#421: emulated AirPort Express as audio source
--------------------------+-------------------------------------------------
  Reporter:  albert       |       Owner:  lennart
      Type:  enhancement  |      Status:  new    
  Priority:  low          |   Milestone:         
 Component:  daemon       |    Severity:  normal 
Resolution:               |    Keywords:         
--------------------------+-------------------------------------------------
Comment (by albert):

 Hi Coling,

 Thank you very much for pointing that out. That is really a pity.

 To point it out more clearly, we basically have to get the private RSA key
 which belongs to this public RSA key:

 {{{
 152     static int rsa_encrypt(uint8_t *text, int len, uint8_t *res) {
 153         const char n[] =
 154
 "59dE8qLieItsH1WgjrcFRKj6eUWqi+bGLOX1HL3U3GhC/j0Qg90u3sG/1CUtwC"
 155
 "5vOYvfDmFI6oSFXi5ELabWJmT2dKHzBJKa3k9ok+8t9ucRqMd6DZHJ2YCCLlDR"
 156
 "KSKv6kDqnw4UwPdpOMXziC/AMj3Z/lUVX1G7WSHCAWKf1zNS1eLvqr+boEjXuB"
 157
 "OitnZ/bDzPHrTOZz0Dew0uowxf/+sG+NCK3eQJVxqcaJ/vEHKIVd2M+5qL71yJ"
 158
 "Q+87X6oV3eaYvt3zWZYD6z5vYTcrtij2VZ9Zmni/UAaHqn9JdsBWLUEpVviYnh"
 159             "imNVvYFZeCXg/IdTQ+x4IRdiXNv5hEew==";
 160         const char e[] = "AQAB";
 ...
 }}}
 (code from
 http://www.pulseaudio.org/browser/src/modules/raop/raop_client.c)

 The private key should be stored somewhere on the AirPort Express and is
 used to decrypt the message (as I have seen from the code, this RSA
 encryption is only used to transfer the AES key, whereby that does not
 really matter for the problem).

 I sadly don't own an Airport Express myself, but for somebody who has
 access to one, wouldn't it be possible somehow to read the key from the
 device? (I guess that the key is not stored in any of their firmware
 updates, which would be a bit easier to read (or is it?).)

-- 
Ticket URL: <http://www.pulseaudio.org/ticket/421#comment:4>
PulseAudio <http://pulseaudio.org/>
The PulseAudio Sound Server
_______________________________________________
pulseaudio-tickets mailing list
pulseaudio-tickets@mail.0pointer.de
https://tango.0pointer.de/mailman/listinfo/pulseaudio-tickets

Reply via email to