Decrypting video with SAMPLE-AES

[Tsubasa]

In the past, I have successfully decrypted videos with pssh from mpd file and the license url with tools like WKS-KEYS.
However, this time I'm trying to decrypt a video I got from an app running in android emulator.
I intercept the traffic with fiddler but there's no mpd file. It only got several m3u8 files.

Written below is the response of a m3u8 file with the most information.

HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 552
Connection: keep-alive
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
ETag: "xxxxxx"
X-Cache: Hit from cloudfront
Via: 1.1 xxxxx.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: xxxxx
X-Amz-Cf-Id: C_xxxxxxxxxxxxxxxx==
Age: 660

#EXTM3U
#EXT-X-VERSION:5
#EXT-X-TARGETDURATION:7
#EXT-X-MEDIA-SEQUENCE:1
#EXT-X-PLAYLIST-TYPE:VOD
#EXT-X-KEY:METHOD=SAMPLE-AES,URI="skd://xxxxxxx",KEYFORMAT="com.apple.streamingkeydelivery",KEYFORMATVERSIONS="1"
#EXTINF:6,
movie_hls_00001.ts
#EXTINF:6,
movie_hls_00002.ts
#EXTINF:6,
movie_hls_00003.ts
#EXTINF:6,
movie_hls_00004.ts
#EXTINF:6,
movie_hls_00005.ts
#EXTINF:6,
movie_hls_00006.ts
#EXTINF:6,
movie_hls_00007.ts
#EXTINF:3,
movie_hls_00008.ts
#EXT-X-ENDLIST

License URL:

https://license.theoplayer.com/

I already downloaded the encrypted video but can't seem to find the pssh in order to get the key. The "X-Amz-Cf-Id" looks like a pssh but when I used it in WKS-KEYS, it returns an error:

binascii.Error: Invalid base64-encoded string: number of data characters (49) cannot be 1 more than a multiple of 4

Would be really grateful if someone could point me in the right direction.

[aqzs]

binascii.Error: Invalid base64-encoded string: number of data characters (49) cannot be 1 more than a multiple of 4

Would be really grateful if someone could point me in the right direction.

Could you share more informations ? The pssh ? Or a link ?

[Tsubasa]

Could you share more informations ? The pssh ? Or a link ?

The closest thing I found that looks like a PSSH is the "X-Amz-Cf-Id" part in the response. And it changes everytime I request it.

X-Amz-Cf-Id: PsueBgTU8gPj2QQGdZxkdiUqetUA1gd9uKvbzgBznu3I4FhpjbRaWg==

Unfortunately, I can't post the URL here as it's paid content. Can I send it to you through DM?

[white_snake]

There are a lot of useful info in this thread: https://forum.videohelp.com/threads/413718-My-journey-with-AES-128-encrypted-HLS and this one as well: https://forum.videohelp.com/threads/414047-Help-with-downloading-encrypted-HLS-video-f...ffline-viewing

Basically you need to feed the .m3u8 to N_m3u8DL-RE, and after getting the key provide it with the flag --custom-hls-key.

[Tsubasa]

There are a lot of useful info in this thread: https://forum.videohelp.com/threads/413718-My-journey-with-AES-128-encrypted-HLS and this one as well: https://forum.videohelp.com/threads/414047-Help-with-downloading-encrypted-HLS-video-f...ffline-viewing

Basically you need to feed the .m3u8 to N_m3u8DL-RE, and after getting the key provide it with the flag --custom-hls-key.

Thank you for your reply.
My video is encrypted with SAMPLE-AES which I believe is a bit different from AES-128. Nevetheless, I tried converting the X-Amz-Cf-Id I got to hex and putting it as the key in N_m3u8DL-RE, the resulted video is still encrypted.
Judging from this, X-Amz-Cf-Id is probably not the key. And since there's no mpd file, I couldn't find the PSSH either.

There're also several other m3u8 requests caught by fiddler. I don't know if they'll help but I can send them to you through DM.
If there's someone with experience in decrypting video from an app in emulator, it would be incredibly helpful to me....

[lomero]

SAMPLE-AES and AES-128 is the same

I tried converting the X-Amz-Cf-Id I got to hex and putting it as the key in N_m3u8DL-RE, the resulted video is still encrypted. Judging from this, X-Amz-Cf-Id is probably not the key
sure this isn't the key

And since there's no mpd file, I couldn't find the PSSH either
yes, with AES no mpd (and so no pssh...) but only m3u8

also your lic url is useless

your key is here

#EXT-X-KEY:METHOD=SAMPLE-AES,URI="skd://xxxxxxx",KEYFORMAT="com.apple.streamingkeydelivery",KEYFORMATVERSIONS="1"

... but how to rip and decrypt it's another problem

have you tried Stream Recorder extension? maybe it work for you. slowly but work. or try Tubedigger in Rec Mode

[Tsubasa]

SAMPLE-AES and AES-128 is the same

I tried converting the X-Amz-Cf-Id I got to hex and putting it as the key in N_m3u8DL-RE, the resulted video is still encrypted. Judging from this, X-Amz-Cf-Id is probably not the key
sure this isn't the key

And since there's no mpd file, I couldn't find the PSSH either
yes, with AES no mpd (and so no pssh...) but only m3u8

also your lic url is useless

your key is here

#EXT-X-KEY:METHOD=SAMPLE-AES,URI="skd://xxxxxxx",KEYFORMAT="com.apple.streamingkeydelivery",KEYFORMATVERSIONS="1"

... but how to rip and decrypt it's another problem

have you tried Stream Recorder extension? maybe it work for you. slowly but work. or try Tubedigger in Rec Mode

Thank you for the clarification!
I'll try those extensions and see if they can work on the app.

[lomero]

Stream Recorder is an extension (and this is free from chrome store)

Tubedigger is windows software (not free, but you can test it in trial mode, only 50% of full video is allowed)

[crippled]

kid in skd url?

[Tsubasa]

kid in skd url?

FYI, the skd looks like this:

skd://56723cf3-b237-49aa-9a28-db0389923388

Does this look like a kid?
I've heard of kid before but forgot what's its usage. Is it the direct key or do I need to do some steps with the kid to get the key?

[white_snake]

FYI, the skd looks like this:

skd://56723cf3-b237-49aa-9a28-db0389923388

Does this look like a kid?
I've heard of kid before but forgot what's its usage. Is it the direct key or do I need to do some steps with the kid to get the key?

You might want to try to use something like this in your N_m3u8DL-RE command:

--custom-hls-key 56723cf3b23749aa9a28db0389923388

but that's hardly going to work, there's probably some js debugging here to do.

[crippled]

kid in skd url?

FYI, the skd looks like this:

skd://56723cf3-b237-49aa-9a28-db0389923388

Does this look like a kid?
I've heard of kid before but forgot what's its usage. Is it the direct key or do I need to do some steps with the kid to get the key?

yes, could also be the key but I doubt it.
Got the captured data for https://license.theoplayer.com/ ?

[notaghost]

This is Apple’s DRM FairPlay, which hasn’t been publicly cracked yet.

[Tsubasa]

yes, could also be the key but I doubt it.
Got the captured data for https://license.theoplayer.com/ ?

I sent it to you through PM. Thanks for the help.

[Tsubasa]

You might want to try to use something like this in your N_m3u8DL-RE command:

--custom-hls-key 56723cf3b23749aa9a28db0389923388

but that's hardly going to work, there's probably some js debugging here to do.

Just try it and yeah it didn't work.

[Tsubasa]

This is Apple’s DRM FairPlay, which hasn’t been publicly cracked yet.

Sad to hear this, I guess it can't be helped then...

[lomero]

ye, but sometime no need key to decrypt
i know one site (aes encrypted) that download work fine just with right link and token too, all linked. also i know the hex key for that site, but no need this key for download.
but it's also true that each site is a special case, so i can't generalize

however with my post#8 you can choose 2 different ways to rip your video (on Rec Mode) maybe it slowly but almost certainly work. try it

[Tsubasa]

ye, but sometime no need key to decrypt
i know one site (aes encrypted) that download work fine just with right link and token too, all linked. also i know the hex key for that site, but no need this key for download.
but it's also true that each site is a special case, so i can't generalize

however with my post#8 you can choose 2 different ways to rip your video (on Rec Mode) maybe it slowly but almost certainly work. try it

Thanks for helping me but after checking those two softwares you mentioned, they seem to only work in browser. In my case, the video is playing in an android app so they probably won't work....

[notaghost]

If the video can be played on Android, please provide the app link, as the sample AES is for Apple's DRM for iOS.

[Tsubasa]

If the video can be played on Android, please provide the app link, as the sample AES is for Apple's DRM for iOS.

I sent you a PM with the detailed info of the app. Could you please check it?
Thank you for the help.

[Tsubasa]

With the help from notaghost, I managed to decrypt the video/audio. Apparently, it's not SAMPLE-AES but widevine.
Using an android emulator plus fiddler as a proxy to capture data probably didn't work as it's not showing widevine at all.
Thanks for all of the help again.

[lawzi]

How to solve this?

[lawzi]

If the video can be played on Android, please provide the app link, as the sample AES is for Apple's DRM for iOS.

Hi, I am in a similar situation. It is an android app and getting sample-aes. How did you solve this problem? Can you help me? Please.

[notaghost]

Sample AES might have Widevine data in it share app name please