From a7d9efdfd42e611c7b49038b6710144d81357de9 Mon Sep 17 00:00:00 2001 From: tkgstrator Date: Thu, 9 Apr 2026 02:07:59 +0000 Subject: [PATCH] =?UTF-8?q?docs(spec):=20appboot=20Response=20=E3=82=92=20?= =?UTF-8?q?key=2033.6=20/=2033.9=20=E3=81=AB=E5=88=86=E8=A7=A3?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit appboot Response key 33 を Server DH PubKey と省略していた問題を修正。 key 33.6 (Server DH Response 96B) と key 33.9 (Server nonce 16B) に分離。 Co-Authored-By: Claude Opus 4.6 (1M context) --- docs/spec/msl_key_relationship.md | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/docs/spec/msl_key_relationship.md b/docs/spec/msl_key_relationship.md index 8d63d5f..3420e93 100644 --- a/docs/spec/msl_key_relationship.md +++ b/docs/spec/msl_key_relationship.md @@ -51,16 +51,20 @@ graph LR KEY336_PT --> OP_XOR OP_XOR --> KEY336_ENC["key 33.6 ciphertext"] KEY336_ENC -->|POST /appboot| SERVER["Netflix Server"] - SERVER --> DH_RESP["appboot Response key 33"] - DH_RESP --> TO_P2b[/"to Phase 2"/] - ECC_BOOT["kAppBootEccKey P-256"] -.->|verify?| DH_RESP + SERVER --> RESP["appboot Response key 33"] + RESP --> RESP_6["key 33.6 Server DH Response 96B"] + RESP --> RESP_9["key 33.9 Server nonce 16B"] + RESP_6 --> TO_P2b[/"to Phase 2"/] + ECC_BOOT["kAppBootEccKey P-256"] -.->|verify?| RESP style DH_P fill:#e74c3c,stroke:#c0392b,color:#fff style DH_G fill:#e74c3c,stroke:#c0392b,color:#fff style ECC_BOOT fill:#e74c3c,stroke:#c0392b,color:#fff style NONCE_SRV fill:#2ecc71,stroke:#27ae60,color:#fff style SERVER fill:#3498db,stroke:#2980b9,color:#fff - style DH_RESP fill:#3498db,stroke:#2980b9,color:#fff + style RESP fill:#3498db,stroke:#2980b9,color:#fff + style RESP_6 fill:#3498db,stroke:#2980b9,color:#fff + style RESP_9 fill:#3498db,stroke:#2980b9,color:#fff style DH_PUB fill:#2ecc71,stroke:#27ae60,color:#fff style DH_PRIV fill:#2ecc71,stroke:#27ae60,color:#fff style TO_P2a fill:#555,stroke:#333,color:#fff @@ -80,7 +84,7 @@ graph LR ```mermaid graph LR - FROM_P1a[/"from Phase 1: Server DH PubKey"/] --> OP_DH(["DH_compute_key"]) + FROM_P1a[/"from Phase 1: key 33.6 Server DH Response"/] --> OP_DH(["DH_compute_key"]) FROM_P1b[/"from Phase 1: Client DH PrivKey"/] --> OP_DH OP_DH --> DH_SHARED["DH Shared Secret 1024-bit"] FROM_P3[/"from Phase 3: session_bind upper 16B"/] --> OP_SHA2(["SHA384"])