I downloaded NF videos in HD, I can play off line,need a little help W/.key file

[Manual]

If anyone figured out how to download 720p by now he'll just keep it to himself.

[enrud]

Originally Posted by BlueCop

Does anyone know more about the video and audio profile values?

Values with Fairplay DASH Enabled

Values with Fairplay DASH Disabled - HLS streaming

contentProfiles with nfdrm quality tweak(also disables fairplay dash)

so it inserts 17 and 18. This doesn't seem to work though.

Does anyone have a list of content profiles? I was going to play with modifying these but wasn't sure what to use.

Sorry for being away for a while. Life got busy.

The content profiles specify what a player is capable of playing. Adding profiles 17, 18 added the higher bitrate profiles; however, Netflix is no longer providing those profiles regardless of what you say you can play.


Content Profiles (Video)
----------------------------
"playready-mpeg4p2-piff" = 1
"playready-h264bpl30-piff" = 2
"playready-h264mpl30-piff" = 3
"playready-h264mpl31-piff" = 4
"playready-h264mpl40-piff" = 5
"playready-h264bpl30-dash" = 6
"playready-h264mpl30-dash" = 7
"playready-h264mpl31-dash" = 8
"playready-h264mpl40-dash" = 9
"playready-h264shpl30-dash" = 10
"playready-h264shpl31-dash" = 11
"playready-h264shpl40-dash" = 12
"none-h264mpl30-dash" = 13
"none-h264mpl31-dash" = 14
"none-h264mpl40-dash" = 15
"playready-h264mpl30-m2ts" = 16
"playready-h264mpl31-m2ts" = 17
"playready-h264mpl40-m2ts" = 18
"playready-h264mpl13-m2ts" = 19

Audio profiles
------------------------------
"ddplus-5.1-piff" = 24577
"heaac-2-piff" = 24578
"playready-oggvorbis-2-piff" = 24579
"playready-oggvorbis-2-dash" = 24580
"ddplus-5.1-dash" = 24581
"heaac-2-dash" = 24582
"playready-heaac-2-dash" = 24583
"heaac-2-elem" = 24584
"dd-5.1-elem" = 24585
"heaac-2-m2ts" = 24586
"dd-5.1-m2ts" = 24587
"dd-5.1-dash" = 24588

Subtitle profiles
---------------------
"simplesdh" = 49153
"webvtt-lssdh-ios" = 49154


Anyone making progress on Fairplay or PlayReady on windows? What's the state of key retrieval from an IBX?

[enrud]

Originally Posted by BlueCop

For the the old playready HLS streams I think the decryption key is actually stored in the video itself in an encrypted envelope. I don't know the details of how that works though.

You are correct. The reason for this is because of incompatibility between playready and HLS. HLS requires an AES-CBC-128 key whereas playready uses an AES-CTR-128 key. Netflix worked around this by encoding the HLS key in the encrypted envelope and then using playready to decode that key. That was the whole weakness in the HLS mechanism. At some point the Netflix app had to decrypt that envelope, grab the key and pass it off to the iOS player. And it was that point where key extraction was occurring.

Now with Fairplay, the key is not passed in the clear and extracting the key would require breaking Fairplay.

I suspect Netflix will try and drop HLS streaming as soon as possible. I would if I were them. Doing so would require Apple to either support IOS 6 on all devices or backporting Fairplay/Dash support to IOS5.

[Manual]

It's funny because in the end you can still use a screen capture software and get a decent quality.

[enrud]

Originally Posted by Manual

It's funny because in the end you can still use a screen capture software and get a decent quality.

Even funnier, I could care less about downloading. What I enjoy is solving puzzles which in this case is breaking DRM.

FWIW, I think I've figured out how to extract keys from the PlayReady IBX.

[piratko]

Originally Posted by enrud

FWIW, I think I've figured out how to extract keys from the PlayReady IBX.

I'm very much interested. Would you care to share please?

[ItsAngel]

Originally Posted by enrud

Even funnier, I could care less about downloading. What I enjoy is solving puzzles which in this case is breaking DRM.

FWIW, I think I've figured out how to extract keys from the PlayReady IBX.

So glad you're back!! Please PM me about the playready key extraction when you get the chance. Also don't post it publicly because I'm 90% sure that some people from Netflix have read some of these posts.

[enrud]

Originally Posted by ItsAngel

So glad you're back!! Please PM me about the playready key extraction when you get the chance. Also don't post it publicly because I'm 90% sure that some people from Netflix have read some of these posts.

Yanking out the private keys from the IBX is going to be much tougher than I anticipated. Still working on it though.

[ItsAngel]

Originally Posted by enrud

Yanking out the private keys from the IBX is going to be much tougher than I anticipated. Still working on it though.

Okay man, just keep me posted please😁

[BlueCop]

enrud: I was extracting the playready public/private key pairs from a rooted chromecast. It also stores a database of XMR licenses that I could then decrypt for the content key. I have a lot of scripts for handling the XMR and playready certificate chains. It can verify privates keys and do some useful functions. I also have an MP4 atom box parsers that I meant to eventually handle decryption. I never got the code working like mp4decrypt though. I can specify the track id and content key with mp4decrypt and get correctly dercypted videos.

I investigated the silverlight playready IBX on windows and mac but it seemed heavily obfuscated. They use white box AES so the content keys aren't stored in the clear in memory. I never had much luck with the silver light IBX. I also investigated the actual silverlight request to MS that individualized the blackbox. It allowed me to generate a bunch of IBX files and certificate chains to compare.

It was interesting learning about Eliptic Curve Crypto. I have some code that can decrypt many XMR licenses to content keys. Some are special cases where they are different types of licenses(ex. leaf or seed key). I have a bunch of test XMRs collected from various playready ios apps(ex. amazon instant), chromecast, windows and mac silverlight.

The patent applications for XMR and playready were really helpful in figuring out all the various binary fields. I think I have a list of the interesting patents on another computer. here is an example http://www.google.co.in/patents/US20060265758

I wanted to publish a toolkit for playready but wasn't sure the best way to do that. I haven't really looked at it in a while. I know there are private playready hacks around because decrypted versions of playready exclusive content is available around on the web.

The chromecast has a few DRM libraries that were much easier to load into hexrays IDA Pro/decompiler because they weren't obfuscated as the SL IBX. It really helped me figured out a lot of the head scratchers.