![]() This now has a different table structure than what you used in your software, so even after decryption, I cannot use your tool on this database. After you did this, you obtain an unencrypted SQLite database file (like "msgstore.db" from "/data/data/com.whatsapp/databases"). So you skip 67 bytes into the file "*.db.crypt7", then start using AES decryption in CBC mode with the key and initialization vector you extracted from the key file. The "*.db.crypt7" files have a 67 byte header (that I have no idea what data is stored here, but it seems you can just ignore it). In this file, the last 32 bytes (256 bits) are the AES encryption key, while the 16 bytes (128 bits) before that are the CBC initialization vector. The key file is stored under "/data/data/com.whatsapp/files/key" (need root access for this!). It uses the AES/Rijndael block cipher in CBC (cipher-block chaining) mode with 128 bit block size and 256 bit key size. In case you want to decrypt the new "*.db.crypt7" encryption scheme. The export format is very basic plain-text only though (not the sophisticated HTML export that WhatsApp Xtract provided), so you really only wanna use in-application viewing.ĮDIT2: To the creator of this software. It can decrypt the "*.db.crypt7" file with a key obtained from "/data/data/com.whatsapp/files/key" (you need root access for this!) and display conversations, as well as image-thumbnails. Seems the database tables have new internal structure as well so the database queries that the Python script performs fail on them.Īny updates to be expected? I love this tool for WhatsApp backup.ĮDIT: As a quick solution, in case you only want to view your WhatsApp history from the "msgstore.db.crypt7" you obtained from your device, you can use the tool WhatsApp viewer. ![]() However, even by grabbing the unencrypted "msgstore.db" and "wa.db" files from "/data/data/com.whatsapp/databases" (you need root access for this!), you won't get this tool to process them. These seem to make use of a new encryption scheme that this application doesn't appear to support. ![]() These use files callled "*.db.crypt7" (instead of just "*.db.crypt"). I think it doesn't support the new WhatsApp versions. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |