Working PlayReady/Verimatrix DRM support
This commit is contained in:
Erik Zandvliet
Thulinma
parent
27fdbb2468
commit
0913d2607e
25 changed files with 1360 additions and 103 deletions
|
|
@ -1,44 +1,81 @@
|
|||
#include "encryption.h"
|
||||
#include "auth.h"
|
||||
//#include <openssl/aes.h>
|
||||
#include <cstdlib>
|
||||
#include <cstring>
|
||||
#include <iomanip>
|
||||
#include <cstdio>
|
||||
#include <cstdio>
|
||||
#include <iostream>
|
||||
#include "rijndael.h"
|
||||
#include "defines.h"
|
||||
#include "bitfields.h"
|
||||
#include "http_parser.h"
|
||||
#include "base64.h"
|
||||
#include "nal.h"/*LTS*/
|
||||
#include <sstream>
|
||||
|
||||
namespace Encryption {
|
||||
///helper function for printing binary values
|
||||
std::string hexString(const char * data, unsigned long dataLen){
|
||||
std::stringstream res;
|
||||
for (int i = 0; i < dataLen; i++){
|
||||
res << std::hex << std::setw(2) << std::setfill('0') << (int)data[i];
|
||||
if (i % 4 == 3){
|
||||
res << " ";
|
||||
}
|
||||
}
|
||||
return res.str();
|
||||
}
|
||||
|
||||
|
||||
std::string AES_Crypt(const std::string & data, const std::string & key, std::string & ivec) {
|
||||
unsigned char * outData = (unsigned char *)malloc(data.size() * sizeof(char));
|
||||
//unsigned int stateNum = 0;
|
||||
unsigned char stateEcount[16];
|
||||
unsigned char stateIvec[16];
|
||||
memset(stateEcount, 0, 16);
|
||||
memcpy(stateIvec, ivec.c_str(), 8);
|
||||
memset(stateIvec + 8, 0, 8);
|
||||
/// \todo Implement this ^_^
|
||||
//AES_KEY cryptKey;
|
||||
//if (AES_set_encrypt_key((unsigned char *)key.c_str(), 128, &cryptKey)) {
|
||||
// abort();
|
||||
//}
|
||||
/// \todo loop per 128 bytes....
|
||||
//AES_ctr128_encrypt((unsigned char *)data.c_str(), outData, data.size(), &cryptKey, stateIvec, stateEcount, &stateNum);
|
||||
std::string result = std::string((char *)outData, data.size());
|
||||
return AES_Crypt(data.data(), data.size(), key.data(), ivec.data());
|
||||
}
|
||||
|
||||
std::string AES_Crypt(const char * data, int dataLen, const char * key, const char * ivec) {
|
||||
char * outData = (char *)malloc(dataLen * sizeof(char));
|
||||
memcpy(outData, data, dataLen);
|
||||
AESFullCrypt(outData, dataLen, key, ivec);
|
||||
std::string result = std::string(outData, dataLen);
|
||||
free(outData);
|
||||
return result;
|
||||
}
|
||||
|
||||
///This function encrypts data in-place.
|
||||
///It alters all parameters except dataLen.
|
||||
///Do not use it unless you know what you are doing.
|
||||
void AESPartialCrypt(char * data, int dataLen, char * expandedKey, char * eCount, char * iVec, unsigned int & num, bool & initialize) {
|
||||
if (initialize) {
|
||||
num = 0;
|
||||
memset(eCount, 0, 16);
|
||||
///Before use, make sure the iVec is in the UPPER 8 bytes
|
||||
memset(iVec + 8, 0, 8);
|
||||
///Before use, make sure this is not the only copy of the key you had. It is lost upon initialization
|
||||
char cryptKey[224];
|
||||
AES_set_encrypt_key(expandedKey, 128, cryptKey);
|
||||
memcpy(expandedKey, cryptKey, 224);
|
||||
initialize = false;
|
||||
}
|
||||
char * outData = (char *)malloc(dataLen * sizeof(char));
|
||||
AES_CTR128_crypt(data, outData, dataLen, expandedKey, iVec, eCount, num);
|
||||
memcpy(data, outData, dataLen);
|
||||
free(outData);
|
||||
}
|
||||
|
||||
//Generates the contentkey from a keyseed and a keyid
|
||||
std::string PR_GenerateContentKey(std::string & keyseed, std::string & keyid) {
|
||||
char contentKey[16];
|
||||
char dataBlob[92];
|
||||
char keyA[32], keyB[32], keyC[32];
|
||||
std::string keyidBytes = PR_GuidToByteArray(keyid);
|
||||
memcpy(dataBlob, keyseed.c_str(), 30);
|
||||
memcpy(dataBlob+30, keyidBytes.data(), 16);
|
||||
memcpy(dataBlob+46, keyseed.c_str(), 30);
|
||||
memcpy(dataBlob+76, keyidBytes.data(), 16);
|
||||
memcpy(dataBlob, keyseed.data(), 30);
|
||||
memcpy(dataBlob + 30, keyidBytes.data(), 16);
|
||||
memcpy(dataBlob + 46, keyseed.data(), 30);
|
||||
memcpy(dataBlob + 76, keyidBytes.data(), 16);
|
||||
//KeyA is generated from keyseed/keyid
|
||||
Secure::sha256bin(dataBlob, 46, keyA);
|
||||
//KeyB is generated from keyseed/keyid/keyseed
|
||||
Secure::sha256bin(dataBlob, 76, keyB);
|
||||
//KeyC is generated from keyseed/keyid/keyseed/keyid
|
||||
Secure::sha256bin(dataBlob, 92, keyC);
|
||||
for (int i = 0; i < 16; i++) {
|
||||
contentKey[i] = keyA[i] ^ keyA[i + 16] ^ keyB[i] ^ keyB[i + 16] ^ keyC[i] ^ keyC[i + 16];
|
||||
|
|
@ -46,17 +83,151 @@ namespace Encryption {
|
|||
return std::string(contentKey, 16);
|
||||
}
|
||||
|
||||
//Transforms a guid to the MS byte array representation
|
||||
std::string PR_GuidToByteArray(std::string & guid) {
|
||||
std::string result;
|
||||
result = guid[3];
|
||||
result += guid[2];
|
||||
result += guid[1];
|
||||
result += guid[0];
|
||||
result += guid[5];
|
||||
result += guid[4];
|
||||
result += guid[7];
|
||||
result += guid[6];
|
||||
result += guid.substr(8);
|
||||
return result;
|
||||
char result[16];
|
||||
result[0] = guid[3];
|
||||
result[1] = guid[2];
|
||||
result[2] = guid[1];
|
||||
result[3] = guid[0];
|
||||
|
||||
result[4] = guid[5];
|
||||
result[5] = guid[4];
|
||||
|
||||
result[6] = guid[7];
|
||||
result[7] = guid[6];
|
||||
memcpy(result + 8, guid.data() + 8, 8);
|
||||
return std::string(result, 8);
|
||||
}
|
||||
|
||||
|
||||
///This function encrypts data in-place.
|
||||
void AESFullCrypt(char * data, int dataLen, const char * key, const char * ivec) {
|
||||
unsigned int num = 0;
|
||||
char expandedKey[224];
|
||||
memcpy(expandedKey, key, 16);
|
||||
char eCount[16];
|
||||
char iVec[16];
|
||||
memcpy(iVec, ivec, 8);
|
||||
bool initialize = true;
|
||||
AESPartialCrypt(data, dataLen, expandedKey, eCount, iVec, num, initialize);
|
||||
}
|
||||
|
||||
void encryptPlayReady(DTSC::Packet & thisPack, std::string & codec, const char * iVec, const char * key) {
|
||||
char * data;
|
||||
unsigned int dataLen;
|
||||
thisPack.getString("data", data, dataLen);
|
||||
|
||||
if (codec == "H264") {
|
||||
unsigned int num = 0;
|
||||
char expandedKey[224];
|
||||
memcpy(expandedKey, key, 16);
|
||||
char eCount[16];
|
||||
char initVec[16];
|
||||
memcpy(initVec, iVec, 8);
|
||||
bool initialize = true;
|
||||
|
||||
int pos = 0;
|
||||
|
||||
std::deque<int> nalSizes = h264::parseNalSizes(thisPack);
|
||||
for (std::deque<int>::iterator it = nalSizes.begin(); it != nalSizes.end(); it++) {
|
||||
int encrypted = (*it - 5) & ~0xF;//Bitmask to a multiple of 16
|
||||
int clear = *it - encrypted;
|
||||
Encryption::AESPartialCrypt(data + pos + clear, encrypted, expandedKey, eCount, initVec, num, initialize);
|
||||
pos += *it;
|
||||
}
|
||||
}
|
||||
if (codec == "AAC") {
|
||||
Encryption::AESFullCrypt(data, dataLen, key, iVec);
|
||||
}
|
||||
}
|
||||
|
||||
/// Converts a hexidecimal string format key to binary string format.
|
||||
std::string binKey(std::string hexkey) {
|
||||
char newkey[16];
|
||||
memset(newkey, 0, 16);
|
||||
for (size_t i = 0; i < hexkey.size(); ++i) {
|
||||
char c = hexkey[i];
|
||||
newkey[i >> 1] |= ((c & 15) + (((c & 64) >> 6) | ((c & 64) >> 3))) << ((~i & 1) << 2);
|
||||
}
|
||||
return std::string(newkey, 16);
|
||||
}
|
||||
|
||||
|
||||
/// Helper function for urlescape.
|
||||
/// Encodes a character as two hex digits.
|
||||
std::string hex(char dec) {
|
||||
char dig1 = (dec & 0xF0) >> 4;
|
||||
char dig2 = (dec & 0x0F);
|
||||
if (dig1 <= 9) dig1 += 48;
|
||||
if (10 <= dig1 && dig1 <= 15) dig1 += 97 - 10;
|
||||
if (dig2 <= 9) dig2 += 48;
|
||||
if (10 <= dig2 && dig2 <= 15) dig2 += 97 - 10;
|
||||
std::string r;
|
||||
r.append(&dig1, 1);
|
||||
r.append(&dig2, 1);
|
||||
return r;
|
||||
}
|
||||
std::string hex(const std::string & input) {
|
||||
std::string res;
|
||||
res.reserve(input.size() * 2);
|
||||
for (unsigned int i = 0; i < input.size(); i++) {
|
||||
res += hex(input[i]);
|
||||
}
|
||||
return res;
|
||||
}
|
||||
|
||||
void fillVerimatrix(verimatrixData & vmData) {
|
||||
int hostPos = vmData.url.find("://") + 3;
|
||||
int portPos = vmData.url.find(":", hostPos);
|
||||
|
||||
std::string hostName = vmData.url.substr(hostPos, (portPos == std::string::npos ? portPos : portPos - hostPos));
|
||||
int port = (portPos == std::string::npos ? 80 : atoi(vmData.url.data() + portPos + 1));
|
||||
Socket::Connection veriConn(hostName, port, true);
|
||||
|
||||
HTTP::Parser H;
|
||||
H.url = "/CAB/keyfile?PROTECTION-TYPE=PLAYREADY&TYPE=DTV&POSITION=0&RESOURCE-ID=" + vmData.name;
|
||||
H.SetHeader("Host", vmData.url.substr(hostPos));
|
||||
H.SendRequest(veriConn);
|
||||
H.Clean();
|
||||
while (veriConn && (!veriConn.spool() || !H.Read(veriConn))) {}
|
||||
vmData.key = binKey(H.GetHeader("Key"));
|
||||
vmData.keyid = H.GetHeader("KeyId");
|
||||
vmData.laurl = H.GetHeader("LAURL");
|
||||
vmData.lauurl = H.GetHeader("LAUURL");
|
||||
}
|
||||
|
||||
void verimatrixData::read(const char * shmPage) {
|
||||
int offset = 0;
|
||||
url = std::string(shmPage + offset);
|
||||
offset += url.size() + 1;//+1 for the concluding 0-byte
|
||||
name = std::string(shmPage + offset);
|
||||
offset += name.size() + 1;//+1 for the concluding 0-byte
|
||||
key = std::string(shmPage + offset);
|
||||
offset += key.size() + 1;//+1 for the concluding 0-byte
|
||||
keyid = std::string(shmPage + offset);
|
||||
offset += keyid.size() + 1;//+1 for the concluding 0-byte
|
||||
laurl = std::string(shmPage + offset);
|
||||
offset += laurl.size() + 1;//+1 for the concluding 0-byte
|
||||
lauurl = std::string(shmPage + offset);
|
||||
|
||||
key = binKey(key);
|
||||
}
|
||||
|
||||
void verimatrixData::write(char * shmPage) {
|
||||
int offset = 0;
|
||||
memcpy(shmPage + offset, url.c_str(), url.size() + 1);
|
||||
offset += url.size() + 1;//+1 for the concluding 0-byte
|
||||
memcpy(shmPage + offset, name.c_str(), name.size() + 1);
|
||||
offset += name.size() + 1;//+1 for the concluding 0-byte
|
||||
std::string tmpKey = hex(key);
|
||||
memcpy(shmPage + offset, tmpKey.c_str(), tmpKey.size() + 1);
|
||||
offset += tmpKey.size() + 1;//+1 for the concluding 0-byte
|
||||
memcpy(shmPage + offset, keyid.c_str(), keyid.size() + 1);
|
||||
offset += keyid.size() + 1;//+1 for the concluding 0-byte
|
||||
memcpy(shmPage + offset, laurl.c_str(), laurl.size() + 1);
|
||||
offset += laurl.size() + 1;//+1 for the concluding 0-byte
|
||||
memcpy(shmPage + offset, lauurl.c_str(), lauurl.size() + 1);
|
||||
}
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue