AirPort Express encryption broken

According to Jono@HaloCom's post in WhirlPool
Jon Lech Johnasen has done it again!

Jon Lech Johnasen, author of DeCSS , has discovered the public key that the AirPort Express uses to allow software to play audio through it. Johnasen says that the audio stream is encrypted with AES and that the AES key is encrypted with RSA. The public key is available on his blog as well as a software application (for Windows command-line) that streams Apple Lossless MPEG-4 audio to an AirPort Express. "Though JustePort is Windows-only software at the moment, it should be only days before graphical software exists for the Mac now that the public key is out in the open. Apple could choose to change it via an AirPort Express firmware update, but it should still be possible to retrieve the new key. This is a huge step forward in giving standard applications the ability to use an Express for audio output," according to one developer.

The blog is available at http://nanocrew.net/blog/
MacCentre701 failed to load it.

advertisement:

MacCentral has an article on this, JustePort sends music to AirPort Express without iTunes

"I've released JustePort, a tool which lets you stream MPEG4 Apple Lossless files to your AirPort Express," Johansen wrote in his Web log. "The stream is encrypted with AES [Advanced Encryption Standard] and the AES key is encrypted with RSA." RSA is a public key encryption technology.

On its own, JustePort is probably of limited usefulness to most users. Apple Lossless codec about halves the size of an audio file from its original Audio CD source, but its use is not nearly as widespread as the ubiquitous MP3 format or AAC, the format Apple uses for songs downloaded from its iTunes Music Store.

Johansen is best known for his 1999 efforts with DeCSS, or De Contents Scramble System: software used to crack the CSS copy protection on commercially available DVDs. Johansen was eventually arrested, tried and acquitted by the Norwegian courts after the Motion Picture Association of America (MPAA) filed a complaint.. Last November Johansen introduced QTFairUse, a technology that allowed iTunes users to make raw copies of iTunes Music Store songs free of their Digital Rights Management (DRM) encryption.


Posted by Antony at August 13, 2004 12:06 AM

>> more MacCentre701 August 2004 reports.