From b5d9c0a27a913403b9c8cf6f80a3f1978c38e35b Mon Sep 17 00:00:00 2001 From: rmcrackan Date: Sun, 17 Aug 2025 10:06:12 -0400 Subject: [PATCH] Incr ver --- Source/AppScaffolding/AppScaffolding.csproj | 2 +- Source/AudibleUtilities/Widevine/Device.cs | 8 +++++--- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/Source/AppScaffolding/AppScaffolding.csproj b/Source/AppScaffolding/AppScaffolding.csproj index aabee374..8fbfe7d3 100644 --- a/Source/AppScaffolding/AppScaffolding.csproj +++ b/Source/AppScaffolding/AppScaffolding.csproj @@ -2,7 +2,7 @@ net9.0 - 12.5.1.1 + 12.5.2.1 diff --git a/Source/AudibleUtilities/Widevine/Device.cs b/Source/AudibleUtilities/Widevine/Device.cs index 2dc9b9c4..6003989e 100644 --- a/Source/AudibleUtilities/Widevine/Device.cs +++ b/Source/AudibleUtilities/Widevine/Device.cs @@ -70,9 +70,11 @@ internal class Device public byte[] DecryptSessionKey(byte[] sessionKey) => CdmKey.Decrypt(sessionKey, RSAEncryptionPadding.OaepSHA1); - /// - /// Completely managed implementation of RSASSA-PSS using SHA-1. - /// https://github.com/bcgit/bc-csharp/blob/master/crypto/src/crypto/signers/PssSigner.cs + /// + /// Completely managed implementation of RSASSA-PSS using SHA-1. + /// https://github.com/bcgit/bc-csharp/blob/master/crypto/src/crypto/signers/PssSigner.cs + /// + /// Absolutely nobody anywhere should use this RSASSA-PSS implementation in anything where they care about security at all. We completely skipped the random salt part of it because libation doesn't need security; it only needs to satisfy Audible server's challenge-response requirements. /// private static class PssSha1Signer {