replayready/README.md
astravaganza 24ee589e0c
Grammar
2025-03-03 03:28:23 +05:30

6 lines
591 B
Markdown

# replayready
Python port of the wrapping mechanism used for "encrypting" the ECC keys to a playready model certificate from the Playready PK.
Nothing particularly special but worth noting that several OEMs use the same hardcoded keys from the Porting Kit for their respective implementations. As a result, the `zgpriv_protected.dat` (48 byte) keys from some TV dumps and even firmwares can be decrypted by this method without ever actually getting into the TEE.
Sharing since a lot of SL3000 certificates have already been made public. Many of which were obtained through the same method.