5

All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains all the decryption logic. Is there any info how this module works, which algorithms uses?

1

I’m not aware of any detailed description of the app encryption on iOS. My guess is that because FairPlay framework and kext are heavily obfuscated, it’s much easier to just let it run on the device and get the final decrypted code that spend countless hours reverse engineering the obfuscated algorithms which in the end will need the key material produced on the physical device.

On the other hand, if you do spend those months/years to find out the exact details, you just might discover a way to perform decryption offline after all :)

|improve this answer|||||
  • Yes, it is much easier to extract decrypted code from device`s memory, but I wondered maybe there were some researches about actual module's work – AseN Aug 16 '19 at 0:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.