CalvinBackup/AppleCache
1
0
Fork 0
mirror of https://github.com/azenla/AppleCache.git synced 2026-08-24 11:22:35 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add a new research section for the signature format.

Browse Source
This commit is contained in:
Kenneth Endfinger
2019-10-13 00:38:36 -05:00
parent e0a4e6edde
commit 7b062cfbca
3 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
signature/README.md
+11
View File
@@ -0,0 +1,11 @@
# Signatures
Unfortunately I'm not super familiar with signature formats and such in the Apple Ecosystem.
However using a HEX Editor and a lot of coffeee, I'm confident I can break the signature algorithm.
The signatures of the request seem to have two parts, a longer top part, and a shorter bottom part.
The payload is in between these two parts.
A 32-bit big endian unsigned number represents the payload size, and directly following the payload is a 32-bit big endian unsigned number representing the remaining bytes in the signature (however do note that there seem to be two trailing null characters).