Move Fast and Roll Your Own Crypto: A Quick Look at the Confidentiality of Zoom Meetings
To extract video for every participant, we first grouped the RTP packets by the SSRC (Synchronization Supply Identifier) worth in the RTP header. Every SSRC worth signifies a single participant. For every SSRC, we reassembled fragmented H264 NALUs in the right order utilizing RTP timestamps and sequence numbers, then decrypted them with the AES-128 key in ECB mode, then de-padded the decrypted consequence (utilizing the 4-byte size worth), and lastly wrote the decrypted knowledge to disk in a uncooked H.264 stream file. We had been in a position to play the file utilizing the following VLC media player command: