GVSV -- Jon Johansen, author of DeCSS, has discovered the public key that the AirPort Express uses to allow software to play audio through it and posted it to So Sue Me. The public key for AirPort Express is out in the open (see below but no need to check Jon's blog because it's withering under the load). Until Apple "patch" it, anyone could encrypt data using it and get Apple's device to play the music.
He's also released the source code to a JustePort, a small Windows command-line tool. His crack clears the DRM bridles around iTunes because other applications could now broadcast music to your home stereo wirelessly by using Express, rather than just iTunes 4.6. Andrew Orlowski says, "For users on Linux machines, or with WMA or OGG format files, this could be a boon, as iTunes supports neither format out of the box."
As a Slashdot thread points out, the stream is encrypted with AES and the AES key is encrypted with RSA.AirPort Express RSA Public Key, Modulus:
59dE8qLieItsH1WgjrcFRKj6eUWqi+bGLOX1HL3U3GhC/j0Qg9 0u3sG/1CUtwC
5vOYvfDmFI6oSFXi5ELabWJmT2dKHzBJKa3k9ok+8t9ucRqMd6 DZHJ2YCCLlDR
KSKv6kDqnw4UwPdpOMXziC/AMj3Z/lUVX1G7WSHCAWKf1zNS1e Lvqr+boEjXuB
OitnZ/bDzPHrTOZz0Dew0uowxf/+sG+NCK3eQJVxqcaJ/vEHKI Vd2M+5qL71yJ
Q+87X6oV3eaYvt3zWZYD6z5vYTcrtij2VZ9Zmni/UAaHqn9Jds BWLUEpVviYnh
imNVvYFZeCXg/IdTQ+x4IRdiXNv5hEew==
Exponent: AQABMD5(JustePort-0.1.tar.gz) = fe13e96751958c6e9d57cce0caa7b17b
This RSA public key can also be expressed in hex as:
000000 e7 d7 44 f2 a2 e2 78 8b 6c 1f 55 a0 8e b7 05 44
000010 a8 fa 79 45 aa 8b e6 c6 2c e5 f5 1c bd d4 dc 68
000020 42 fe 3d 10 83 dd 2e de c1 bf d4 25 2d c0 2e 6f
000030 39 8b df 0e 61 48 ea 84 85 5e 2e 44 2d a6 d6 26
000040 64 f6 74 a1 f3 04 92 9a de 4f 68 93 ef 2d f6 e7
000050 11 a8 c7 7a 0d 91 c9 d9 80 82 2e 50 d1 29 22 af
000060 ea 40 ea 9f 0e 14 c0 f7 69 38 c5 f3 88 2f c0 32
000070 3d d9 fe 55 15 5f 51 bb 59 21 c2 01 62 9f d7 33
000080 52 d5 e2 ef aa bf 9b a0 48 d7 b8 13 a2 b6 76 7f
000090 6c 3c cf 1e b4 ce 67 3d 03 7b 0d 2e a3 0c 5f ff
0000a0 eb 06 f8 d0 8a dd e4 09 57 1a 9c 68 9f ef 10 72
0000b0 88 55 dd 8c fb 9a 8b ef 5c 89 43 ef 3b 5f aa 15
0000c0 dd e6 98 be dd f3 59 96 03 eb 3e 6f 61 37 2b b6
0000d0 28 f6 55 9f 59 9a 78 bf 50 06 87 aa 7f 49 76 c0
0000e0 56 2d 41 29 56 f8 98 9e 18 a6 35 5b d8 15 97 82
0000f0 5e 0f c8 75 34 3e c7 82 11 76 25 cd bf 98 44 7b
a 2048 bit RSA public key. The exponent is hex 0x10001, which is decimal 65537, a very commonly used exponent for RSA encryption.
John Paczkowski -- "DVD Jon apologizes for taking so long on AirPort crack"
Andrew Orlowski -- "DVD Jon cracks Apple AirPort streaming"
Dave Winer and Slashdot -- "any application could stream from AirPort Express"
Bonus Link: OSX users can find VideoLAN Client at VideoLAN.org.
Sorta Bonus Links: check out the slew of IP lawyer advertisements in the RH gutter of this entry.
x_ref101bu
