Hooks HKDF_extract and HKDF_expand in the tweak for improved key derivation
logging and analysis. Removes Frida and Proxyman skills, references, and
documentation for a more focused Agent Team workflow.
Adds several Python tools for systematic HKDF and session key derivation
analysis, supporting ongoing reverse engineering and debugging efforts.
Switches all agent workflow documentation and prompts to English, clarifies
inter-agent communication constraints, and updates the workflow to reflect
current team structure and supported features.
Relates to the need for more accurate key extraction and simplified agent
usage.
Enhances iOS MSL CBOR decoder for multi-item parsing, iOS-specific payload
handling, and IV extraction from ciphertext. Updates NetflixCrypto to support
Tweak-format key JSON. Extends the Tweak to capture DH key exchange material
and session keys more reliably, saving full key histories and implementing
better appboot phase tracking. Adds scripts for DH-derived HKDF parameter
analysis and appboot key response investigation.
Improves documentation on iOS CBOR MSL protocol differences, decryption
pipeline, and key extraction workflow.
Relates to iOS MSL traffic analysis and decryption research.
Introduces a new tweak project to extract Diffie-Hellman and session keys
from the Netflix iOS app using Security.framework and function hooks.
Updates documentation for improved iOS device connectivity via USB and
iproxy, and clarifies setup instructions. Adjusts devcontainer port
forwarding to expose only necessary ports.
Relates to planned appboot DH key extraction workflow.
