EthanArbuckle / fairplay-decrypt

# IPA decryptor
Decrypt FairPlay-encrypted apps using a 16-byte credential
for the account that owns each IPA. Credential retrieval
gets it from a supported jailbroken device and writes
`credential.bin` to the chosen output directory.
Decryption runs on macOS and Linux.
Supports version-3 and version-5 SUPF, 448-byte and 440-byte SINF `priv`
records, and encrypted arm64 Mach-O slices. A 440-byte record must end in
eight zero bytes. The iOS 26+ license format is not supported.
## Set up
From this directory, with Python 3.10+ and a C compiler:
 [code] 
On macOS, `make` also builds the credential-retrieval bundle and requires
Xcode and `ldid`. On Linux, it builds the decryptor.
## Decrypt
 [code] 
If `--credential` is omitted, the tool reads `./credential.bin`. The output
path must not exist.
The decryptor uses each IPA's SINF and SUPF records to derive page keys,
decrypt its encrypted arm64 pages, and clear `cryptid`.