andreas-mausch / whatsapp-viewer

Small tool to display chats from the Android msgstore.db database (crypt12)
https://andreas-mausch.de/whatsapp-viewer/
MIT License
1.24k stars 381 forks source link

Question regard bruteforce #35

Closed 4n0n1mo closed 6 years ago

4n0n1mo commented 7 years ago

Would you be able to speculate if bruteforcing crypt12 key would take more than years to a regular machine?

andreas-mausch commented 6 years ago

It will take more than years. crypt12 is encrypted with AES 256-bit GCM

infohash commented 3 years ago

Is this AES 256-bit GCM key sent by WhatsApp server to the client or is it generated by the client itself by deriving it from some secret sent by WhatsApp server after OTP verification?