Slashdot Log In
HD DVD's AACS Protection Bypassed
Posted by
kdawson
on Sun Dec 31, 2006 05:11 PM
from the 8-days-to-a-crack dept.
from the 8-days-to-a-crack dept.
Mr. BS writes "Playfuls.com is running a story how HD DVD's AACS protection has been compromised. Although the video of the hack leaves much to be desired, the source code has already been made available. Feel free to start backing up your HD DVD's whenever you feel the need."
Related Stories
[+]
Decryption Keys For HD-DVD Found, Confirmed 473 comments
kad77 writes "It appears that, despite skepticism, 'muslix64' was the real deal. Starting from a riddle posted on pastebin.com, members on the doom9 forum identified the Title key for the HD-DVD release 'Serenity.' Volume Unique Keys and Title keys for other discs followed within hours, confirming that software HD-DVD players, like any common program, store important run-time data in memory. Here's a link to decryption utility and sleuthing info in the original doom9 forum thread. The Fair Use crowd has won Round One; now how will the industry respond?"
[+]
Blu-ray Protection Bypassed 407 comments
ReluctantRefactorer writes with an article in the Register reporting that Blu-ray copy-protection technology has been sidestepped by muslix64, the same hacker who bypassed the DRM technology of rival HD DVD discs last month. From the article: "muslix64's work has effectively sparked off a [cat]-and-mouse game between hackers and the entertainment industry, where consumers are likely to face compatibility problems while footing the bill for the entertainment industry's insistence on pushing ultimately flawed DRM technology on an unwilling public." WesleyTech also covers the crack and links the doom9 forum page where BackupBluRayv021 was announced.
[+]
Interview with Developer of BackupHDDVD 223 comments
An anonymous reader writes "HD DVD and Blu-Ray were supposedly protected by an impenetrable fortress. However a programmer named "muslix64" discovered that this was not the case, and released BackupHDDVD. Now, Slyck.com has an interview with the individual responsible, who provides some interesting insight to his success."
[+]
AACS Device Key Found 351 comments
henrypijames writes "The intense effort by the fair-use community to circumvent AACS (the content protection protocol of HD DVD and Blu-Ray) has produced yet another stunning result: The AACS Device Key of the WinDVD 8 has been found, allowing any movie playable by it to be decrypted. This new discovery by ATARI Vampire of the Doom9 forum is based on the previous research of two other forum members, muslix64 (who found a way to locate the Title Keys of single movies) and arnezami (who extracted the Processing Key of an unspecified software player). AACS certainly seems to be falling apart bit for bit every day now."
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Dupe (Score:5, Informative)
Re: (Score:3, Interesting)
Actually... (Score:5, Funny)
Parent
Re: (Score:3, Interesting)
You should pay more attention before you "correct" other people...
The source was linked in the Doom9 thread the
Re: (Score:2)
Dupe (Score:2, Funny)
slashdot seems to be posting stories more than once to demonstrate
the real effect of deja vu on the jolt drinking, halo playing, pornography
downloading whacked out crowd it caters to.
Re: (Score:2)
"hey, cool, the new-fangled dvds have been cracked, I'll read about it now.. Oh wait, the youtube video in the next tab is starting"
(2 minutes later)
"That sure was funny, now back to the porn"
(two days later)
"hey, cool, the new-fangled dvds have been cracked..."
And the winner is.. (Score:5, Funny)
Re: (Score:2)
Re: (Score:2, Informative)
http://en.wikipedia.org/wiki/AACS [wikipedia.org]
"The specification was publicly released in April 2005 and the standard has been adopted as the access restriction scheme for HD DVD and Blu-ray Disc."
Blu-ray IIRC had room for additional DRM methods as well.
The source is not for the "break" (Score:5, Informative)
The author is waiting till some time in the new year to reveal how he got the keys, but the evidence suggests to me that he used some kind of debugging hook into Power HD-DVD.
Even Worse (Score:2)
Re:The source is not for the "break" (Score:4, Insightful)
Parent
Dance Dance Revocation (Score:3, Insightful)
Which will be the first revoked key.
Re: (Score:3, Informative)
There's a difference between the title key and the player key. The title keys are used to directly decrypt the contents of the dvd (or hddvd or blu-ray), and differ between discs. They are not revoked because they are never reused to begin with. The player key is what's licensed to the companies and stored in players. This is the key that allows access to the title key, and if
Re: (Score:3, Informative)
But if that were not the case, wouldn't it be trivial to make an image and distribute this rather than the unencrypted movie data, since people can just burn the image illegally and play it in a liscensed player to accomplish the same goal?
Even in DVD-R, the consumer burners can't burn the player key block, which is preset to the unencrypted state on all consumer blanks. Special "authoring" burners are prohibitively expensive for the typical low-scale pirate's business model.
It needs a name... (Score:5, Funny)
Should read: (Score:5, Funny)
To be honest, I've missed the dupes (Score:3, Funny)
Re: (Score:2, Funny)
Ironically.. probably a boost for the format (Score:3, Insightful)
Par for the course (Score:4, Insightful)
Maybe they could charge less if they didn't take the time or spend the money developing newer DRM?
Re:Par for the course (Score:5, Insightful)
Maybe the movie and music moguls are duped by the inventors and purveyors of these harebrained copy protection schemes. The latter KNOW that the laws of physics and mathematics GUARANTEE that *any* copy protection scheme WILL be broken. After all, in order to use the content, the key has to be given to the consumer in order to play it. There is NO way to hide a key, if it is needful to be able to use it at some point in order to view the movie or play the music. Perhaps some sane crypto expert can convince the content producers that they have been lied to by these crooked, money grabbing "experts" who know deep down that none of their schemes can ever work for long. The hollywood and the music industry have been sold the equivalent of a certain bridge labeled DRM by these companies who make money selling their DRM schemes to the content producers. Content makers would likely make more money if they did NOT pay these liars a dime.
Parent
Re: (Score:3, Insightful)
DirecTV (Score:2)
Tell that to people trying to pirate DirecTV signals. Have the P4, D1, and D2 access cards [wikipedia.org] been broken yet?
Re: (Score:3, Insightful)
Ah, they don't want the protection to be completely unbreakable. They just want to make breaking the protection costing too much for average Joe to make copy of DVD to his friends.
The real value of a DVD for Joe user is something along the line of 20-50$ to purchase and will cost probably around 5$ to rent. If the protection is worth more than 5$ of pain for Joe user, then the mission is alr
Hello? Article submitter? (Score:5, Insightful)
Not only do we skip RTFA quite often, the article submitters seem to as well.
What he says in that quote is simply not possible; you still need the keys, and that hack doesn't cover that problem.
We may have something for that too in the future, but this is not the hack for piracy-at-will.
Re: (Score:2)
You mean this is not the hack for extracting your legally purchased content into a sensible format that allows you to skip all the mandatory previews etc. and actually watch it without shackles.
Re: (Score:2)
Re: (Score:2)
PVP-UAB (Score:2)
Windows Vista has a mechanism where media files can request decryption in the video card. See Protected Video Path User Accessible Bus [wikipedia.org].
yes, it's a dupe... (Score:2)
Hey MPAA/RIAA cretins! (Score:5, Informative)
Don't you think it's high time that you quit trying to block Fair Use now, especially since the real pirates in China are totally unaffected by DRM in the first place?
Thanks for listening.
Signed,
A paying customer
Re: (Score:2)
Re: (Score:2, Insightful)
Fair use doesn't give you the right to break the encryption on copyrighted works.
Sure doesn't. But did you also know that copyright restrictions don't even apply in the first place if you are using the media for private use. Copyright only comes into play if someone is trying to publish the work of someone else. It's not even fair use to be able to do what you want to with your legally purchased DVD in your own home, in fact, that's just called plain old use.
No matter how much bullshit these companies try to control your every move, realize that once I purchase that little plastic d
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Because 1201 nullifies 107, 108, 109, and 117 (Score:3, Insightful)
Unfortunately, there are any number of people in the world who feel perfectly empowered to illegally copy and distribute whatever material they want. What, exactly, are these people - who spend millions upon millions of dollars to generate this content (well, at least in the case of movies - music, apart from marketing, has relatively low overhead) - supposed to do to try to prevent this?
Unfortunately, there any number of people in the world who feel perfectly empowered to use litigation against others who reuse their material in critical ways, to withdraw material from distribution, and to make material that has been distributed useless. What, exactly, is the public - who spends millions upon millions to preserve this content - supposed to do to try to prevent this?
A problem occurs when the conditions imposed by digital restrictions management interfere with the public's right to mak
HD-DVD is -NOT- cracked (Score:5, Informative)
So at most, you'll be able to 'back up' (or Pirate) the current batch of Full Metal Jacket HD-DVD's to play on an older version of PowerDVD.
So dont go around yelling about how HD-DVD is cracked, cuz it's not.
Here's an article that has a few more facts and less sensationalism.
http://videobusiness.com/article/CA6403011.html [videobusiness.com]
D
Re: (Score:2)
Re:HD-DVD is -NOT- cracked (Score:5, Informative)
And when PowerDVD is re-released it will have to load its brand new decryption key into memory and use it to decrypt the data from the disk. If they're smart-asses, they'll only use the decryption key for key setup or even completely skip the AES 128 key and directly build the AES decryption key schedule by some other obfuscated process. If they really want to get wild, they'll continually decrypt and reencrypt the key schedule so that its never fully intact in memory at any given point in time, and integrate the last decryption steps into the first huffman decoding steps for the mpeg process (since it's just a bunch of XORs) to further annoy crackers. Unfortunately, the fact that unencrypted material ever exists in PowerDVD proves that they must have the entire AES decryption key schedule available for any given decryption, and it will be relatively trivial for crackers to pull the key schedule out and just pick the first 128 (or 192 or 256) bits of the key schedule which is the original AES key. Trying to hide encryption keys within an executable's memory space is probably one of the silliest ever conceived. All an attacker has to do is try every K-bit (K is the size of the key) sequence of memory as a test key at several points in the program. That is in fact what this article's attack accomplished. The key schedule can be dynamically encrypted and decrypted as each word is required, but this is just a stopgap measure and slows encryption down significantly.
Parent
Re: (Score:3, Interesting)
CSS also uses different player keys. The three big differences between AACS and CSS is that AACS has many more player keys (CSS only had ~400), once one player key was discovered, you could easily discover all of the other player keys, and weaknesses in the encryption algorithm made it possible to discover the title keys without any p
bogus reasoning (Score:2)
It only takes a single compromised player to copy content, and once compromised, that player can be used in perpetuity to rip any and all disks published up to that point. There is no way to undo that.
Furthermore, if players like this get compromised every few months, we know that it's a fairly high probability event. Together with the previous observation, that means that pretty much every disc w
Cost Effectiveness? (Score:2, Insightful)
Feel free to start backing up your HD DVD's whenever you feel the need.
Is it really cost-effective to do so at this point? HDDs seem to be at around $0.25/GB best case, so we are talking about $7+ per movie. That means 1/3 of your collection would have to be destroyed just to break even, assuming you value your time outside the office at $0/hr.
Maybe people are backing these up for other reasons such as skipping the 10 second FBI warning or saving the 20 seconds it takes to locate a disc and physically place it in the player?
I really don't see the utility, especially when
Re: (Score:2)
Re: (Score:2)
Since HD-DVD and Blueray are proposed for High Definition TV's (720 and 1080 using interlace or progressive scan) you will notice the difference between Standard Definition TV and HDTV. Consider a small HDTV (normally 720i,p) at approx 12in (30cm) you can hardly tell the difference between SD and HD content but now consider a 40in (101cm) and above HDTV (720p,i or 1
Universal availability (Score:3, Insightful)
If I paid for the content, I feel I'm entitled to play it when and where I want. That includes on my cell phone, my mp4 video player, streaming onto one of my pc's from my server, or even on a monitor that's attached with a VGA cable instead of a HDRM cable. And I feel I'm entitled to keep it safe from harm, watching the related movie while the shipping container disc is secure in its plastic box. I'm also entitled to watch just the content and skip the advertising, FBI threats, extras, menus and other c
Re: (Score:2)
because this so-called "hack" is based on the published algorithm for AACS decryption? what matters is where and how he got the keys.
Patience, young Jedi. (Score:2)
That will come later. Each piece of AACS shall be disclosed and disseminated in its own time, on a schedule that limits the ability of the MAFIAA to enforce the standard form contracts [wikipedia.org] encoded in the DRM system against customers.