KBPK(ZMK): C1293E2C4A2F4073162CD0C2A8D5C8529D200BFD327CF48C
With KBPK, we can get KBEK and KBAK
KBEK: C1293E2C4A2F4073162CD0C2A8D5C8529D200BFD327CF48C XOR
454545454545454545454545454545454545454545454545
= 846C7B690F6A053653699587ED908D17D8654EB87739B1C9
KBAK: C1293E2C4A2F4073162CD0C2A8D5C8529D200BFD327CF48C XOR
4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D4D
= 8C64736107620D3E5B619D8FE598851FD06D46B07F31B9C1
TR-31 Key block: A0072K0TD00S00004FA6CD539532AE4DED4434FB9BE1243CC722E42AE1A42BF1D2671C18
TR-31 Header: A0072K0TD00S0000
Get IV from TR31 Header:
A0072K0T convert it to HEX: 41303037324B3054
TR-31 Encrypted key: 4FA6CD539532AE4DED4434FB9BE1243CC722E42AE1A42BF1
TR-31 MAC: D2671C18
After do CBC decryption with IV(41303037324B3054) get output data;
0080A4CBAE91D607AD3B4C736401E5D0B5D5C494C2B7D2C2
Plain Key Block: 0080A4CBAE91D607AD3B4C736401E5D0B5D5C494C2B7D2C2
Plain Key: A4CBAE91D607AD3B4C736401E5D0B5D5
标签:0080A4CBAE91D607AD3B4C736401E5D0B5D5C494C2B7D2C2,31,TR,C1293E2C4A2F4073162CD0C2A From: https://www.cnblogs.com/renren0113/p/17595734.html