Forgive me if I'm mistaken about the details here, as I don't understand the subject too well; but are people attempting to decrypt keys used by NSpire to circumvent some type of memory protection? If so, I wonder if a cold-boot attack against the system is possible. (or something like it) That is, if the calculator is used in a manner where the system processes this key and stores it in memory, (e.g., a signed application is executed, and provides the appropriate verification key to the system) then perhaps the key can be extracted from memory as it's loaded. This type of attack works against encrypted computer systems, where decryption keys are stored in RAM for some time after the system powers down. This information can be carefully extracted from RAM before it is erased.

If i understand correctly, the OS (or it's checksum or something) has to be encrypted before transmission, then the calc decrypts it and makes sure it's valid. we know what numbers the calc uses to decrypt it, so we can decrypt it ourselves. What we don't know is how to ENcrypt it so that it comes out correct when the calc decrypts it.

Then let's hack TI's servers!

Let's not get into illegal activities, though.

Then we need to move to russia or china where it's legal!

[hint]Hehe, I'm going to Russia for the winter holidays...[/hint]