Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Why do you even need Thorium for this?

If the files are just AES-encrypted and the links are there, as the linked article suggest, it seems that it would be easy to create a standalone script to download and decrypt these.



(OP here) I discussed how the DRM works in an earlier blog post - https://shkspr.mobi/blog/2025/03/some-thoughts-on-lcp-ebook-...

Essentially, the key for decrypting the files is made up of the book owner's passphrase and the super-secret key embedded in the closed-source binary.

I wasn't able to reverse engineer the binary or extract that key.


The key is b3a07c4d42880e69398e05392405050efeea0664c0b638b7c986556fa9b58d77b31a40eb6a4fdba1e4537229d9f779daad1cc41ee968153cb71f27dc9696d40f


No, it isn't. That's the key for LCP Profile 1.0 - which was deprecated some time ago - https://readium.org/lcp-specs/notes/lcp-profile-upgrade.html




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: