reports: Model A, stepping 7, ext model 2A and revisionD2.

 

I see
good news: AES-NI is unlockable.
bad news: Skywise mod doesn't contain required microcode update.
good news: Carlicious mod has everything you need.
bad news: download link is broken.


good luck

 

Isn't possible to PM him to ask if he can send it to me ? That would help quite a lot, and if he still has it i wouldn't take too much of his time.
Otherwise I'll try to follow the tutorial to build my own modded bios :/

thanks, at least i now know it's possible.

edit: hey, it seems i can PM now !

 

On request from napseis I have uploaded the BIOSes to a new provider. This is a .rar-file containing modded BIOS for ASUS G73SW/K53EAS/K93SV/N53SNAS/N53SVAS.

The BIOS for ASUS G73SW (among maybe others) contains the microcode update to enable AES-NI functions on for ex. i7-2630QM (rev. 1A+)

USE AT YOUR OWN RISK - NEITHER I NOR THE MODDERS ARE LIABLE FOR ANYTHING GOING WRONG.

That being said: Deposit Files

 

oh, thank you very much ! i'll try this week end !

 

I just flashed the bios, aes is activated ! Thank you every one !

 

Thanks teazle!

 

Hello, i've a ASUS N55SF with a i7-2630QM processor. How can i enable AES-NI? I've checked the bios options but it seems that there isn't an option to enable AES-NI.

 

to wan:
According to the latest bios for your model on ASUS site, you need MSR mod to unlock AES-NI feature.
Just follow carlicious's instructions on Page 15 of this thread and you'll be fine.

 

Enabling AES-NI for my N55SL was a one bit change; like K41H says, look here: http://forum.notebookreview.com/8002488-post141.html. Phoenixtool works fine with AMI/Aptio BIOSes. In my case, with an i7-2670QM I didn't need to update the microcode as its revision of 23 was enough.

 

Thank you so much,
just patched my N55SF. To any windows 8 users be aware that a restart may not necessarily be a restart (as its got a suspend type feature) best option is to remove the battery.

 

Excuse me, I have the same laptop, could you please upload your modded bios?
you would have my appreciate.

 

to K41H:

Hello.
When I tried to replace microcode of 2630QM with the new one, I met with a message "module 8 bit too long".
The phoenix tool could not re-integrate the bios.

How to fix this problem ?

 

If someone has a working AES-NI BIOS for a G74SX, I'd appreciate a link, or a working link for the xdelta profile file.

 

Hi.
Does anyone tried to enable AES on Dell Inspiron laptop with i7 3610QM?

 

reuploaded xdelta3 patch to
Download G74SxAES.bin.xdelta3 from Sendspace.com - send big files the easy way

 

Hi
It means modified module file size is not the same as the original one, which suggests you were not doing it right (or safe).
Maybe you left a byte at the end of the file? Or if you were using inserting instead of rewriting when dealing with MSR?
Besides, please check if your bios already has a working version of microcode update, in that case you just need a ont bit change of MSR.

 

to K41H:
I delete the old one and insert the new one which has the same size with the old one .

will such operations work?

P.S.
Do you have the moded bios of N55SF?

 

I assume you mean microcode update data. They grow in size.
Old ones with AES locked are 8kb at most, while newer ones you need are all 9kb in size
So I'm not sure what you were doing here.

Hey I saw my post at the top of this page,which is months ago. It seems newest N55SF bios already has the proper microcode update data, you just need to modify the MSR enable bit. It's a one bit change. Good luck~

 

to K41H,
sadly, ASUS haven't updated bios for N55SF with the new microcode.

By the way, I checked the size of old microcode. It is 23FF, same as the new one

 

to K41H,
the latest bios of N55SF is 207. and the version of i7-2630QM microcode is 18 in hex.

 

address 0 to 23ff is 2400 hex bytes, which equals 9KiB
Rev 18 is guaranteed to enable AES-NI
AFAIK the minimum requirement is rev 17

 

to K41H:
really?
I will have a try.

 

I tried,I failed.


After modify the 2BB5AFA9-FF33-417B-8497-CB773C2B93BF_1_770.ROM, changing 83 c8 03 to 83 c8 01, AES still cannot be enabled.

Maybe Rev 18 microcode of i7-2630QM isn't right.

 

That's weird. In this thread many people confirmed Rev 18 is enough, except there's an unlucky guy, his CPU sold by ASUS is an Engineering Sample.
Anyway, I uploaded the latest Rev 28 for you to integrate
Download 28.BIN from Sendspace.com - send big files the easy way

And you may use linux or "BIOS Implementation Test Suite" to test as well. They both do microcode update and MSR verify, without permanent change to BIOS.
Good luck~

 

I have a laptop Asus U36SD with the latest bios 2.06 - link. And AIDA64 says:

Code:

Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
CPUID Revision	000206A7h
Microcode Update Revision 18

Also, AES-NI is not enabled I tried to use this guide http://forum.notebookreview.com/win...rypt-sandy-bridge-problem-19.html#post8038314 to enable it, but stuck on 12 because I don't understand how to extract right image according to CPUID revision. Also I used this microcode update from INTEL web site.
Maybe someone already has patched bios for Asus U36SD or helps me with make a patch?

 

Maybe I can help you with step 12, just download Rev28 from the link right above your post. It's the corresponding data converted to binary.
However I really think Rev 18 is enough to unlock AES-NI. I have the same CPU as yours and unlocked it with Rev18.

 

So, you suggest to directly use algorithm from page 15, instead of patching by newest microcode?

 

I might be wrong, but it worth a try.

 

I tried ubuntu live cd and ran msr-tools. It showed something like "CPU 0 cannot read msr.....". So, it seems I still need a cpu microcode update? Also interesting_files.txt from algorithm on page 15 shows nothing after 2 steps...
So the question is, even if I patch my bios with 28.bin from your link will it be enough? It seems interesting_files.txt will be empty still in that case too...

 

Since you have ubuntu, there are plenty of things to test:
1 try to read another known MSR. Maybe there's some sudo or modprobe to do before you can do any rdmsr?
2 There's a microcode update module for linux. It's mentioned in this long thread as I remember. You can see what happened when you get newer rev loaded by it.

Good luck~

 

I updated microcode using your link and patched bios, now I have AES-NI enabled and AIDA64 shows corresponded benchmark results! Thank you for your help!

 

And I stand corrected. Guess Rev 18 is not enough. The minimum requirement should be 1A, as the original post said.

 

Hello all, i am trying to enable AES-NI on Samsung NP900X4D with i5 3317U (0x13c default set to 3, CPU-Z, Intel Processor ID and other reporting utilities show unavailable AES) following advice from this thread but stuck trying to figure out where the bios set 0x13c to 3.

Here is files and ocurrences in the dump files:

Code:

$ for i in `cat interesting_files.txt`; do echo $i; grep -i 0x13c[^0-9a-f] $i;
done
./6C60EE00-C316-4C95-A684-CDC7E7033311_0_4.ROM.asm
  272d4d:       89 8e 3c 01 00 00       mov    %ecx,0x13c(%esi)
  2755db:       81 ff 3c 01 00 00       cmp    $0x13c,%edi
  2bf4bd:       88 88 3c 01 00 00       mov    %cl,0x13c(%eax)
  2ce015:       88 88 3c 01 00 00       mov    %cl,0x13c(%eax)
./C8AB0F4E-26FE-40F1-9579-EA8D30D503A4_0_5.ROM.asm
   2d939:       81 c1 3c 01 00 00       add    $0x13c,%ecx
   35c7a:       ba 3c 01 00 00          mov    $0x13c,%edx
   3cdd6:       8d 95 c4 fe ff ff       lea    -0x13c(%ebp),%edx
   3cdf5:       8b 85 c4 fe ff ff       mov    -0x13c(%ebp),%eax
   3ce26:       8b 85 c4 fe ff ff       mov    -0x13c(%ebp),%eax
   3cee3:       8b 85 c4 fe ff ff       mov    -0x13c(%ebp),%eax
   3cf1a:       8b 85 c4 fe ff ff       mov    -0x13c(%ebp),%eax
   3d058:       8b 85 c4 fe ff ff       mov    -0x13c(%ebp),%eax
   3d147:       8b 85 c4 fe ff ff       mov    -0x13c(%ebp),%eax

The most interesting one is 35c7a but...

Code:

   35c48:	ff d0                	call   *%eax
   35c4a:	84 c0                	test   %al,%al
   35c4c:	74 22                	je     0x35c70
   35c4e:	48                   	dec    %eax
   35c4f:	8b 45 f8             	mov    -0x8(%ebp),%eax
   35c52:	49                   	dec    %ecx
   35c53:	89 c0                	mov    %eax,%eax
   35c55:	48                   	dec    %eax
   35c56:	ba 88 8c 06 00       	mov    $0x68c88,%edx
   35c5b:	00 00                	add    %al,(%eax)
   35c5d:	00 00                	add    %al,(%eax)
   35c5f:	b9 00 00 00 80       	mov    $0x80000000,%ecx
   35c64:	48                   	dec    %eax
   35c65:	b8 d0 a9 05 00       	mov    $0x5a9d0,%eax
   35c6a:	00 00                	add    %al,(%eax)
   35c6c:	00 00                	add    %al,(%eax)
   35c6e:	ff d0                	call   *%eax
   35c70:	49                   	dec    %ecx
   35c71:	b8 a9 8c 06 00       	mov    $0x68ca9,%eax
   35c76:	00 00                	add    %al,(%eax)
   35c78:	00 00                	add    %al,(%eax)
   35c7a:	ba 3c 01 00 00       	mov    $0x13c,%edx      ; Ok everything fine,
   35c7f:	48                   	dec    %eax
   35c80:	b9 c0 8c 06 00       	mov    $0x68cc0,%ecx
   35c85:	00 00                	add    %al,(%eax)
   35c87:	00 00                	add    %al,(%eax)
   35c89:	48                   	dec    %eax
   35c8a:	b8 e6 a9 05 00       	mov    $0x5a9e6,%eax
   35c8f:	00 00                	add    %al,(%eax)
   35c91:	00 00                	add    %al,(%eax)
   35c93:	ff d0                	call   *%eax
   35c95:	48                   	dec    %eax
   35c96:	8b 45 18             	mov    0x18(%ebp),%eax
   35c99:	48                   	dec    %eax
   35c9a:	89 c2                	mov    %eax,%edx        ; and that's it?
   35c9c:	48                   	dec    %eax
   35c9d:	8b 4d 10             	mov    0x10(%ebp),%ecx
   35ca0:	48                   	dec    %eax
   35ca1:	b8 01 4f 05 00       	mov    $0x54f01,%eax
   35ca6:	00 00                	add    %al,(%eax)
   35ca8:	00 00                	add    %al,(%eax)
   35caa:	ff d0                	call   *%eax            ; etc, etc...

BIOS P02ABK (reported latest from bios update) Download P02ABK.cap from Sendspace.com - send big files the easy way

Any advice is welcome. Thanks in advance.

 

Obviously the code you disassembled does not make sense at all. In fact I'd be surprised if it were code at all.
I've looked into the image you posted and it seems to only have two sections, while by bios image has around 100 sections.

This can mean two things: the bios code is either compressed using an algorithm not known by phoenixtool or another image exists that contains the actual bios code. Looking at the file's entropy I'd guess the first but don't quote me on it.

I can't seem to obtain a bios image for your machine since samsung only allows me to download it when I run the bios update utility on the corresponding machine.

I'm curious where you got this image from. Are you sure this is the only image?

 

I having the same problem as mnubla2 trying to find the needed mod to a Samsung 500P4. The file Samsung gives you is a .exe file here the one I got Download ITEM_20121022_751_WIN_P04RAB.exe from Sendspace.com - send big files the easy way

When you run this .exe it create a folder inside Temp, the cap file is inside of it. I put the folder I get here Download __Samsung_Update.zip from Sendspace.com - send big files the easy way. Looks like the .cap is the only image.

If someone can take a look at the files and try to find the needed section I will very much appreciate it. I tried but failed.

Thanks!

 

Asus K73SV bios. rev 2.10 16/11/2011.
ASUS - Notebooks- ASUS K73SV

Download K73SVAS210.zip from Sendspace.com - send big files the easy way

Can someone modify the bios to AES-NI was correctly detected.
I would be grateful for this.
i swap core i3-2310m to i7-2630QM SR02Y ,rev D2 but CPUZ and Truecrypt 7.1 not detect AES-Ni hardware acceleration.

 

Hi
Could you pls send me your modded BIOS for K/X73SV or make it available for download from a file sharing service?