With the new cpu (detected on MT5580PUEI (with MT5580MPOI its working i have exchanged couple of this with no problems with keys) and MT5591IVDJ same as MT5580MPOI ) the decrypt info it's in the file name PSTKV001 so when it comes to decrypt the buffer its not correct . It shoul be 105 but in the cpu is 128 so teoreticaly JTAG will do the trick by accesisng CPU s registers and changing the buffer lenght . I think so . Never had tested this teory . l_GetKey:357]> Calling IMnettvR_ecdctl_plf_get_key_data [dtv_app_mtk]> [a_ecd_custom_get_decry_info_by_filename]:encryption length: 148 , encry_buf: [dtv_app_mtk]> [a_ecd_custom_get_decry_info_by_filename]: f_name: PSTVK001 decry_buf: k]>(here should show the model of the tv e.g 40pfl6609) decry_len: 128 (here is the problem it should be 105) [AM ERROR][am_main.c][_am_child_sig_action][AM main]receive SIGCHLD, return:430, status:0xb (*) SaWMan/Watcher: Process 430 [2] has exited ABNORMALLY! [AM ERROR][ProcessManager.cpp][detachProcess]waitpid:No such file or directory [AM ERROR][ProcessControl.cpp][_thread_read_monitor]processcontrol reset let me exit!! [ 16.824728] Re-open MT53_FB successfully