Open
Issue #3 · created by 0z4ck


profile_authkey stored in android client seems to be no longer decryptable with view-android-settings.py

when I run view-android-settings.py for my line_naver.octet-stream , the output is "Key seems to be wrong. sys.exit(2)" .

Then , I tried to execute functions inside decrypt_setting() line-by-line.

>>> ciphertext = base64.b64decode(value)
>>> # generate AES key from 8-bit key
>>> aes_key = crazy_operation(key, 0xec4ba7)
>>> # decrypt setting with AES
>>> aes = AES.new(aes_key, AES.MODE_ECB)
>>> plaintext = aes.decrypt(ciphertext)

in this stage, plaintext was not None but

>>> # remove PKCS#7 padding
>>> plaintext = plaintext[0:-plaintext[-1]]

this makes plaintext null because plaintext[-plaintext[-1]] is out of range . in my case, plaintext[-1] was 217 and the range was 16, so I think there was some change in the decrypt algorithm.


2 participants (deleted)