diff --git a/Source/AppScaffolding/AppScaffolding.csproj b/Source/AppScaffolding/AppScaffolding.csproj index aabee374..8fbfe7d3 100644 --- a/Source/AppScaffolding/AppScaffolding.csproj +++ b/Source/AppScaffolding/AppScaffolding.csproj @@ -2,7 +2,7 @@ net9.0 - 12.5.1.1 + 12.5.2.1 diff --git a/Source/AudibleUtilities/Widevine/Device.cs b/Source/AudibleUtilities/Widevine/Device.cs index 2dc9b9c4..6003989e 100644 --- a/Source/AudibleUtilities/Widevine/Device.cs +++ b/Source/AudibleUtilities/Widevine/Device.cs @@ -70,9 +70,11 @@ internal class Device public byte[] DecryptSessionKey(byte[] sessionKey) => CdmKey.Decrypt(sessionKey, RSAEncryptionPadding.OaepSHA1); - /// - /// Completely managed implementation of RSASSA-PSS using SHA-1. - /// https://github.com/bcgit/bc-csharp/blob/master/crypto/src/crypto/signers/PssSigner.cs + /// + /// Completely managed implementation of RSASSA-PSS using SHA-1. + /// https://github.com/bcgit/bc-csharp/blob/master/crypto/src/crypto/signers/PssSigner.cs + /// + /// Absolutely nobody anywhere should use this RSASSA-PSS implementation in anything where they care about security at all. We completely skipped the random salt part of it because libation doesn't need security; it only needs to satisfy Audible server's challenge-response requirements. /// private static class PssSha1Signer {