Quote:
Originally Posted by Renate
I'm not saying that you're wrong, but how do you know that they just didn't drop (intentionally or otherwise) the XML attribute keyInfo="passHash" ?
Have you tried just writing that in?
|
The point is that indicates a new key encryption.
The "passHash" encryption is publicly documented, and is rather simple.
It's AES-CBC-128, and the key is the first 16 bytes of the 20 byte base64-decoded 'cchashdata', with an IV of all 0's.
The new 'rights.xml' keys cannot not be decrypted with this key.