Get the latest tech news

Microsoft PlayReady – Complete Client Identity Compromise

Full Disclosure mailing list archives Microsoft PlayReady - complete client identity compromise From: Security Explorations <contact () security-explorations com> Date: Thu, 9 May 2024 10:02:26 +0200 Hello All, We have come up with two attack scenarios that make it possible to extract private ECC keys used by a PlayReady client (Windows SW DRM scenario) for the communication with a license server and identity purposes. More specifically, we successfully demonstrated the extraction of the following keys: - private signing key used to digitally sign license requests issued by PlayReady client, - private encryption key used to decrypt license responses received by the client (decrypt license blobs carrying encrypted content keys).

From: Security Explorations <contact () security-explorations com> Date: Thu, 9 May 2024 10:02:26 +0200 By Date Microsoft PlayReady - complete client identity compromise Security Explorations (May 09)

Get the Android app