2 Commits

Include renames

Author	SHA1	Message	Date
tkgstratorandClaude Sonnet 4.6	455de1ebee	feat(crypto): implement build_session_region() with TFIT-WB-AES DH key encryption ... Add session_region builder for key 33.6 scheme_data (plaintext[128:300] = 172B). Emits 7B constant CBOR prefix + 128B TFIT-WB-AES-ECB(DH_pub_key) + 37B zero-filled MGK tail (CBOR encoding TBD). Falls back to bytes(172) if NFWebCrypto binary absent. Update test_appboot_e2e.py to call build_session_region() instead of hardcoded zeros. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-09 15:47:05 +00:00
tkgstratorandClaude Sonnet 4.6	9be376736d	feat(appboot): add e2e test script and simplify iOSMslClient architecture ... Corrects entity_auth_data CBOR structure based on 243 captured requests: - scheme name is "MGK_APPID" (not "FAIRPLAY_MGK_APPID") - apphmac is device_id_token UTF-8 bytes, not a computed HMAC - devicetoken is base64.b64decode(device_id_token) raw bytes - integer key 3 for ESN (not string key); no device_key_data or esn_prefix - identity (key 33.8) is full ESN without "_3" suffix - signature = HMAC-SHA256(sign_key_0, key_request_data_bytes) only iOSAppbootParams simplified: removes device_key_data, apphmac, devicetoken, renewable, capabilities, esn_prefix. Adds optional device_id_token for subsequent sessions. CBOR building moved inline into iOSMslClient. New tools/test_appboot_e2e.py performs the full chain: TFIT emulation -> Phase 3 KDF -> DH keygen -> CBOR build -> POST appboot.netflix.com -> response parse. Handles both CBOR success and JSON MSL error responses. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-09 15:24:01 +00:00