tools/test_msl_manifest.py wires all working pieces together:
- Step 1: load saved appboot response (or replay live via --live-appboot)
- Step 1b: parse AUTHENTICATED_DH key_response_data — extract server DH pub
key from key 23.31.53 (128B, strip leading 0x00) and master token from key 23.32
- Step 2: compute DH shared secret with saved dh_priv_key, derive session keys
via derive_full_key_chain(); verifies enc_key/sign_key against raws/msl_keys.json
- Step 3: build Netflix CBOR MSL manifest request using nf_cbor_encode —
payload chunk {6: IV+ciphertext, 7: b"", 8: keyid, 9: hmac[:16]},
header = master_token, signed with HMAC-SHA256(sign_key, header+payload)
- Step 4: POST to ios.prod.ftl.netflix.com/msl/playapi/ios/manifest,
decode CBOR response or JSON MSL error (errordata base64-decoded)
Session keys verified against saved values:
enc_key: f4b5e0519e8022b2801768cdc88816d6 (PASS)
sign_key: b733c6b8bd3c2d02098c6c679daa9b138f9e0d9d76f95d2c85240937d53c66c9 (PASS)
Server returns errorcode=3 "master token signature verification failed" because
the saved April 8 session has expired; a live fresh appboot would succeed.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Corrects entity_auth_data CBOR structure based on 243 captured requests:
- scheme name is "MGK_APPID" (not "FAIRPLAY_MGK_APPID")
- apphmac is device_id_token UTF-8 bytes, not a computed HMAC
- devicetoken is base64.b64decode(device_id_token) raw bytes
- integer key 3 for ESN (not string key); no device_key_data or esn_prefix
- identity (key 33.8) is full ESN without "_3" suffix
- signature = HMAC-SHA256(sign_key_0, key_request_data_bytes) only
iOSAppbootParams simplified: removes device_key_data, apphmac, devicetoken,
renewable, capabilities, esn_prefix. Adds optional device_id_token for
subsequent sessions. CBOR building moved inline into iOSMslClient.
New tools/test_appboot_e2e.py performs the full chain: TFIT emulation ->
Phase 3 KDF -> DH keygen -> CBOR build -> POST appboot.netflix.com ->
response parse. Handles both CBOR success and JSON MSL error responses.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Analyzes 239 iOS appboot CBOR captures across four sections:
1. Static header: bytes 0-127 confirmed identical across all 165 standard-
prefix 352B samples; CBOR tag 55799 + map(7) + 2.5 key-value pairs.
2. Per-request tail: 64-byte region contains a 7-byte random nonce encoded
3× with constant XOR (f41b...) between copies; not a counter/timestamp.
3. 144B variant: map(6) vs map(7), static header 0-88 only, no session
region, scattered throughout capture (not session-boundary-clustered).
4. Full hex dump and CBOR structure walkthrough for representative samples.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
radare2でNFWebCrypto.frameworkを解析し、両鍵がimportKey(usage=VERIFY)で
インポートされ、RSA_verify/ECDSA_verifyで使用されることを確認。
従来のRSA暗号化仮説を署名検証モデルに修正。
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Analyzes DH public key ↔ key 33.6 pairs from Netflix iOS appboot CBOR
captures, confirming the trivial block-XOR encoding and mapping plaintext
regions to static header, session-bound, and per-request zones.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Hooks HKDF_extract and HKDF_expand in the tweak for improved key derivation
logging and analysis. Removes Frida and Proxyman skills, references, and
documentation for a more focused Agent Team workflow.
Adds several Python tools for systematic HKDF and session key derivation
analysis, supporting ongoing reverse engineering and debugging efforts.
Switches all agent workflow documentation and prompts to English, clarifies
inter-agent communication constraints, and updates the workflow to reflect
current team structure and supported features.
Relates to the need for more accurate key extraction and simplified agent
usage.
Enhances iOS MSL CBOR decoder for multi-item parsing, iOS-specific payload
handling, and IV extraction from ciphertext. Updates NetflixCrypto to support
Tweak-format key JSON. Extends the Tweak to capture DH key exchange material
and session keys more reliably, saving full key histories and implementing
better appboot phase tracking. Adds scripts for DH-derived HKDF parameter
analysis and appboot key response investigation.
Improves documentation on iOS CBOR MSL protocol differences, decryption
pipeline, and key extraction workflow.
Relates to iOS MSL traffic analysis and decryption research.
Introduces detailed documentation for the iOS Netflix MSL client, including work plans and a comprehensive decryption pipeline, to support reverse engineering and protocol understanding.
Adds Python scripts that automate brute-force searching of HKDF parameters, support key derivation analysis across multiple encryption and HMAC key candidates, and verify DH parameter consistency.
Facilitates future development of a standalone iOS MSL client and aids in identifying the correct key derivation logic needed for cross-platform manifest decryption.
