Case study
VTech VM901: reconstructing camera authentication and media access
VTech VM901 reconstructs the camera's authentication and media workflow for a Home Assistant bridge. The Go and C implementation uses TUTK/Kalay transport, performs the documented X25519 and ChaCha20-Poly1305 exchange, decrypts H.264 and G.711 media, and publishes streams through go2rtc.
- Targets
- Protocol
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
- Evidence class
- C2 code & docs, no demo or download
- Stars
- 3
- Last commit
- 2026-08-26
- Language
- Go
- License (GitHub)
- MIT
GitHub data as of 2026-11-10
Evidence
- Observed
- Code and documentation observed; no download method or demo found.
- Checked
- 2026-11-08
Requirements & limits
- Prerequisites: An owned or authorized VM901 camera and account are required.
- Prerequisites: The Android/bionic ARM64 runtime needs locally extracted SDK libraries and application values; the account bootstrap uses an authenticated request from the official app.
- Testing evidence: The author reports testing on a local camera during the original research.
- License: MIT License for repository source; locally extracted components retain their own terms.
Cite
BibTeX
@misc{vtech-vm901-home-assistant-case,
title = {{VTech VM901: reconstructing camera authentication and media access}},
howpublished = {\url{https://github.com/Termina1/vtech-vm901-home-assistant}},
url = {https://github.com/Termina1/vtech-vm901-home-assistant},
urldate = {2026-11-06},
note = {Awesome REA entry: \url{https://awesomerea.org/resources/vtech-vm901-home-assistant-case/}}
}Plain text
VTech VM901: reconstructing camera authentication and media access. https://github.com/Termina1/vtech-vm901-home-assistant (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/vtech-vm901-home-assistant-case/
Useful? Star Awesome REA on GitHub2.4k
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · Termina1/vtech-vm901-home-assistant · Revision 383375e
- docs/architecture.md GitHub · Termina1/vtech-vm901-home-assistant · Revision 383375e
- NOTICE.md GitHub · Termina1/vtech-vm901-home-assistant · Revision 383375e
More in Protocols
- KATASYMBOL E12 Lab: reconstructing BLE label printing · Case study
- GE Opal 2: ice maker hardware and I2C interface research · Case study
- magicJack HOME: a Linux phone system from USB and SIP protocol research · Case study
- PyKS2: reconstructing the Pentax K-S2 Wi-Fi API · Case study
- ESPHome — Maytronics Air Cover BLE: reconstructing pool-cover control · Case study
- RevCar CLI: reconstructing WowWee car BLE control · Case study