This is only a thought.... If thare was a way to decrypt nag3, would it help to look at how a sly box works? eg.. A sly box decrypts nag3, so how does it do it? What does it do, and what is the prosses it takes to preform the task? If thare was to be a new box that could handle nag3, maby sly box holds the key.....
