Widevine key help

[jhynpls]

Have been doing a ton of reading around here but keep running into snags. I finally got cdm dumped from my Pixel XL with Android 9, but still having trouble getting keys.
I tried following this thread https://forum.videohelp.com/threads/404994-Decryption-and-the-Temple-of-Doom to test my cdm against the bitmovin page but I get an error below. I also tried the other methods of getting the PSSH since I assume something is wrong with that, but I keep getting similar errors using WKS-KEYS (I also was using widevine_keys but had same problems)

PSSH: AAAAW3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADsIARIQ62dqu8s0Xpa7z2FmMPGj2hoNd2lkZXZpbmVfdGVzdCIQZmtqM2xqYVNkZmFsa3IzaioCSEQyAA==
License URL: https://widevine-proxy.appspot.com/proxy
C:\Users\username\Downloads\WKS-KEYS\pywidevine\L3\cdm\cdm.py:260: RuntimeWarning: Unexpected end-group tag: Not all data was converted
  license.ParseFromString(base64.b64decode(license_b64))
Traceback (most recent call last):
  File "C:\Users\mb902\Downloads\WKS-KEYS\l3.py", line 25, in <module>
    correct, keys = WV_Function(pssh, lic_url)
  File "C:\Users\mb902\Downloads\WKS-KEYS\l3.py", line 21, in WV_Function
    wvdecrypt.update_license(license_b64)
  File "C:\Users\mb902\Downloads\WKS-KEYS\pywidevine\L3\decrypt\wvdecryptcustom.py", line 58, in update_license
    self.cdm.provide_license(self.session, license_b64)
  File "C:\Users\mb902\Downloads\WKS-KEYS\pywidevine\L3\cdm\cdm.py", line 275, in provide_license
    session.session_key = oaep_cipher.decrypt(license.SessionKey)
  File "C:\Users\mb902\AppData\Local\Programs\Python\Python39\lib\site-packages\Cryptodome\Cipher\PKCS1_OAEP.py", line 167, in decrypt
    raise ValueError("Ciphertext with incorrect length.")
ValueError: Ciphertext with incorrect length.

The actual video that I want to get keys from is https://sig.tv/player/2628 (might be region locked to USA/SEA countries + requires a login but is completely free)
The mpd has PSSH in it https://dok6hglcghb5y.cloudfront.net/contents/IRENEs%20Work%20Holiday/video2/7MIRENEsW...idayID1SIG.mpd

AAAAYXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAEEIARIQi5Zn7W9tpmBvYUvYk+avFRoMaW5rYWVudHdvcmtzIhk3TUlSRU5Fc1dvcmtIb2xpZGF5SUQxU0lHKgJIRA==

License URL appears to be https://license.pallycon.com/ri/licenseManager.do

my headers.py

headers = {
    'authority': 'license.pallycon.com',
    'accept': '*/*',
    'accept-language': 'en-US,en;q=0.9',
    'origin': 'https://sig.tv',
    'pallycon-customdata-v2': 'eyJkcm1fdHlwZSI6IldpZGV2aW5lIiwic2l0ZV9pZCI6IlI1VDkiLCJ1c2VyX2lkIjoidGVzdCIsImNpZCI6IjdNSVJFTkVzV29ya0hvbGlkYXlJRDFTSUciLCJwb2xpY3kiOiJMQ1I5QmhLMUlUUFV1Y3Z3WUN4aWhuQmNNZnNiODhLbkVPcDBtVGtITDVZUUNkcHAzTmM3TmNseGlEQ0VOS0tPWlVYRWZ6dHNLU3Q4SGUrdmdwamFXQWVPS2VSM1JzWTBKUlJKU0RNZXlzU09IRE9BaW1YQ3liVERId3loZng0VnZBR2xlUG5Xcm83c1kwOEdOaHFXWTFqVDdDeWRQUGhxSVYvWkFZdXJ6SWZyNmFhRUdqTEl5eUJRN2dPKzBNRnhJa2ZoM04zTGl2ZVAvRVdJTzVaYS9hSHZoLzdPMVV5YjREbE5LY3FEZnZZSUorRVNnd2N6Y3FHNTUySCt3dTFaVU5zLzlOZ0FKK0FaaHZURWFZbEptSEVRWlZQaFNYOHBzcjJIMzZVTFVmVitzdkdQdDAvYzV2WlgwWGNIUFZJd0NEektpVFY1aVErbXZIR0sxRkdEZVVPQVpJUitoVzVORXNtejZVbXNwRFRxcUdjMmRNR3I3eEpIdTVZWVdENmZIZWdxUHEvSURuSU1CTStiWFN1ZFBVWGNVS2l3V2N1VTRPSDlwbXRveXVEbUZ0RnQrTWRmNkpwM0RyUTdDdSt3TFF2SG5OZzhCaFdSY2dWb2VXNVZ4M2o3OHNwNURGYis0dzU1OVROdUUxSGdrWDBkajRRbklLQXk2YzBQOElxZEtqejN1WWtxM3BmSy9MK2g1UnBBYWdtSlpxZ2VSbm1LSHV1MU9uMXZjeDBVWHJPMXNhbWo5UWN2YUM4Y0xTYzNEOVcyNDlUakkzYWd6WFlWTzJ4Ukl5N0xhc0lSM2JlbVNGY1pqV2h6K0hiZzU0YTF2YmdzMG9sNG5HWFM2NllKbk8zV0pZUG1OZ20xOUo4Q2ZPN1Qrdz09IiwicmVzcG9uc2VfZm9ybWF0Ijoib3JpZ2luYWwiLCJrZXlfcm90YXRpb24iOm51bGwsInRpbWVzdGFtcCI6IjIwMjItMDctMjhUMDk6MzA6MDhaIiwiaGFzaCI6IkV2NFExcUhIWXlkWlBXTlhwdk02WmdCOWtiZHU3SW9CYkxydFN1Qm5INlk9In0=',
    'referer': 'https://sig.tv/',
    'sec-ch-ua': '".Not/A)Brand";v="99", "Google Chrome";v="103", "Chromium";v="103"',
    'sec-ch-ua-mobile': '?0',
    'sec-ch-ua-platform': '"Windows"',
    'sec-fetch-dest': 'empty',
    'sec-fetch-mode': 'cors',
    'sec-fetch-site': 'cross-site',
    'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36',
    'content-type': 'application/x-www-form-urlencoded',
}

With this I just get error `unable to parse license - check protobufs`
Something wrong with my cdm though I just dumped it?
There will be future videos uploaded that I want to get so if I'm able to get keys myself it would be great.

[cedric8528]

you have to delete some lines in your headers

import requests

headers = {
    'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64; rv:103.0) Gecko/20100101 Firefox/103.0',
    'Accept-Language': 'fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3',
    # 'Accept-Encoding': 'gzip, deflate, br',
    'Referer': 'https://sig.tv/',
    'pallycon-customdata-v2': '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',
    'Origin': 'https://sig.tv',
    'Connection': 'keep-alive',
}

response = requests.post('https://license.pallycon.com/ri/licenseManager.do', headers=headers)

your key

8b9667ed6f6da6606f614bd893e6af15:152c2df3222857d94a2d53a9f8f15dc9

[Attachment 66151 - Click to enlarge]

[jhynpls]

I copied your exact header code and I still have the same error :/

Just to double check I did it right....I have the files ..\dumper-main\key_dumps\Pixel XL\private_keys\4445\2748981173\client_id.bin and private_key.pem
I replaced the files in ..\WKS-KEYS\pywidevine\L3\cdm\devices\android_generic\dev ice_client_id_blob and device_private_key respectively (I confirmed the device_private_key has an RSA key in it).

Not sure if I'm missing something else. I do have an old Nexus 5 I could potentially flash to Android 7 and try and get that cdm instead...

[cedric8528]

take your own headers not mine..

[[ss]vegeta]

Which VPN works for this site? Tried Windscribe USA, NordVPN Singapore, Windscribe Thailand, but it always says can't play in your country.

[cedric8528]

No vpn for me in France...

[jhynpls]

Sorry I assumed any valid headers would work..since we have some completely different ones I tried yours. I did try removing a few lines of mine first and it didn't work, but this time I got it!

These headers are working and I got the same key you did. Thank you!

import requests

headers = {
     'accept': '*/*',
    'accept-language': 'en-US,en;q=0.9',
    'origin': 'https://sig.tv',
    'pallycon-customdata-v2': 'eyJkcm1fdHlwZSI6IldpZGV2aW5lIiwic2l0ZV9pZCI6IlI1VDkiLCJ1c2VyX2lkIjoidGVzdCIsImNpZCI6IjdNSVJFTkVzV29ya0hvbGlkYXlJRDFTSUciLCJwb2xpY3kiOiJMQ1I5QmhLMUlUUFV1Y3Z3WUN4aWhuQmNNZnNiODhLbkVPcDBtVGtITDVZUUNkcHAzTmM3TmNseGlEQ0VOS0tPWlVYRWZ6dHNLU3Q4SGUrdmdwamFXQWVPS2VSM1JzWTBKUlJKU0RNZXlzU09IRE9BaW1YQ3liVERId3loZng0VnZBR2xlUG5Xcm83c1kwOEdOaHFXWTFqVDdDeWRQUGhxSVYvWkFZdXJ6SWZyNmFhRUdqTEl5eUJRN2dPKzBNRnhJa2ZoM04zTGl2ZVAvRVdJTzVaYS9hSHZoLzdPMVV5YjREbE5LY3FEZnZZSUorRVNnd2N6Y3FHNTUySCt3dTFaVU5zLzlOZ0FKK0FaaHZURWFZbEptSEVRWlZQaFNYOHBzcjJIMzZVTFVmVitzdkdQdDAvYzV2WlgwWGNIUFZJd0NEektpVFY1aVErbXZIR0sxRkdEZVVPQVpJUitoVzVORXNtejZVbXNwRFRxcUdjMmRNR3I3eEpIdTVZWVdENmZIZWdxUHEvSURuSU1CTStiWFN1ZFBVWGNVS2l3V2N1VTRPSDlwbXRveXVEbUZ0RnQrTWRmNkpwM0RyUTdDdSt3TFF2SG5OZzhCaFdSY2dWb2VXNVZ4M2o3OHNwNURGYis0dzU1OVROdUUxSGdrWDBkajRRbklLQXk2YzBQOElxZEtqejN1WWtxM3BmSy9MK2g1UnBBYWdtSlpxZ2VSbm1LSHV1MU9uMXZjeDBVWHJPMXNhbWo5UWN2YUM4Y0xTYzNEOVcyNDlUakkzYWd6WFlWTzJ4Ukl5N0xhc0lSM2JlbVNGY1pqV2h6K0hiZzU0YTF2YmdzMG9sNG5HWFM2NllKbk8zV0pZUG1OZ20xOUo4Q2ZPN1Qrdz09IiwicmVzcG9uc2VfZm9ybWF0Ijoib3JpZ2luYWwiLCJrZXlfcm90YXRpb24iOm51bGwsInRpbWVzdGFtcCI6IjIwMjItMDctMjhUMTk6Mzg6MjdaIiwiaGFzaCI6IjRldWY5M0I2SjU3UDFMSnZJdzhyRW0wQ080eUYzVmp2K2E1dFVhSXlESDQ9In0=',
    'referer': 'https://sig.tv/',
    'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36',
}

response = requests.post('https://license.pallycon.com/ri/licenseManager.do', headers=headers)

[jhynpls]

Which VPN works for this site? Tried Windscribe USA, NordVPN Singapore, Windscribe Thailand, but it always says can't play in your country.

I've noticed that this site is pretty bad, I was having similar issues even actually being in the USA. I believe disabling Ublock Origin made the country errors go away for me.

[[ss]vegeta]

I believe disabling Ublock Origin made the country errors go away for me.

You believe in the truth.


Edit, works with only this header pallycon-customdata-v2 no need for others. Tried random video.

62d5aba4f9e3bd807eee97e6b3051902:394e122f520d4b837cc674ec23840f40

And that's a tip for all of ya out there, whenever there's a site that in the license url have some "unique" and non generic header, 99% of the time it's the only 1 required.

[jhynpls]

Edit, works with only this header pallycon-customdata-v2 no need for others. Tried random video.

62d5aba4f9e3bd807eee97e6b3051902:394e122f520d4b837cc674ec23840f40

And that's a tip for all of ya out there, whenever there's a site that in the license url have some "unique" and non generic header, 99% of the time it's the only 1 required.

Good to know, thank you! I've read *many* of your posts in these threads so I appreciate you being around lol.

I was also able to decrypt my mp4/m4a files just fine. Thank you both!

[cedric8528]

you re welcome

thanks [ss]vegeta for the tip

[[ss]vegeta]

I've read *many* of your posts in these threads so I appreciate you being around lol.

Glad to be of service. You have no idea how much I hate DRM and geo blocking so I had to transform that hate into passion and love to help others beat them too.