Always the same pssh

[Santuzzu]

Hello

I'm trying to decrypt the content from the streaming platform but I can find only one pssh. The platform uses HLS, links expire quickly. I find pssh in each link with mp4 fragments, but for every video (24/7 streaming) pssh is the same one. Anyone can help with this? I don't even know which link to put here since they won't be valid after some time.

Here is what I find inside every file:

#EXT-X-KEY:METHOD=SAMPLE-AES,URI="skd://eyJDb250ZW50SWQiOiIxM2I2YTFjNC1iOTE2LTQwZGUtYmNkOC05YjY4Yjg5MDQ3MGUiLCJLZXlJZCI6IjY4YTk4YTkyLWY0YWYtYzA1NS1hYTUzLTBlNDI1MjU1MDg3OCIsIklWIjoiQUFBQUFBQUFBQUFBQUFBQUFBQUFBQT09In0=",KEYFORMAT="com.apple.streamingkeydelivery",KEYFORMATVERSIONS="1"
#EXT-X-KEY:METHOD=SAMPLE-AES,KEYFORMAT="com.microsoft.playready",KEYFORMATVERSIONS="1",URI="data:text/plain;charset=UTF-16;base64,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"
#EXT-X-KEY:METHOD=SAMPLE-AES,KEYFORMAT="urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed",KEYFORMATVERSIONS="1",URI="data:text/plain;base64,AAAAZXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAEUSEGipipL0r8BVqlMOQlJVCHgaBUNvbmF4IiQxM2I2YTFjNC1iOTE2LTQwZGUtYmNkOC05YjY4Yjg5MDQ3MGVI88aJmwY="

[CrymanChen]

So what's your question?

For livestreams, it's pretty common that one set of key is usable for several months, so you will see the same pssh each time you inspect the HLS manifest.

Just extract

AAAAZXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAEUSEGipipL0r8BVqlMOQlJVCHgaBUNvbmF4IiQxM2I2YTFjNC1iOTE2LTQwZGUtYmNkOC05YjY4Yjg5MDQ3MGVI88aJmwY=

out of what you pasted, and then find the License URL, use the Widevine way to get the decryption key.

[notaghost]

For live stream use pssh from the initial segment because of the keys rotation

[Santuzzu]

OK, I assumed it could be one same pssh. I used this license URL and pssh you posted and got this key:

https://contego-license-gwv.ug.cdn.united.cloud/license

--key 68a98a92f4afc055aa530e4252550878:f2f51723c662957729e32e6a2e322c8b

However, I'm unable to decrypt the file downloaded with N_m3u8DL. Maybe I'm not downloading the file properly? Or I should use a different license like this one?

https://entitlement-web.ug-be.cdn.united.cloud/v1/drm/preAuthToken

I can't obtain a key with this license URL.

[ddll]

OK, I assumed it could be one same pssh. I used this license URL and pssh you posted and got this key:

https://contego-license-gwv.ug.cdn.united.cloud/license

--key 68a98a92f4afc055aa530e4252550878:f2f51723c662957729e32e6a2e322c8b

However, I'm unable to decrypt the file downloaded with N_m3u8DL. Maybe I'm not downloading the file properly? Or I should use a different license like this one?

https://entitlement-web.ug-be.cdn.united.cloud/v1/drm/preAuthToken

I can't obtain a key with this license URL.

{"ContentId":"13b6a1c4-b916-40de-bcd8-9b68b890470e","KeyId":"68a98a92-f4af-c055-aa53-0e4252550878","IV":"AAAAAAAAAAAAAAAAAAAAAA=="}

This is the right key

mp4decrypt --key <id>:

See ID

[Santuzzu]

I can't decrypt using that key. I download the file with N_m3u8DL and paste there one of the links that look like this:

https://sbb-bg-ku-h1-3.ug-be.cdn.united.cloud/stream/playlist/hls/?session=46e221de-19ed-47c9-9976-45659288f0d8&stream=hp7000&player=fm3u8cbcs&track=70000256

I attached in this post one such file. I'm not sure whether the problem is an improper download, decryption, or a wrong key.

[2nHxWW6GkN1l916N3ayz8HQoi]

You could try N_m3u8DL-RE with shaka packager

[Santuzzu]

I couldn't manage to decrypt. Video is encrypted and audio is not encrypted. I see a bunch of such links:

https://sbb-bg-ku-s2-3.ug-be.cdn.united.cloud/stream/playlist/hls/?session=cfc2fcfb-3e04-4124-92fc-9f2129f7ea92&stream=hp1400&player=fm3u8cbcs&track=14000256

https://sbb-bg-ku-s2-3.ug-be.cdn.united.cloud/stream/fragment/mp4/live/?session=cfc2fcfb-3e04-4124-92fc-9f2129f7ea92&type=audio&track=257&br=96000&t=4654584166586666&seq=96970504&tracktype=4&mt=10000000&fd=4800&bd=30000&t0=1727762440072&seq0=96970504&pts0=4654584166586666

https://sbb-bg-ku-s2-3.ug-be.cdn.united.cloud/stream?i=M-6gfDTmvnA7r2zclNByng&a=KZ08ptj4dcS9cBXOT4QKI-8pcDoohp3dbF3TnpxrJ1cPO9fWbjp3Gj12Pj5aJCie5rI9xD6IWCNduzi5JWxuGiIJpMO4jMfe2VVRFf9WrZ5Ymyp3I_INfIbG-WXwwF1vvL4UfZ7sGn9IWFs9ef8e8MLoHuV-ZwSbeuh5MTk7tk7JVZGolDrgadfo40aRtQWSPZpqCbVrf6BqOzheRy8nV_cik8rne9lvQ-EextW_rLavKQZjFOswQaqp6wQY3yykY_H2faoXZi6MZ6ykzTYP2lzT1RWthBkMHE0FAxUhNgHjstBRcxjo5BfW2zgBW4u6fnYHwOeWaFYJR-OWUa5Xgiqwm8Iku0Cfc01xd_n7FcxiytJmatMWFS3D0PY_3ja96B_etD56f_IVaA5XPqVOZceTUOTKLGGRYyjMXI-KaZ055LmNnWFxpfIpjAsdpPRaMzFdOm-fHjBx7hUItfFXpUZ1xw7HKReRjvM3_L2SKgBXCyZEzYEttw76jHWm7zPQBkd-0zfwHA813kAsZEi_PpniWNwLf0vWeRhsEK1thtwb22CrM2tJYfoxMG8vr7WbZiVpvc6wH7D51pqgiLPHQg&sp=eon&u=22zhfkfs02v2kin&session=cfc2fcfb-3e04-4124-92fc-9f2129f7ea92&player=fm3u8cbcs&track=3500257

The last one is for audio. When I download an encrypted file with N_m3u8DL I get the file uploaded previously, but when I do it with yt-dlp I get such a file as attached in this post. However, I can't decrypt the file with a key I got:

--key 1a6c8e11f1593644a4d8842fcc57176c:81c48380cd957ed3594b2897e8c1ce3d

I can't say that I tried all possible options but I'm pretty much out of ideas. Hope someone can help.