When you click on links to various merchants on this site and make a purchase, this can result in this site earning a commission. Affiliate programs and affiliations include, but are not limited to, the eBay Partner Network.
HP Tuners will always be tight lipped. They never release progress it seems over the years. Ultimately money is to be made and the accomplishment of it.
It seems odd they made an announcement last year it was coming shortly after the ECU and went ice cold. One would think after the break through of the ECU the TCU wouldn't be that far off to work through. Maybe an update stopped the progress. Maybe the EPA. Who knows. Might be a supply issues of some sort. It will be epic for many. Just having the ECU is great. FI and drag racers benefit the most.
HPT exploited hardware jtag on the E99 ecm.....same as their previous exploits. It didn't take as long as it did because they were doing some super secret hacking research or brute forcing AES256 encryption. It took that long presumably due to an insider giving up the goods, and is only possible in the first place because it is the boot/primary module for the car.
Global-B secondary modules like the TCM are not nearly as easy because the comms to the ECM are AES encrypted CAN + the module boot routines use secure software key exchange mechanism's with the E99 ecm that cannot be sniffed, and HPT nor anyone else in no way will EVER get access to GM's root encryption keys.
If the Global-B VIP module (essentially the vehicle's firewall) detects an incorrect module checksum, it will set the mil and in some cases disable the vehicle. On top of this, there are numerous co-dependent routines and sanity check baselines for the TCM embedded in various other modules. Global-B is a rat's nest of interleaved operations and communication from modules made by different suppliers. Even if one module from one supplier is cracked, there are dependencies and safeguards in the other modules that are not. Rumor is the 2025's will be capable of immediately requesting an OTA update to resolve corruption or exploit issues in real time.
So HPT can hardware enable ECM tuning parameter changes.....for now, but, the AES encrypted CAN/ethernet comms on the vehicle's network.......those are still, and will likely remain a black box. Unless you can see all of the source code, there is no chance at unwinding all this to tune the TCM.
HPT exploited hardware jtag on the E99 ecm.....same as their previous exploits. It didn't take as long as it did because they were doing some super secret hacking research or brute forcing AES256 encryption. It took that long presumably due to an insider giving up the goods, and is only possible in the first place because it is the boot/primary module for the car.
Global-B secondary modules like the TCM are not nearly as easy because the comms to the ECM are AES encrypted CAN + the module boot routines use secure software key exchange mechanism's with the E99 ecm that cannot be sniffed, and HPT nor anyone else in no way will EVER get access to GM's root encryption keys.
If the Global-B VIP module (essentially the vehicle's firewall) detects an incorrect module checksum, it will set the mil and in some cases disable the vehicle. On top of this, there are numerous co-dependent routines and sanity check baselines for the TCM embedded in various other modules. Global-B is a rat's nest of interleaved operations and communication from modules made by different suppliers. Even if one module from one supplier is cracked, there are dependencies and safeguards in the other modules that are not. Rumor is the 2025's will be capable of immediately requesting an OTA update to resolve corruption or exploit issues in real time.
So HPT can hardware enable ECM tuning parameter changes.....for now, but, the AES encrypted CAN/ethernet comms on the vehicle's network.......those are still, and will likely remain a black box. Unless you can see all of the source code, there is no chance at unwinding all this to tune the TCM.
Thanks for the explanation but it saddens me also that it seems an impossible uphill feat to accomplish. What can be adjusted on the tcm currently? Can you build an engine that operates off the parameters of what the tcm can do like say a 800 or 900 hp engine without piggybacking anything? I saw Lingerfelter has a 700 plus hp engine build that operates for thr current dct so I was thinking if building the dct and that engine then if the tcm gets a miracle put twins on thst 427 later. Any suggestions from anyone in here about that path?
I'd say it depends on what you want to do with the car. If you want 60-130, I'd wait for tcu or get another platform. If it's car shows and some fun around town, go for it.
I'm not putting any more money in mine personally until the tcu is unlocked. To much pride to make all that power and still lose. Bit then again, it is designed for track, not drag.
Afaik, there are aftermarket clutch packs and other beefed up parts for the TR9080 that will hold more power and operate reliably as long as the torque/rpm curve is close to the same shape as oem.....ie more airflow and torque across the powerband with a supercharger. Big cams with a lot of overlap and peaky high rpm power curves can cause DCT issues according to a couple of shops around here.
Big cams with a lot of overlap and peaky high rpm power curves can cause DCT issues according to a couple of shops around here.
That's because redline is unable to be raised. No point in doing a cam swap to move up the powerband if the car can't shift past ~6600 RPM. With TCM unlocked, in theory, they should be able to bump redline up to take advantage of a cam. This would also help with gearing complaints as you'd get more MPH per gear.
Also, though I agree with @gsvette about the advanced levels of encryption in Global B at some point these cars will have expired powertrain warranties. I'd imagine there's a higher chance of the TCM being unlocked in due time because of this.
That's because redline is unable to be raised. No point in doing a cam swap to move up the powerband if the car can't shift past ~6600 RPM. With TCM unlocked, in theory, they should be able to bump redline up to take advantage of a cam. This would also help with gearing complaints as you'd get more MPH per gear.
Also, though I agree with @gsvette about the advanced levels of encryption in Global B at some point these cars will have expired powertrain warranties. I'd imagine there's a higher chance of the TCM being unlocked in due time because of this.
Thats a good point. The M1M in the Z06 is rated and programmed for significantly higher input shaft speed vs the SR M1L. Eventually, salvage Z06 dct's/tcm will be available......some interesting swap possibilties with that.
It's a good idea but I highly doubt that. The fact that swapping seats from one C8 to another is a can of worms with them being VIN coded I would imagine ECU/TCM are the same.
Not sure but the Z06 has a different transfer gear and much higher redline. Not sure if that would allow you to essentially 'moneyshift' your DCT? Or perhaps that is controlled by the ECM? Further, the Z06 uses a completely different ECM made by Bosch. I really doubt it would work.
Unless you can see all of the source code, there is no chance at unwinding all this to tune the TCM.
Even the source code doesn't matter... you'd need the private key which is a file guarded and accessible by (if I remember right) less than five people in GM.
We're six years in with this platform. I don't think it's gonna happen at this point.
Every generation of security with computers people were like "oh it will be cracked just wait". I tried telling people this particular global B isn't like anything previously done. If they don't find a way to open the tcm on the SR model maybe the z06 ecu can and I bet the tcm in the z06 is built strong enough to handle the hp most of us would want. I personally am good with a 1000hp twin system. It could also be the keys magically are in the wild after the c8 platform is superceded by the c9. It would be nice though if there was any progress a small glimmer of information by someone could be posted.