Help decrypting downloaded mp4 files from stream (with keys)

[Encrypt2Decrypt]

Hello, looking for some help as I was not getting anywhere here with what I have tried to decrypt this video and audio file.
Below is the information and what I attempted. Have only tried to decrypt video file so far. But any suggestions? Thanks

Audio Key:

      <!-- Common Encryption -->
      <ContentProtection schemeIdUri="urn:mpeg:dash:mp4protection:2011" value="cbcs" cenc:default_KID="E9F368BD-A205-4D6B-B2D1-AD28AF408473">
      </ContentProtection>
      <!-- Widevine -->
      <ContentProtection schemeIdUri="urn:uuid:EDEF8BA9-79D6-4ACE-A3C8-27DCD51D21ED">
        <cenc:pssh>AAAASnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACoSEOnzaL2iBU1rstGtKK9AhHMSEExx8AjUIUomgiWF+ZfurR5I88aJmwY=</cenc:pssh>
      </ContentProtection>

Video Key:

      <!-- Common Encryption -->
      <ContentProtection schemeIdUri="urn:mpeg:dash:mp4protection:2011" value="cbcs" cenc:default_KID="4C71F008-D421-4A26-8225-85F997EEAD1E">
      </ContentProtection>
      <!-- Widevine -->
      <ContentProtection schemeIdUri="urn:uuid:EDEF8BA9-79D6-4ACE-A3C8-27DCD51D21ED">
        <cenc:pssh>AAAASnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACoSEOnzaL2iBU1rstGtKK9AhHMSEExx8AjUIUomgiWF+ZfurR5I88aJmwY=</cenc:pssh>
      </ContentProtection>

Commands Tried:

mp4decrypt --key 1:4C71F008D4214A26822585F997EEAD1E --key 2:EDEF8BA979D64ACEA3C827DCD51D21ED video.mp4 decrypted.mp4

mp4decrypt --key 1:4C71F008-D421-4A26-8225-85F997EEAD1E --key 2:EDEF8BA9-79D6-4ACE-A3C8-27DCD51D21ED video.mp4 decrypted.mp4

mp4decrypt --key 1:EDEF8BA979D64ACEA3C827DCD51D21ED --key 2:AAAASnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACoSEOnzaL2iBU1rstGtKK9AhHMSEExx8AjUIUomgiWF+ZfurR5I88aJmwY= video.mp4 decrypted.mp4

mp4decrypt --key 1:AAAASnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACoSEOnzaL2iBU1rstGtKK9AhHMSEExx8AjUIUomgiWF+ZfurR5I88aJmwY video.mp4 decrypted.mp4

File created, but does not play + error:

WARNING: atom serialized to fewer bytes than declared size
WARNING: padding would be too large

[Obo]

Suggestion is: try to understand how widevine decryption works - read through the stickes, especially the Decryption series by A_n_g_e_l_a.

The keys for widevine decryption aren't found in the mpd file. Instead you'll need a CDM and post the PSSH from the mpd to the license server the site uses to get the decryption keys.

There are people here willing to help, but usually the video url is needed. The PSSH from the mpd usually is not enough to get the keys.

[A_n_g_e_l_a]

Hello, looking for some help as I was not getting anywhere here with what I have tried to decrypt this video and audio file.
Below is the information and what I attempted. Have only tried to decrypt video file so far. But any suggestions? Thanks

Your keys are wrong. Use the script in my signature to get keys, download AND decrypt. And then do some reading after you can see how it works ...

[cedric8528]

Try this key

edef8ba979d64acea3c827dcd51d21ed:1c9f0222e49da66fc785376c0645d86d

mp4decrypt --key edef8ba979d64acea3c827dcd51d21ed:1c9f0222e49da66fc785376c0645d86d video.mp4 videodecrypted.mp4

[A_n_g_e_l_a]

Try this key

edef8ba979d64acea3c827dcd51d21ed:1c9f0222e49da66fc785376c0645d86d

mp4decrypt --key edef8ba979d64acea3c827dcd51d21ed:1c9f0222e49da66fc785376c0645d86d video.mp4 videodecrypted.mp4

Teach a man to fish ....

[Obo]

I wonder if that key will work -- the KID is the UUID of the widevine scheme...

If you decode the PSSH, you'll find the two KIDs:

keyid: e9f368bda2054d6bb2d1ad28af408473,
keyid: 4c71f008d4214a26822585f997eead1e

[Encrypt2Decrypt]

Try this key

edef8ba979d64acea3c827dcd51d21ed:1c9f0222e49da66fc785376c0645d86d

mp4decrypt --key edef8ba979d64acea3c827dcd51d21ed:1c9f0222e49da66fc785376c0645d86d video.mp4 videodecrypted.mp4

Thanks for your suggestion. End result was similar, unable to play and :

WARNING: atom serialized to fewer bytes than declared size
WARNING: padding would be too large

I wonder if that key will work -- the KID is the UUID of the widevine scheme...

If you decode the PSSH, you'll find the two KIDs:

keyid: e9f368bda2054d6bb2d1ad28af408473,
keyid: 4c71f008d4214a26822585f997eead1e

That would be?:

mp4decrypt --key 1:e9f368bda2054d6bb2d1ad28af408473 --key 2:4c71f008d4214a26822585f997eead1e video.mp4 decrypted.mp4

Hello, looking for some help as I was not getting anywhere here with what I have tried to decrypt this video and audio file.
Below is the information and what I attempted. Have only tried to decrypt video file so far. But any suggestions? Thanks

Your keys are wrong. Use the script in my signature to get keys, download AND decrypt. And then do some reading after you can see how it works ...

I will try that and see how it goes, thanks.

[Obo]

Yes please follow A_n_g_e_l_a's advice. And no, you can't use the keyids as keys (it was an answer to @cedric8528's answer anyway). The keyids are used (as part of the PSSH) in the final step to obtain the keys from the license server and are part of the encrypted video as well to determine which key to use to decrypt the video. Almost all of this is outlined in great detail in A_n_g_e_l_a's series in the stickies.

Understanding what you do is the first step to successfully obtaining the keys by yourself.

[Encrypt2Decrypt]

Hello, looking for some help as I was not getting anywhere here with what I have tried to decrypt this video and audio file.
Below is the information and what I attempted. Have only tried to decrypt video file so far. But any suggestions? Thanks

Your keys are wrong. Use the script in my signature to get keys, download AND decrypt. And then do some reading after you can see how it works ...

I believe I have all the required information needed for your script to make an attempt. Just having a hard time getting your hell3.py script to open. Believe I downloaded everything, the MS terminal app and other files, installed python, tried commands from correct Dir, but will not run.

[Encrypt2Decrypt]

Okay after some tinkering I was able to get script to run properly.
And "MPD URL" was accepted but when I enter for "cURL of license server request" keep getting the below. Thoughts?

httpcore.UnsupportedProtocol: Request URL is missing an 'http://' or 'https://' protocol.
httpx.UnsupportedProtocol: Request URL is missing an 'http://' or 'https://' protocol.

[iamghost]

what is video URL

[Obo]

Did you enter the complete copy of what you saved as "Copy as cURL" from the browsers developer tool output of the license request?

Hell3 has an illustrated instructions tutorial "start.html" in its folder, that you can view with your browser. I wonder if you've seen it?

[Encrypt2Decrypt]

Yes, I did read it and was helpful to get this far. In the pictures it just looked like for step 2, he didn't include the curl at the start and the other issue seemed that I needed to refresh the page for an updated license. After doing all that, I was able to reach step 3 for the first time for the file name. But how do I know what the file name is server side or giving my own name? I don't know the name so tried "test" but it kicked back:

FileNotFoundError: [WinError 2] The system cannot find the file specified

I also pulled the key below during end of step 2, could I use that for mp4decrypt now?

--key 4c71f008d4214a26822585f997eead1e:6fab79480b7660dc9 2eb8695205b9269
--key e9f368bda2054d6bb2d1ad28af408473:4b9eaa03cea516f04 c1d880081899c02

[Obo]

The keys look ok, the keyids match those from the decoded PSSH - give it a try!

[Encrypt2Decrypt]

The keys look ok, the keyids match those from the decoded PSSH - give it a try!

Would this be the correct command to make an attempt with two keys?

mp4decrypt --key 1:4c71f008d4214a26822585f997eead1e:6fab79480b7660dc9 2eb8695205b9269 --key 2:e9f368bda2054d6bb2d1ad28af408473:4b9eaa03cea516f04 c1d880081899c02  video.mp4 decrypted.mp4

Edit: Above did not work

[iamghost]

mp4decrypt.exe --key 4c71f008d4214a26822585f997eead1e:6fab79480b7660dc92eb8695205b9269 --key e9f368bda2054d6bb2d1ad28af408473:4b9eaa03cea516f04c1d880081899c02  video.mp4 decrypted.mp4

make sure cmd is path with mp4decrypt.exe

[Encrypt2Decrypt]

mp4decrypt.exe --key 4c71f008d4214a26822585f997eead1e:6fab79480b7660dc92eb8695205b9269 --key e9f368bda2054d6bb2d1ad28af408473:4b9eaa03cea516f04c1d880081899c02  video.mp4 decrypted.mp4

make sure cmd is path with mp4decrypt.exe

Yes, path was set to same folder as mp4decrpt.exe when using command.
But received the old error I used to receiving before when I first started process.
A file is created, but when you play it, just a black screen only:

mp4decrypt.exe --key 4c71f008d4214a26822585f997eead1e:6fab79480b7660dc92eb8695205b9269 --key e9f368bda2054d6bb2d1ad28af408473:4b9eaa03cea516f04c1d880081899c02 video.mp4 decrypted.mp4
WARNING: atom serialized to fewer bytes than declared size
WARNING: padding would be too large

[iamghost]

just post video url then we can have a look

[Encrypt2Decrypt]

just post video url then we can have a look

Okay, I will send you the link to it.

For step one of the script that asks for the mpd address, and gives you the key in step two, should that key work for both the cmfv/mp4 and cmfa/m4a encrypted files to decrypt?

And how do you properly complete step 3 of A_n_g_e_l_a's script for the file name? I tried to pull the name from what seems to be listed server side, but didn't work. And also made a test name and also did not work as well. Both came back with: FileNotFoundError: [WinError 2] The system cannot find the file specified

[A_n_g_e_l_a]

For step one of the script that asks for the mpd address, and gives you the key in step two ?????, should that key work for both the cmfv/mp4 and cmfa/m4a encrypted files to decrypt?

What is cmfv and cmfa?

And how do you properly complete step 3 of A_n_g_e_l_a's script for the file name? I tried to pull the name from what seems to be listed server side, but didn't work. And also made a test name and also did not work as well. Both came back with: FileNotFoundError: [WinError 2] The system cannot find the file specified

And what did you do about that?? Did you imagine it had nothing to do with you? Did you think it must be the script?

My script will only download Widevine DRM protected videos. My script will only work if all the helper programs are installed too. The old adage is - If in doubt RTFM - did you?

One of us must have a wonderful facility to misunderstand - for I cannot understand how you can go wrong if your video is indeed Widevine encrypted.

You do this.

1. You run start.html - it is in the HellYes folder. Click to open or just drag to a browser to view.
2. You read it carefully! Do not just run your eyes over it - read the words, understand what it says. After each paragraph stop and ask yourself 'do I understand that?' If not go back if yes , go on.
3. You do what it says; you install software into a folder called binaries and add that folder to your system's PATH (Environment Variable in Windoze)
4. You make sure each program is installed correctly and available in PATH (Try calling each one from the command line in Terminal)
5. You prepare to download a video
6. Find the regex in the start.html page and copy it.
7. Go to the website with the video you want.
8. Load the video page.
9. Press Shift+CTRl+C to open web developet tools.
10. Navigate to the Network tab
11. Enter the copied regex to the filter box.
12. Press Ctrl+R to refresh the video page and interact to play the video
13. The network page will display the mpd and its fetch method will be GET - that is the mpd
14. Click on that mpd link to open a menu -select 'Copy Value' and the choose and click 'Copy url'.
    
    [Attachment 80134 - Click to enlarge]
15. In a terminal window, in the HellYes folder, type 'python3 hell3.py' or just 'python hell3.py' depending on your Operating System.
16. Enter the mpd at the prompt. Ctrl +V should paste it and you will see the mpd echoed to screen.
    
    [Attachment 80135 - Click to enlarge]
17. Select the license URL its fetch method will be POST; select 'Copy Value' -> 'Copy as Curl' in the menu-boxes
    
    [Attachment 80136 - Click to enlarge]
18. With cURL copied go back to hell3.py and paste in response to the prompt. Before you paste (Ctrl+v) the screen looks like this:-
    
    [Attachment 80138 - Click to enlarge]
19. And after you paste the screen looks like this:-
    
    [Attachment 80139 - Click to enlarge]
20. Absolutely NOTHING HAPPENS ON THE SCREEN. The curl may contain gibberish which could mess up your display so it does not echo to screen.
21. But after you press 'ENTER' the program interprets the data and produces a key
    
    [Attachment 80140 - Click to enlarge]
22. You can stop here if you just need the key for use elsewhere.
23. Or enter the name for your video to be saved as - what will you call it?
24. Just do not use spaces in the name:- for example My_Fair_City_23_06_2024 or'video_from_RTE - you choose whatever you want here.
    
    [Attachment 80141 - Click to enlarge]
25. The script responds and prepares to download but offers the download command for users who may wish to bulk download later or modify the N_m3u8DL-RE command.
26. you can choose to stop here or continue
27. Continuing runs the downloader
28. The downloader pauses for you to select the video resolution you want. To accept the default choices (best video audio streams) just press ENTER.
29. The video now downloads
    
    [Attachment 80143 - Click to enlarge]

I has taken me an hour and a half to put this together for 1 in 838 people!! Don't you dare come back and say you don't understand! Clearly you were missing one of the helper programs and didn't bother to read the error message.

[iamghost]

me too i dont know what is cmfv.

https://p-haul-st.sby.candl.jp/fc-haul03.sby/dg03/8005/wxToHZ7tEqJmh51KCKcVJPVjqm5y0ziDb6rLKvcIgxHEH14BhR3npjVRLCctgVkMjMkYZsbDrKKpmq4KGEWYa2pTfMPgeyEnbgz14iZlLLzdGyT9si5N3.rL4v6j1w.L/067/130/100/fdm0131/fdm0131_00_2m.cmfv

I already ask for video URL 3 times but he/she refuse to give link, just link above

[Attachment 80157 - Click to enlarge]

[Silv3r]

me too i dont know what is cmfv.

https://p-haul-st.sby.candl.jp/fc-haul03.sby/dg03/8005/wxToHZ7tEqJmh51KCKcVJPVjqm5y0ziDb6rLKvcIgxHEH14BhR3npjVRLCctgVkMjMkYZsbDrKKpmq4KGEWYa2pTfMPgeyEnbgz14iZlLLzdGyT9si5N3.rL4v6j1w.L/067/130/100/fdm0131/fdm0131_00_2m.cmfv

I already ask for video URL 3 times but he/she refuse to give link, just link above

[Attachment 80157 - Click to enlarge]

https://www.wowza.com/blog/what-is-cmaf
https://castr.com/blog/what-is-cmaf/

CMAF (Common Media Application Format) (cmfv video and cmfa audio)

both support it
https://github.com/axiomatic-systems/Bento4
https://github.com/Eyevinn/mp4ff

[Encrypt2Decrypt]

Appreciate your time Angela, I will try the guide when I get a chance later in the week.
Seems I've tried your patience, but I never used python, these scripts, or much terminal programs before, so bit of a learning curve.

me too i dont know what is cmfv.

https://p-haul-st.sby.candl.jp/fc-haul03.sby/dg03/8005/wxToHZ7tEqJmh51KCKcVJPVjqm5y0ziDb6rLKvcIgxHEH14BhR3npjVRLCctgVkMjMkYZsbDrKKpmq4KGEWYa2pTfMPgeyEnbgz14iZlLLzdGyT9si5N3.rL4v6j1w.L/067/130/100/fdm0131/fdm0131_00_2m.cmfv

I already ask for video URL 3 times but he/she refuse to give link, just link above

[Attachment 80157 - Click to enlarge]

That was the links from the code below:

Video:
https://p-haul-st.sby.candl.jp/fc-haul03.sby/dg03/8005/ZaBSiD.G37VhKYO5A1Fgi5c4vMKIPT3...131_00_2m.cmfv

Audio:
https://p-haul-st.sby.candl.jp/fc-haul03.sby/dg03/8005/ZaBSiD.G37VhKYO5A1Fgi5c4vMKIPT3...1_00_192k.cmfa

Seems you can not access without logging in, but once logged in you can save target as mp4 for video and m4a for audio.
But maybe doing it that way corrupts the files? Video is about 1.1gb and audio is about 33mb, but have no place to upload them.
With the keys I had before I thought I could decode them, but wasn't working. Will try Angela suggested later in the week.

<?xml version="1.0" encoding="utf-8"?>
<MPD xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="urn:mpeg:dash:schema:mpd:2011" xmlns:cenc="urn:mpeg:cenc:2013" xsi:schemaLocation="urn:mpeg:dash:schema:mpd:2011 http://standards.iso.org/ittf/PubliclyAvailableStandards/MPEG-DASH_schema_files/DASH-MPD.xsd" type="static" mediaPresentationDuration="PT1H18M16.467801S" minBufferTime="PT10S" profiles="urn:mpeg:dash:profile:isoff-on-demand:2011">
  <Period duration="PT1H18M16.467801S">
    <AdaptationSet id="1" group="1" contentType="audio" lang="ja" segmentAlignment="true" subsegmentAlignment="true" subsegmentStartsWithSAP="1" audioSamplingRate="44100" mimeType="audio/mp4" codecs="mp4a.40.2" startWithSAP="1">
      <AudioChannelConfiguration schemeIdUri="urn:mpeg:dash:23003:3:audio_channel_configuration:2011" value="2"/>
      <!-- Common Encryption -->
      <ContentProtection schemeIdUri="urn:mpeg:dash:mp4protection:2011" value="cbcs" cenc:default_KID="E9F368BD-A205-4D6B-B2D1-AD28AF408473">
      </ContentProtection>
      <!-- Widevine -->
      <ContentProtection schemeIdUri="urn:uuid:EDEF8BA9-79D6-4ACE-A3C8-27DCD51D21ED">
        <cenc:pssh>AAAASnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACoSEOnzaL2iBU1rstGtKK9AhHMSEExx8AjUIUomgiWF+ZfurR5I88aJmwY=</cenc:pssh>
      </ContentProtection>
      <Role schemeIdUri="urn:mpeg:dash:role:2011" value="main"/>
      <Representation id="audio_jpn=56072" bandwidth="73000">
        <BaseURL>https://p-haul-st.sby.candl.jp/fc-haul03.sby/dg03/8005/ZaBSiD.G37VhKYO5A1Fgi5c4vMKIPT3xKAY9LM1MK8ZYio7kVinFAEJSEpcW9.PqGk6Hf14HwTxc5-Z0qSvFDg3qmfqDqJePnG4Dtq0gai-2m5T0ZIW.sm5Bah26m.Zd/067/130/100/fdm0131/fdm0131_00_192k.cmfa</BaseURL>
        <SegmentBase timescale="44100" presentationDuration="207114230" indexRangeExact="true" indexRange="1540-57875">
          <Initialization range="0-1539"/>
        </SegmentBase>
      </Representation>
    </AdaptationSet>
    <AdaptationSet id="2" group="2" contentType="video" lang="ja" par="4:3" minBandwidth="1210000" maxBandwidth="5191000" segmentAlignment="true" subsegmentAlignment="true" subsegmentStartsWithSAP="1" width="640" height="480" sar="1:1" mimeType="video/mp4" codecs="avc1.42C01E" startWithSAP="1">
      <!-- Common Encryption -->
      <ContentProtection schemeIdUri="urn:mpeg:dash:mp4protection:2011" value="cbcs" cenc:default_KID="4C71F008-D421-4A26-8225-85F997EEAD1E">
      </ContentProtection>
      <!-- Widevine -->
      <ContentProtection schemeIdUri="urn:uuid:EDEF8BA9-79D6-4ACE-A3C8-27DCD51D21ED">
        <cenc:pssh>AAAASnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACoSEOnzaL2iBU1rstGtKK9AhHMSEExx8AjUIUomgiWF+ZfurR5I88aJmwY=</cenc:pssh>
      </ContentProtection>
      <Role schemeIdUri="urn:mpeg:dash:role:2011" value="main"/>
      <Representation id="video_jpn=501000" bandwidth="1210000" scanType="progressive">
        <BaseURL>https://p-haul-st.sby.candl.jp/fc-haul03.sby/dg03/8005/ZaBSiD.G37VhKYO5A1Fgi5c4vMKIPT3xKAY9LM1MK8ZYio7kVinFAEJSEpcW9.PqGk6Hf14HwTxc5-Z0qSvFDg3qmfqDqJePnG4Dtq0gai-2m5T0ZIW.sm5Bah26m.Zd/067/130/100/fdm0131/fdm0131_00_500k.cmfv</BaseURL>
        <SegmentBase timescale="11988" presentationDuration="56300400" indexRangeExact="true" indexRange="1636-57971">
          <Initialization range="0-1635"/>
        </SegmentBase>
      </Representation>
      <Representation id="video_jpn=2001000" bandwidth="5191000" scanType="progressive">
        <BaseURL>https://p-haul-st.sby.candl.jp/fc-haul03.sby/dg03/8005/ZaBSiD.G37VhKYO5A1Fgi5c4vMKIPT3xKAY9LM1MK8ZYio7kVinFAEJSEpcW9.PqGk6Hf14HwTxc5-Z0qSvFDg3qmfqDqJePnG4Dtq0gai-2m5T0ZIW.sm5Bah26m.Zd/067/130/100/fdm0131/fdm0131_00_2m.cmfv</BaseURL>
        <SegmentBase timescale="11988" presentationDuration="56300400" indexRangeExact="true" indexRange="1636-57971">
          <Initialization range="0-1635"/>
        </SegmentBase>
      </Representation>
    </AdaptationSet>
  </Period>
<preserveWhiteSpace></preserveWhiteSpace><formatOutput>1</formatOutput></MPD>
<!-- Created with Unified Streaming Platform  (version=1.12.1-28247) -->

[A_n_g_e_l_a]

...I never used python, these scripts, or much terminal programs before, so bit of a learning curve.

Then to my mind you shouldn't be here. You wouldn't teach anyone to climb by starting at Everest Base Camp. Downloading and decrypting is one of the most difficult processes a home user can do on their computer - yet you start here? You set yourself up to fail, but also put a burden on those, from whom, you expect support.