Help getting key for 6play encrypted video

[Blackalot]

So far, I have been able to download encrypted mp4 and m4a files from https://www.6play.fr/pekin-express-itineraire-bis-p_14657/s17-e4-c_12998468

I have both the video and audio file.

I want to learn how to decrypt this myself but for now, can someone provide keys for this video to decrypt it with mp4decrypt?

Can someone point me in the right direction to find the PSSH and license please?

[lomero]

you can find pssh into mpd
dev tool - network - search mpd - preview tab > pssh

AAAAbXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAE0IARIQFzUAuZ0w0qpQEQFfZJLWBxoIY2FzdGxhYnMiJGV5SmhjM05sZEVsa0lqb2lZMnhwY0Y4eE1qazVPRFEyT0NKOTIHZGVmYXVsdA==

for lic url search cenc
but need to add at the end ?specConform=true

your key

173500b99d30d2aa5011015f6492d607:3ab9c379b68b51b2f6d57b43d3a6281d

[larits]

This site can be a pain to start off with when you're new, but here are some basic instructions:

Oftentimes you'll find the correct PSSH inside the mpd, but in this particular case it's not the correct one. You need to get the real value either by generating it on https://tools.axinom.com/generators/PsshBox by putting in uuid and KID, or by other tools and scripts. You can find more info on this by searching the forum.

MPD PSSH(incorrect):

AAAAbXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAE0IARIQFzUAuZ0w0qpQEQFfZJLWBxoIY2FzdGxhYnMiJGV5SmhjM05sZEVsa0lqb2lZMnhwY0Y4eE1qazVPRFEyT0NKOTIHZGVmYXVsdA==

Generated PSSH(correct):

AAAAMnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAABISEBc1ALmdMNKqUBEBX2SS1gc=

You'll find the license by filtering for "lic" or "cenc". This particular site uses https://lic.drmtoday.com/license-proxy-widevine/cenc/. But there's a catch! Some hero figured out that you need to add ?specConform=true at the end of drmtoday's URL. Like this: https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true.

And that's not all. You also need to get one specific header, mainly the x-dt-auth-token. You'll find more info on this in the forum.

Now, with proper PSSH, license, and header, we can get the key:

PSSH: AAAAMnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAABISEBc1ALmdMNKqUBEBX2SS1gc=
License URL: https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true

--key: 173500b99d30d2aa5011015f6492d607:3ab9c379b68b51b2f6d57b43d3a6281d

[Blackalot]

Wow! Thank you so much for your help everyone!

Next, I decrypted the video and the audio files. The audio file played after I downloaded it but used mp4decrypt anyway.

mp4decrypt --key 173500b99d30d2aa5011015f6492d607:3ab9c379b68b51b2f6d57b43d3a6281d video_encrypted.mp4 video_decrypted.mp4

mp4decrypt --key 173500b99d30d2aa5011015f6492d607:3ab9c379b68b51b2f6d57b43d3a6281d audio_encrypted.m4a audio_decrypted.m4a

With the key provided I was successfully able to decrypt the video and use ffmpeg to combine them.

ffmpeg -i video_decrypted.mp4 -i audio_decrypted.m4a -c copy muxed.mp4

It plays perfectly! First time doing this.

- I did get the "incorrect" PSSH with Tampermonkey from the EME Logger script. I used both a video and audio .dash file from the Network tab in Developer Tools and renamed them .mpd to download this encrypted video and audio. Nothing came up when I searched for mpd. That's why. How would I know that I have the "incorrect" PSSH in the future?

Again, thank you for the help provided here!

I can backtrack and confirm how to get the key myself, now that I know for sure this can be done. I am so happy right now!

[Blackalot]

Would https://cdrm-project.com/ work to get the key myself or should I explore other ways to get the key without a rooted Android device?

Because, I have one more video that I need the key for pretty please: https://www.6play.fr/les-apprentis-aventuriers-p_21915/s6-e20-c_12998470

Since I can download the video, get the PSSH and license URL... I am now focused on getting the keys myself, hopefully

[cedric8528]

yes you can.... with the good headers

need only x-dt-auth-token


[Attachment 69689 - Click to enlarge]

[Blackalot]

yes you can.... with the good headers

need only x-dt-auth-token

I am getting error with cdrm-project now.

ERROR
Error 403: <!doctype html><html lang="en"><head><title>HTTP Status 403 – Forbidden</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 403 – Forbidden</h1></body></html>

MPD

https://6play-fastly.vod.rtlmutu.bedrock.tech/m6web/output/5/7/4/574da309d76a75f1f6bbce1b1e626b6c92971363/static/12998470_18ce6a420c253bad93d698a942c732ba_web_dash_upTo720p_720p_drm_software.mpd

PSSH

AAAAbXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAE0IARIQC+L7gRDU3CDfw2F7khez3RoIY2FzdGxhYnMiJGV5SmhjM05sZEVsa0lqb2lZMnhwY0Y4eE1qazVPRFEzTUNKOTIHZGVmYXVsdA==

LICENSE

https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true

HEADER

x-dt-auth-token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.... deleted by me

There are 3 cenc and I tried them all. The header above is the one listed for the cenc with the longest Content-Length. Perhaps I have the wrong PSSH from how I got it the first time? Maybe, I need to try and get it from the mpd instead?

[cedric8528]

you can have a look in the mpd and the good PSSH is the short one....so your pssh is ok.

Maybe a problem of Geo-loc....

[larits]

I was wrong. You don't actually have to generate a new PSSH for this site. You still can, and it's a good thing to learn for other sites, but it's not necessary here. I was getting errors that I thought was because of a faulty PSSH, but it turns out I shouldn't talk on the phone at the same time as doing this . Anyway...

The PSSH you have is correct, but that x-dt-auth-token is most likely time-sensitive. So that could be why you're getting 403.

For this video: https://www.6play.fr/les-apprentis-aventuriers-p_21915/s6-e20-c_12998470

PSSH:

AAAAbXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAE0IARIQC+L7gRDU3CDfw2F7khez3RoIY2FzdGxhYnMiJGV5SmhjM05sZEVsa0lqb2lZMnhwY0Y4eE1qazVPRFEzTUNKOTIHZGVmYXVsdA==

Lic URL:

https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true

Key:

--key 0be2fb8110d4dc20dfc3617b9217b3dd:47656bc032e2253c5ca546cc6d4491e1

[Blackalot]

you can have a look in the mpd and the good PSSH is the short one....so your pssh is ok.

Maybe a problem of Geo-loc....

I thought so but I am in France right now. I can try a VPN. But are you able to use the information to see a key? Maybe it is the header? CDRM-Project website is just showing error. Do you happen to get the same error with the information that I provided?

[cedric8528]

I am in France too....so The problem is not geo-loc.

If it works for me, It must works for you

With your last information I have the key which is into the cache of CDRM.


[Attachment 69697 - Click to enlarge]

[Blackalot]

I was wrong. You don't actually have to generate a new PSSH for this site. You still can, and it's a good thing to learn for other sites, but it's not necessary here. I was getting errors that I thought was because of a faulty PSSH, but it turns out I shouldn't talk on the phone at the same time as doing this . Anyway...

The PSSH you have is correct, but that x-dt-auth-token is most likely time-sensitive. So that could be why you're getting 403.

For this video: https://www.6play.fr/les-apprentis-aventuriers-p_21915/s6-e20-c_12998470

PSSH:

AAAAbXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAE0IARIQC+L7gRDU3CDfw2F7khez3RoIY2FzdGxhYnMiJGV5SmhjM05sZEVsa0lqb2lZMnhwY0Y4eE1qazVPRFEzTUNKOTIHZGVmYXVsdA==

Lic URL:

https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true

Key:

--key 0be2fb8110d4dc20dfc3617b9217b3dd:47656bc032e2253c5ca546cc6d4491e1

Ahhhhh... that makes sense! It may be the timeout because I did have the Developer Tools window open and the video on pause for a long time. I can verify this in the future, maybe next week. Thank you so much for confirming and for trying to help while on the phone too!

[Blackalot]

I am in France too....so The problem is not geo-loc.

If it works for me, It must works for you

With your last information I have the key which is into the cache of CDRM.


[Attachment 69697 - Click to enlarge]

Thank you for confirming! Hi in France too, btw!

No header needed from the pic that you shared? I can just try the PSSH and the license URL as you did and should get the same results?

EDIT: Oh sh@t! It worked for me too!

[cedric8528]

Indeed, no headers needed because the key have ever been found (by someone) and Stored into the cache of CDRM.
So first you can try with just PSSH and Licence URl (ticking "cache" or no)
If it doens't work, add the "x-dt-auth-token"

[Blackalot]

Indeed, no headers needed because the key have ever been found (by someone) and Stored into the cache of CDRM.
So first you can try with just PSSH and Licence URl (ticking "cache" or no)
If it doesn't work, add the "x-dt-auth-token"

Ahhhh... I get it now!! I understand better. Makes sense!

Again, thank you for confirming information with me. I appreciate all the help that I received.

[cedric8528]

you re welcome