From e0a4e6edde1c77d3f856997e1c7ae399ca559ba7 Mon Sep 17 00:00:00 2001
From: Kenneth Endfinger <kaendfinger@gmail.com>
Date: Sun, 13 Oct 2019 00:32:00 -0500
Subject: [PATCH] Note the discovery of the length of the signed payload being
 before payload.

---
 .DS_Store                        | Bin 0 -> 6148 bytes
 registration/README.md           |  69 +++++++++++++++++++++++++++++++
 registration/cert.cer            | Bin 0 -> 2385 bytes
 registration/decode-request.dart |  11 +++++
 registration/request.b64         |   1 +
 registration/request.bin         | Bin 0 -> 1269 bytes
 registration/session.b64         |   1 +
 7 files changed, 82 insertions(+)
 create mode 100644 .DS_Store
 create mode 100644 registration/README.md
 create mode 100644 registration/cert.cer
 create mode 100644 registration/decode-request.dart
 create mode 100644 registration/request.b64
 create mode 100644 registration/request.bin
 create mode 100644 registration/session.b64

diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..7287d18e48d0ef8cde80d00902cbee4326f704a2
GIT binary patch
literal 6148
zcmeHK&2G~`5T0$*)=r=@5(hv?SmFSO0BKU_fs30aNR`Tu>WUut33hBX2FDxOPI8DM
zSv&w|1Xn2PV;}*~z+-UZ2(v$^4i1PDLTD%2{U)<Bv)(W3oh$&5=FnRMFaSWq#;{bz
zZjP{V)(Wy9Ehi8O&oP7;d`PxK+AVl1gJM82@UJnz-dzp4;J^S<$i2UANL?Ib2g6Nl
zm%njAZH~V?P6pEdt2+pTB(2pxlZD07((;O?mn(W@wW2?=dvt84PC87QPTVoh+kxl1
zPP`v@X>ZSu+Mz%4qr35rllt)k=DbH~hz>$`-1~t)?ii=HXp}lZ<i|Xp$nkJLh&(!O
z(qZH!++QZ=`aLJ@VIJ+G^)%xP&^5hdoSRIp)a%#Rt7g5?m{!fn#zw7bt~YK>r@E${
zy>x5$@$mVJSFhi^J$(1!BaZ`u#~hba5`VxaR0=eP2Wxhh_6OYQWb$R6PoK70k~;0$
zVe`VXqxYNh{k%W&8}xE>uCiaR_*^49jzSt8;22v^8FpYBwxA7nz{dV6^uc3Ccy0?E
zp<jLrtUw5qZ<`b`{>htdn3uT?qr)!d-Gmn0{!RXT#4;pUNMabVzL=e8x$H~0aVdU6
zQFvybdd3qUOUW?<ax-g{W0TSp1BwB~0B3-m4<<H-mc&dTKRU4ER{+Eknz^9Piw>g6
z42YJ*OdwiNhzLa#p+sIWhzLi!Dg7*onLrT^gwKq5<jh3gPzawL?Iw2zVhL2eVn8u4
z%fO=eYOwm>{`LKTHb{L_3@8TvD+WlZWw)BRBw1Svi(|Fc#P$Rm6Xur*<RRF}a?BN0
fiqBx<f@3CA5G{$BK(wH!KLVTv)hP!4Dg)mE`T5de

literal 0
HcmV?d00001

diff --git a/registration/README.md b/registration/README.md
new file mode 100644
index 0000000..3093bd5
--- /dev/null
+++ b/registration/README.md
@@ -0,0 +1,69 @@
+# Cache Registration
+
+Cache registration is the process that is typically necessary
+for Apple devices to use the cache.
+
+Unfortunately, the request that registers the cache seems to be "signed".
+
+I did however figure out that the length of the signed payload is a Big Endian 32-bit integer before the payload. Still working out the signature format.
+
+```text
+Registration URL: https://lcdn-registration.apple.com/lcdn/register
+```
+
+The un-signed request content looks like:
+
+```json
+{
+  "push-token": "fbFqxPukE8hfZD+Lbeo+E6390ih2lmY0I13apvLhZ6I=",
+  "ranked-peers": true,
+  "details": {
+    "capabilities": {
+      "ur": true,
+      "sc": true,
+      "pc": true,
+      "im": true,
+      "ns": true,
+      "query-parameters": true
+    },
+    "cache-size": 230000000000,
+    "ac-power": true,
+    "is-portable": true,
+    "local-network": [
+      {
+        "speed": 1300,
+        "wired": false
+      }
+    ]
+  },
+  "local-ranges-only": true,
+  "local-ranges": [
+    {
+      "first": "10.0.0.0",
+      "last": "10.0.255.255"
+    }
+  ],
+  "cache-software": [
+    {
+      "type": "cache",
+      "name": "Caching Server",
+      "version": "233"
+    },
+    {
+      "build": "19A583",
+      "type": "system",
+      "name": "Mac OS X",
+      "version": "10.15"
+    }
+  ],
+  "guid": "A14862D9-9643-4F18-B0BA-990BC2CAC0C2",
+  "local-addresses": [
+    {
+      "address": "10.0.0.20",
+      "netmask": "255.255.0.0",
+      "port": "51391"
+    }
+  ],
+  "session-token": "1570938452471~46E0EE91164ABF1E4D42F7C3DC51B0747AD1BC3E7C9073CB6230D8F2191C40D9"
+}
+```
diff --git a/registration/cert.cer b/registration/cert.cer
new file mode 100644
index 0000000000000000000000000000000000000000..b1669e69e2299121ee0c5a26dc3c90e06fe02558
GIT binary patch
literal 2385
zcmd6odsq`!8pboZNkRY>1a%Xc287BbISDLyLkLhYMFC+$SzOVOM2V0DlR*p>Gyy`F
zQY>N%3X~L9p~~Hsi=_%t7ErE&yHcJmNLhqM5w#Tr3OfPo%071ecmK#U=R5PAIq#gj
z^LrsI27@;TYW!-T#?EMQSO|-SsKAIwveWF+Oc_BCfq((wEJHvd;&^zXDV7(+G6k#j
z1=*C$iH?pE!Ca|;!Lk9?`bk4m+R~(#NREgPi3NN_ER({V7$ia_7b8lRIWW`r;Y^K|
z`T}J#1oq;94HiZ$7GSYmSX%(g$vG4)(ZQ<{sFL3-g7PL2l(&f30$dkGP{5LiAf*Bk
zNzfNTM2F=|ihn~tP($?Bj|U=PaB9c|gU*w&Y6!x7KWLJjbvtB}#?G+zi*=!_8;-_D
z90H*U8g5q25w{1}xWv^^WX4-?wY_VD3k|Ba-<Wmb4FA35@IkhrA3Hu}>X-JQiuG6L
zETdZATT!as{H*xIO+Q^_aNmw9i3HDC-+11qp=8Yo$Kx57R}_dU;}U<!_Ko$pHxV%2
z92sIj%=&;AZ#zvM`DV?7qRbahPK|gf-OYR0d8>|bHj!DR$0qxxpA~&I6=?MBv?Ee-
zk!xw$@gboo+3i|qLD40v<U{jK=BpF-4Y6V~u%v;6gyGb|hnx}%2mD~Y@-Kfr?oIr7
zo3FM$X{bW|4f`6NihHEq5#wss8I!MONjgbpnr>Sx4#Gf%sxqLu42;o3rkOy{0v?Y#
zO9M>wwW+=)033P&H2s7z-W+c>2^4~-k7*@sBP4d?j54lL91sC4^|!6?Yk~PGGy5*F
z&)H+7`JW;`VR&4e^4W9JAPl(Z8!Yim;0Wxso3yr?jS&bEy_Ly~jg4jS_2y&<WD@4$
zNWf>xQLixs@+h#9NM7`}KuE;m@mSR2%N>vYr4YvL!_%df6nbioZ(--OeT8Mjeacj>
zb)q@Wv8SrI%WJfJdzMX0>0O7LyLmwnw`=I@*^z#EclNh)IW2xQr`trDliqdT+uHdJ
z+#cwOAK)CFzS2M|AUoAPv~N<#XYb$IpU!mtDe|VjNlR*p$*gRnw5BY*c^F#@`|S_j
z&CRN`MiN>xGo91Ubr&^IdwO+c;_>|a4~8O|Z{2O8tA(79`QzQU8eg~^iS(YjqLIf5
zJuFyx^(8TrGfsQ|`5km5#C;M|cJ5DPUF%pFH3j=nYrx~!<)jId(*tnrgR9Cr<m<)*
zpOv2}&19U-`&;=!gUyqFoIOMBt9Ns0<IQaD$6yF7pe8t?bXc=Q1_NJ*j9s*xc<p~3
z*Z<AOxdag>_U{3U<>bWHL&O<4v7KL*K+K|n-=Utt<0xj{fqURThy)Q*S(NOsSfqeC
zXxFb4dmBK0Mc^{}ybj5?a^h>EBtfLex__NpIdh)QDC#+?f+M+{HM;(TaepnS*%QZ1
zZxpPc;@dLs4H~u7KHb+Lnen{6(nDuWE*hrUs8e?U&HhIgn<r8(e>b}8eQs<rqb4IM
zXHz_fpjG}{n$~D|FHig+x9Y2%UB2_AwE@<tfAq1Z^L!rdrRRB$<xQw=__Pnp$ae1j
z_IL1IwP~Zm?17GhK{+3-@9fnXA)@Qgl2Z=&rmQSTNtNvI;2FQjKi9_2Ox*iXYu$8M
z>$(FL4<d6;Z2e&&VxYI%nTI@_@*Smq8k78V&THX<w^g9~?9cD~m}u^Pjf}k5j+{F(
z?|vur%YYvlAMY}v+ibi01$T)PYUnC@Qq`}4;EuJ`?D%N<>7%(x6X6QCu`p{A6HxTu
z`64*50J97WZ{&s=S|ksQS3?B!@eokWzYH{ikbqW`;9a7DJrT{e6<Ele`oEX~R5xC=
zVu7lfqPh|&iW2js0uhYn8WJH^z=Bs%CxXM3Fkh;Kqxo_K9Vrws64Y6Ifj|_EEUh_&
zt`X^fQdo~AG$6y#2vwkWg?zaXMnrN6x<D#~1v05ntPf8GEIS0pC`1m+Hj0*^YxSF<
zov-%SM{Ts6FF?eoJoK4psEMSAf&rLIpnMmg2G`QHux7){mquy$Iw%#Wo<%|~LpMPS
zO#een3Zy6aZ$L9%StO8hwq0xNs7#xY0J!!l7o2gU@jB{sj=tedw>+NL)K@;gb8)5=
ziu9+pm38cd7j#z|9Af>uOucufH1i!zn%le>u3KGyDa$^;x|&;YDYhp__4%pxq<+OE
zpJF)JMb~#>jIy0hQ$BuB;ZKSWo2{Z3R!>=NBqb_~or9A`-YcblN#*4hFfFU!sav>b
z(yAaGo5WeHJ3Ur7H{yBwfKc;!T7<h!8{*lUe@yb(^@gc_Gh{BbSlxVaE;!Y-rbV7x
zpX1%VbLbQ6zLU1fCrDjWRfX=p4RLs({DNU$;fBxpy))Xze6eiYNZ|7#yHG3VE}F&D
L@qg)*<gtGPTlaa%

literal 0
HcmV?d00001

diff --git a/registration/decode-request.dart b/registration/decode-request.dart
new file mode 100644
index 0000000..8fadfc5
--- /dev/null
+++ b/registration/decode-request.dart
@@ -0,0 +1,11 @@
+import 'dart:async';
+import 'dart:convert';
+import 'dart:io';
+
+Future<void> main(List<String> args) async {
+  var signedRequestBase64 = (await new File("request.b64").readAsString()).trim();
+  var signedJsonContent = base64.decode(signedRequestBase64);
+  var jsonContent = const Utf8Decoder(allowMalformed: true).convert(signedJsonContent);
+  jsonContent = jsonContent.substring(jsonContent.indexOf('{"'), jsonContent.lastIndexOf('"}') + 2);
+  print(jsonContent);
+}
diff --git a/registration/request.b64 b/registration/request.b64
new file mode 100644
index 0000000..58f758f
--- /dev/null
+++ b/registration/request.b64
@@ -0,0 +1 @@
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
\ No newline at end of file
diff --git a/registration/request.bin b/registration/request.bin
new file mode 100644
index 0000000000000000000000000000000000000000..c29d9bf91321b69358210339e643d4f5d14ad09c
GIT binary patch
literal 1269
zcmY*Z4NMzl7``DW7?~z>PTe$k+Z;c=de`e+dsQLrwdKbWaFC3jAi1{J_Mo)o?z&n_
zg;~fPVGPi0GX^rID<Gno3c{9QNOgjf$sj`(H)gVg3|YWA1)>Y_D}^q*zkKiez4yG&
z^L$^vnAoxUAJ5%xNM<^ZiJb$Vl*b%HcHi6{KfU(e%4?$|ZFvwBI}ry#&=&C2y_Dbb
z=BT72VfDzl9pk^<yWs1(^xVwdAMTE9P46ojYftM;?6#&(KCfwwf2wrb(DF|D^WcrR
zY;R%h{XeE=s8B{g%!cNtD_$kiL+zT0??~gFv6`|gfqhR~n%kZkDEszEZ&vStT`RRs
zBZW8X6MEUXIpTOima*m1ue}R(H5u6D!T!~T;L(5k%U9RNr*{QTRtHz!O8EYe*fD#*
z;p~|#%R<SG#`*de|MD%y`kR75>CVZX-ptUop%2x=w^nny*pAG)^F(HIjQ16jai(C{
z9)D!7$~>w=G^u_2K5c&dn<o0+=zoUO4bsEgYTItn(jkM#n7=Sr^H|p}{R>-R1DSCC
z0|W8I$=syFh1L@i&+Sv&7nb8wVDay+^ht;I+37QlCdWYX6~)(eAAh7sOe2KrjX}e(
z{lxsmIcCx|`&nyf?PB@vVtUZ>WxIYy1)lok)xpAmwdbqFsr|<*UYICec0Xzh75%i-
z_%gKiPx9rYL+Yixvu}`#e|q~$6Co&O(FeQSf(;R!m8=6+!4{*w`t5vorA}$HlxWio
zM%J08BXJ7lY%+UQF`A9xjO(DmRzhaK4ohI3aa6Kq#Kp3_0INja%}QW1D>9rNgg)5B
zxELd6=R}TOkKO!ckzm>!xuPSkYBT4Ef>pa&-ix>xo~dHRXcNB#K$~nVB5?1puu6ub
z(Mtj|CdB3Ru+dhW0AgNbjCN2Op=fuS7(3!%MURuOgjJ<JSO5~tunGf664=A>;lRS!
z1=e2%nnmh?SSu?aPKVw5Fi>P-9mm4)f(U%XQ0e*&JhC$nGBSdYf*1CeMHM(LqKDxD
zHNZmjy1*c!4gBc<qCrRlshq=_RKW5Ffh-9Oz5?eAFP99*VZX!&8{M28ForQoO(=0t
zvVkOc1(B_K0F}#_lJW|YiXH+1T(JlxtD6g>s4=;clxZo1BIP(D*JDaVgKE?WMWGs6
zMyqL*mH~u_D~#F9vw{#_V4z?l3R8(VAVb65S+R-{fYb1X0bz4MKD;g<NnkjIt$PAs
z!pfrC5hD~Rg)8NROs>G*m6JMDr=u{8l&dv*OefdMWqJjTYiR=0pbEJ{t;IAnu2awy
zs=#Rt2{wjSsh43CM$1tx1^dCtlecBKBd0ruy>lVN?G2_(UzMH;u-#ySjEhSg#~^n@
z%2C1c#Ut01@q5ZncaYbHGHmbf@0rbO#R3Opo~hhW@rbi!l?hI|LO=gLz63%413paN
Ak^lez

literal 0
HcmV?d00001

diff --git a/registration/session.b64 b/registration/session.b64
new file mode 100644
index 0000000..f78591a
--- /dev/null
+++ b/registration/session.b64
@@ -0,0 +1 @@
+AQhLLJFIHZt9oAcmx7kv90Q4KuOi7BdYPH0bANUqB0bIwG02tZSTwsV8lN3y9bIaGLJ0r9sewtGagjFdRUw1pDSOqcGxBJi9QGohoCBB1LAA5UBS/PXgJjaieRfiPEZL5JD3pK6PO7cGiPTbwAolPSaULPq/WbAorXRtO4W+1z6CZJ3cw/7MAjDT+Nb6+U5RhdQTXl3KRjyZxarwDfdFqT3PL6WRfk5NxeSUDmdh67W+D8QxXJM4jrPncdwrToC6RFyTm2FfAw059JOS1TB4zqo9ILUJCC4GdyGviCqCHOUF+ZiJrGi+oXp2FO05I7PY/EMlCjZvGydevxQCe/lh62bdRQz0UJRthVa8a7BCOCvG07WEezzDz01YAAAAIL1DLA+wcmVl/jeeNqW/+xXQwT2hCzc2WS6aodkxZTNPViDq38W2fZxEbrV4XMLFdYogbuI=
\ No newline at end of file