I whipped up a quick PHP script that allows anyone (even PC users like myself) to search the iTunes Music Store. Sound clips are in Apple’s proprietary M4P format, so don’t expect to be able to listen to them unless you have iTunes installed.
Update: Apple seems to be encrypting (or compressing?) their XML now, which breaks the script entirely. It doesn’t seem to be gzip-encoding, either. Any guesses on what they’re up to?
February 10, 2004: Someone sent me the e-mail below, discussing how they figured out the encryption. This is a bit above my head, but other people may find it useful.
April 17, 2004: Someone finally wrote a script to work around iTunes encryption. Go play with iTMS-4-All.
Last year you had a blog entry about Apple encrypting the iTunes Music Store.
I didn’t see any follow ups on this, so I don’t know if anyone cares anymore, but I’ve figured out the encryption.
The encryption is standard AES128 CBC. The iv, of course, is sent in the header, and the encryption key is:
8a 9d ad 39 9f b0 14 c1 31 be 61 18 20 d7 88 95
After decrypting, you’ll end up with a gzip file.
The key is actually generated from the following code snippet:
(using openssl’s md5)
unsigned char key;
// key contains the AES key now
Hope this helps revive everyone’s ITMS interfaces.