ReadyNAS Firmware layout
The firmware is stored encrypted within the firmware flash. The hwdecrypt / hwcp tools required for decrypting the firmware can be accessed from tech support mode (serial port, or unknown telnet password required).
The firmware layout is block based with simple ASCII header.
The first block contains two parts.
1. Encrypted index of the parts contained in the firmware image, one line per part.
each line has the same structure:
2. Unencrypted identification & checksum of the firmware
padded with an initial newline to allow grep to find the line.
The md5sum is calculated on the actual data only, excluding the index & info.
dd if=RAIDiator-4.1.6 skip=1 | md5sum