[sanduhrgucker]

Hi,
My Daughter bought a celeb-interview on Vlive.tv
After the payment she feld sad because she read the videos can only be shown at the mobile app.
So she asked me to fix that. I failed at the last step... please help!

here is what i did:
1.) i downloaded the film in the Vlive app
- to to this, i had to rename some supersu files because the app recognised corectly my mobile is rooted.
2.) i transfered the file (a zip-file) to my pc then i unpacked all the stuff
Inside are:
- a Key file
- a m3u8 file
- thousands of .ts files

The content inside the keyfile seems to be binary.
The m3u8-file begins with:

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-MEDIA-SEQUENCE:0
#EXT-X-TARGETDURATION:7
#EXT-X-KEY:METHOD=AES-128,URI="a32c23U4Tlo5Utw5NUg_srUcSQ_rmcvideo_1080P_1920_512 0_192.key"
#EXTINF:5.805811,
a32c23U4Tlo5Utw5NUg_srUcSQ_rmcvideo_1080P_1920_512 0_192-000000.ts
#EXTINF:5.372033,
a32c23U4Tlo5Utw5NUg_srUcSQ_rmcvideo_1080P_1920_512 0_192-000001.ts
#EXTINF:5.205200,
a32c23U4Tlo5Utw5NUg_srUcSQ_rmcvideo_1080P_1920_512 0_192-000002.ts
...

I think it should be possible to decrypt because i have the right key. But how? ;-)

Any Hint is welcome!

Regards
Rene'

[KSV]

If you can provide the key file and few fragments I can give it a shot.

[WHOOKIDSON]

Upload the zipfile so we can check it out :p

[sanduhrgucker]

Here is a smaler zip-file containing keyfile, m3u8-file and some ts-files:

https://www.dropbox.com/s/jnzg3qr63144xz5/9426_teaser.zip?dl=0

[WHOOKIDSON]

:( This is what I got:

ffmpeg version N-80953-gd4c8e93 Copyright (c) 2000-2016 the FFmpeg developers
built with gcc 5.4.0 (GCC)
configuration: --enable-gpl --enable-version3 --disable-w32threads --enable-dxva2 --enable-libmfx --enable-nvenc --enable-avisynth --enable-bzlib --enable-fontconfig --enable-frei0r --enable-gnutls --enable-iconv --enable-libass --enable-libbluray --enable-libbs2b --enable-libcaca --enable-libfreetype --enable-libgme --enable-libgsm --enable-libilbc --enable-libmodplug --enable-libmp3lame --enable-libopencore-amrnb --enable-libopencore-amrwb --enable-libopenjpeg --enable-libopus --enable-librtmp --enable-libschroedinger --enable-libsnappy --enable-libsoxr --enable-libspeex --enable-libtheora --enable-libtwolame --enable-libvidstab --enable-libvo-amrwbenc --enable-libvorbis --enable-libvpx --enable-libwavpack --enable-libwebp --enable-libx264 --enable-libx265 --enable-libxavs --enable-libxvid --enable-libzimg --enable-lzma --enable-decklink --enable-zlib
libavutil 55. 28.100 / 55. 28.100
libavcodec 57. 50.100 / 57. 50.100
libavformat 57. 41.100 / 57. 41.100
libavdevice 57. 0.102 / 57. 0.102
libavfilter 6. 47.100 / 6. 47.100
libswscale 4. 1.100 / 4. 1.100
libswresample 2. 1.100 / 2. 1.100
libpostproc 54. 0.100 / 54. 0.100
Format aac detected only with low score of 1, misdetection possible!
[aac @ 0440adc0] More than one AAC RDB per ADTS frame is not implemented. Update your FFmpeg version to the newest one from Git. If the problem still occurs, it means that your file has a feature which has not been implemented.
[aac @ 0440adc0] Reserved bit set.
[aac @ 0440adc0] Number of bands (45) exceeds limit (28).
[aac @ 0440adc0] channel element 3.13 is not allocated
[aac @ 0440adc0] TNS filter order 22 is greater than maximum 20.
[aac @ 0440adc0] Reserved bit set.
[aac @ 0440adc0] Number of scalefactor bands in group (15) exceeds limit (12).
[aac @ 0440adc0] Sample rate index in program config element does not match the sample rate index configured by the container.
[aac @ 0440adc0] Remapped id too large
[aac @ 0440adc0] is not implemented. Update your FFmpeg version to the newest one from Git. If the problem still occurs, it means that your file has a feature which has not been implemented.
[aac @ 0440adc0] If you want to help, upload a sample of this file to ftp://upload.ffmpeg.org/incoming/ and contact the ffmpeg-devel mailing list. (ffmpeg-devel@ffmpeg.org)
[aac @ 0440adc0] channel element 2.14 is not allocated
[aac @ 0440adc0] channel element 1.4 is not allocated
[aac @ 0440adc0] Reserved bit set.
[aac @ 0440adc0] invalid band type
[aac @ 0440adc0] channel element 2.10 is not allocated
[aac @ 0440adc0] channel element 3.15 is not allocated
[aac @ 0440adc0] channel element 3.8 is not allocated
[aac @ 0440adc0] Number of bands (22) exceeds limit (17).
[aac @ 0440adc0] channel element 2.14 is not allocated
[aac @ 0440adc0] Sample rate index in program config element does not match the sample rate index configured by the container.
[aac @ 0440adc0] Inconsistent channel configuration.
[aac @ 0440adc0] get_buffer() failed
[aac @ 0440adc0] Sample rate index in program config element does not match the sample rate index configured by the container.
[aac @ 0440adc0] Remapped id too large
[aac @ 0440adc0] is not implemented. Update your FFmpeg version to the newest one from Git. If the problem still occurs, it means that your file has a feature which has not been implemented.
[aac @ 0440adc0] If you want to help, upload a sample of this file to ftp://upload.ffmpeg.org/incoming/ and contact the ffmpeg-devel mailing list. (ffmpeg-devel@ffmpeg.org)
[aac @ 0440adc0] channel element 2.6 is not allocated
Last message repeated 1 times

What program did you use to download the video?

[sanduhrgucker]

The Video was downloaded with the native Vlive-app on android (https://play.google.com/store/apps/details?id=com.naver.vapp)

Maybe i bigger sample is nessesary?
I bundled a few more files:
https://www.dropbox.com/s/shtnihdi2mfolfy/9426_bigger_teaser.zip?dl=0

could you please try again?

Regards
rene´

[WHOOKIDSON]

I get the exact same message as before. I will try to look more into it.

[KSV]

I have checked your provided fragments and key file today. A 32 byte keyfile is supposed to be combination of 16 bytes aes key and 16 bytes for iv but that didn't worked out for decryption. I also tried to inject fragments and key into their official android app but the player was unable to decode the fragments with given key. I looked further into the app and found out that two separate players are being used for playback of free and paid streams. unfortunately I don't have any paid video to test the paid player although it seems quite possible to fish out the decryption key.

[sanduhrgucker]

I have checked ..... I also tried .... I looked further into the app ... I don't have any paid video to test the paid player although it seems quite possible to fish out the decryption key.

Thank you so much for your try!
I still hope anyone will find the answer...

[JonDough]

The video could be entangled with some whiteCryption stuff, whatever that is.

http://www.businesswire.com/news/home/20160511005357/en/Naver-Licenses-whiteCryption-Secure-Global-Live-Streaming

[kimuchan]

I have the same problem with vlive, I'm already trying to decrypt a few hours ... but I had no results