How's the DHKey computed using python?

[PyDotAll]

There are scenarios where the --authkey is not provided but the WPS PIN is still cracked. How do you compute the DHKey in this case? Can you show me even a Python script deriving from PKE and PKR exactly? They are not straightforward as I've seen on the c code. Thanks!

[soxrok2212]

Are you referring to Realtek implementations? If so, the Realtek private key is static and is known.

[PyDotAll]

I mean for other manufacturers. So it turns out that not only the ENonce was manufacturer specific but also how the DHKey is being generated is that right?

[PyDotAll]

I detected a router with RTL86xx model. Do you have any available implementation for newer versions or even for any RTL8xxx manufacturers? Thanks!