[pulseaudio-tickets] [PulseAudio] #421: emulated AirPort Express as audio source

PulseAudio trac-noreply at tango.0pointer.de
Mon Nov 24 18:10:26 PST 2008


#421: emulated AirPort Express as audio source
--------------------------+-------------------------------------------------
  Reporter:  albert       |       Owner:  lennart
      Type:  enhancement  |      Status:  new    
  Priority:  low          |   Milestone:         
 Component:  daemon       |    Severity:  normal 
Resolution:               |    Keywords:         
--------------------------+-------------------------------------------------
Comment (by albert):

 Hi Coling,

 Thank you very much for pointing that out. That is really a pity.

 To point it out more clearly, we basically have to get the private RSA key
 which belongs to this public RSA key:

 {{{
 152     static int rsa_encrypt(uint8_t *text, int len, uint8_t *res) {
 153         const char n[] =
 154
 "59dE8qLieItsH1WgjrcFRKj6eUWqi+bGLOX1HL3U3GhC/j0Qg90u3sG/1CUtwC"
 155
 "5vOYvfDmFI6oSFXi5ELabWJmT2dKHzBJKa3k9ok+8t9ucRqMd6DZHJ2YCCLlDR"
 156
 "KSKv6kDqnw4UwPdpOMXziC/AMj3Z/lUVX1G7WSHCAWKf1zNS1eLvqr+boEjXuB"
 157
 "OitnZ/bDzPHrTOZz0Dew0uowxf/+sG+NCK3eQJVxqcaJ/vEHKIVd2M+5qL71yJ"
 158
 "Q+87X6oV3eaYvt3zWZYD6z5vYTcrtij2VZ9Zmni/UAaHqn9JdsBWLUEpVviYnh"
 159             "imNVvYFZeCXg/IdTQ+x4IRdiXNv5hEew==";
 160         const char e[] = "AQAB";
 ...
 }}}
 (code from
 http://www.pulseaudio.org/browser/src/modules/raop/raop_client.c)

 The private key should be stored somewhere on the AirPort Express and is
 used to decrypt the message (as I have seen from the code, this RSA
 encryption is only used to transfer the AES key, whereby that does not
 really matter for the problem).

 I sadly don't own an Airport Express myself, but for somebody who has
 access to one, wouldn't it be possible somehow to read the key from the
 device? (I guess that the key is not stored in any of their firmware
 updates, which would be a bit easier to read (or is it?).)

-- 
Ticket URL: <http://www.pulseaudio.org/ticket/421#comment:4>
PulseAudio <http://pulseaudio.org/>
The PulseAudio Sound Server


More information about the pulseaudio-bugs mailing list