astravaganza a5f80f536f
Update zgpriv_protected_dec.py
- write zgpriv to disk instead of hex output to console
- removed the last 16 bytes
2025-03-05 02:18:25 +05:30
2025-03-03 03:13:02 +05:30
2025-03-03 03:13:02 +05:30
2025-03-03 03:28:23 +05:30

replayready

Python port of the wrapping mechanism used for "encrypting" the ECC keys to a playready model certificate from the Playready PK. Nothing particularly special but worth noting that several OEMs use the same hardcoded keys from the Porting Kit for their respective implementations. As a result, the zgpriv_protected.dat (48 byte) keys from some TV dumps and even firmwares can be decrypted by this method without ever actually getting into the TEE.

Sharing since a lot of SL3000 certificates have already been made public. Many of which were obtained through the same method.

Description
Python port of the wrapping mechanism used for SL3000 TEE protection
Readme Unlicense 38 KiB
Languages
Python 100%