nuitgaspard

Jap...Checking for ID3 is not good enough in checking for correctly decrypted MP3. Brute Forcing with only small letters, you get approx 43k possibilities with "ID3" as the first 3 letters, that makes ~10% of all 26*4 possibilities. Jap, you only have to decrypt those 43k possibilities, but you have to look at the whole file.

Even if you have garbage in the file, it is not the correct file, as the codec will ignore it, and the output is garbage.

I haven't tried how many of these 43k actually work, or give you at least partialy good result.

There have been multiple devices. I have been looking into the jooki box as well, which is quite hackable, tonibox is nice hardware (with already good firmware replacement), yoto is weird.

Agreed :) the problem is though, that you have to decrypt the whole file everytime and not just a few bytes, which makes this still a little bit longer. You get files, which identify as mp3, but are garbage, and have to check multiple frames.

But agreed bruteforcing 2*32 key is possible. The "way to many" was: "Way to many " for my taste.