search

wvdumper / dumper

Dump L3 CDM from any Android device
506 stars 242 forks source link

[Question] Variations on private_key and client_id #40

Closed Slyyxp closed 2 years ago

Slyyxp commented 2 years ago

So I dumped an S7 Edge (SystemID: 4445) using the My5 app for playback. https://www.channel5.com/

I tried to use the provided blob/key to create a license request to Amazon Music.

{"__type":"com.amazon.digitalmusiclocator#DrmLicenseDeniedException","DrmType":"WIDEVINE_ENTITLEMENT","denialReason":"UNTRUSTED_SYSTEM_ID","message":"WIDEVINE_ENTITLEMENT license denied. The system id 4445 is not allow listed by Amazon Music for group license requests. (DrmLicenseDeniedException UNTRUSTED_SYSTEM_ID) request-id: ff7489f8-10b5-4106-bf95-cbffbc713cf9 music-agent: Harley/3.10.0.64 Harley/22.2.3","requestId":"ff7489f8-10b5-4106-bf95-cbffbc713cf9"}

The response is self-explanatory, the SysID is untrusted. HOWEVER, playback is possible on the device and monitoring the traffic using HTTPCanary I am able to see successful license requests made from the device itself.

Back to the issue title, is the provided private_key.pem and client_id.bin dependant on the application used for playback? For example if I dumped by using Prime Video for playback would I receive a different result than dumping from My5, Netflix, Hulu, Bitmovin or another application?

I ask this question because I do believe the the device i'm using should be able to make a license request to the aforementioned service and can only think of the dumped files being the issue.

Slyyxp commented 2 years ago

I have answered this on my own. Bitmovin sample via browser and My5 application both give different RSA's.

This doesn't solve the very confusing issue arising in my use-case but answers the question on whether there can be variations on the RSA/blob dumped.