BackupHDDVD, a tool to decrypt AACS protected movies

[muslix64]

Hi everyone.

I was not aware of anyone having done that, so I did.
BackupHDDVD is a tool to decrypt a AACS protected movie that you own, so you can play it back later using
an HDDVD player software.

This is the first version, and it's not very stable yet.

This software don't provide any cryptographic keys, so you have to add your own keys.

Watch:

http://www.youtube.com/watch?v=_oZGYb92isE

Executable and source code:
http://rapidshare.com/files/8318838/BackupHDDVD.zip.html

Please read the FAQ before asking me any questions.

Merry Christmas everyone!

[linx05]

Is this for real? Can anyone test this?

[Adub]

I can verify that there are no viruses. I am reading the faq right now.

Even comes with the source.

[muslix64]

This is real, any good java programmer can confirm this program make sense, and all that is missing is the decryption keys.

Take a look at the FAQ file for details...

I already have a version that works with volume key instead of title keys. Even more powerfull!

Version 1.0, with volume key support should be out on january 2.

[linx05]

Yeah, I've gotten that far too. It just seems too simple. We've all read the many news articles about how AACS cannot be decrypted but here is this program, so small, claiming it can do that.

We'll see.

EDIT: Very nice

[chadamir]

Spoke too soon watched the video. Where do the decyption keys come from. I've thought about it and have no idea.

[Adub]

supposedly the decryption keys come off the disk. well actually they are encrypted, but when played the keys are decrypted, the rest is kind of left a mystery by the author. Let's see what happens on January 2nd.

What sort of HD DVD drive do you have, muslix64?

[muslix64]

I have a XBOX 360 external USB drive on my PC.

[muslix64]

The Saga of decrypting an AACS protected movie, by Muslix64.

December 6:

I just bought a HD-DVD drive to plug on my PC, and a HD movie, cool! But when I realized the 2 software
players on windows don't allowed me to play the movie at all, because my video card is not HDCP compliant and because I
have a HD monitor plugged with DVI interface, I started to get mad... This is not what we can call "fair use"! So I
decide to decrypt that movie. I start reading the AACS specification I have found on the net. I estimate it will take
me about 4 weeks of full time job to decrypt that. I was wrong, it was in fact, easy...

BTW, when I disable my HD monitor, I can watch the movie,on my old VGA screen, but, what is the point of having
a HD monitor and not being able to watch a HD movie on it!

December 7 to December 12:

Nothing, I try many things, but I'm going nowhere. I change my technique

December 13:

Now I focus only on title key. I was very surprise to realize that the title key is there, in memory! Can it be
that easy? Around 7PM, I decrypt my first movie "pack". Around 11PM, I have now a totally decrypted movie! But there is
a problem. Frame skipping.

December 14:

After many tests, I found a field in the Nav pack, that fix the frame skipping problem.
Wow! Now I can watch a smooth playback of an HDDVD film that I have decrypted!
After only 8 days of work, I was able to decrypt an HD-DVD movie! What's the problem? There is a major
security problem somewhere.

December 15 and December 16:

I put together a small program called "BackupHDDVD", a java based command line utility to decrypt movies.

December 17:

I made a small video called "AACS is Unbreakable" where you can see the output of the program while decrypting.
You can also see a playback of a decrypted movie.


December 18:

Upload that video on YouTube
http://www.youtube.com/watch?v=_oZGYb92isE

December 20:

Upload the program and source code on RapidShare (V0.99)
http://rapidshare.com/files/8318838/BackupHDDVD.zip.html

December 21:

I want to go further in the decryption, so I decide to track down the "Volume unique key" instead of title key.
I found it also! I'm preparing BackupHDDVD V1.00, that will support volume key and title keys.

December 25:

Merry Christmas!

December 26:

I create a thread on the Doom9 forum about BackupHDDVD. People don't believe it...

[strider01]

Hi Muslix64... could you please upload this to an alternative download source besides the infamous rapidshare? Unfortunately, I'm not having much luck with it... i just got an invalid download session after waiting 23 mins,,and now it wants me to wait 49 mins...grrrr

[bourtzovlakas]

Try this one...
http://zavlakas.googlepages.com/BackupHDDVD.zip

[CruNcher]

muslix64 nice work, but you know as good as me and everyone else (including Hollywood and the Content Industry) here that without a Secured PC Platform it will allways be possible to catch the stuff somewhere. The major error by them was to bring it to the PC in the first place, that way it would have been more likely unbreakable and i don't remember they ever said it's unreakable either.
They wouldn't implement something as the revocation possibility if it was (in certain enviroments), and in terms of encryption their right AES-128 isn't (officialy) broken yet. I just waited for someone to announce this, hehe seems this time it's PowerDVD, last time it was Xings Player :d wonder how fast this will go arround for sure it allready reached Microsoft and Toshiba by now :D

Ah and a late Merry Christmas too everyone and thx for your efforts keeping the Fairuse Balance, god bless ya :)

[Adub]

I like your journal. And good idea about the Xbox 360 drive.

[appleguru]

Now just make me a mac version and I'll be happy (actually, it's java.. so I guess I need UDF 2.5 drivers for os x...)

[XStylus]

Make sure you've taken appropriate measures to protect your identity, muslix64. You've done great work, and I'd hate to see you become another victim in the DRM battle.

IMO though, you should've sat on this fix a bit longer. HD-DVD is still in first gen with little market penetration, so it's not too late for them to tweak the HD-DVD spec. Or worse, the studios could jump ship and go Blu-Ray exclusively. Wait until one of the formats hit a penetration point to where there's no return, then drop the bomb.

But anyway, what's done is done, and I hope this fix stands the test of time. If so, I know what format I'm buying.

Time to tinker with Blu-Ray anyway though, just to make sure the studios don't have anywhere to run. I'd buy you a Blu-Ray drive for the effort if I had the money.

[Deihmos]

This is interesting. Was it wise to put this video on youyube? How long would it take for a law suit to be filed? I totally agree with XStylus..this could cause many studios to jump ship from HD DVD and sign up for blu ray as it has two layers of protection. Thanks a lot.

[djdafreund]

Hey thanks SO much muslix64!!!!!! My friend just bought an XBOX HD-DVD drive yesterday when i was over there, and watched some 'Full Metal Jacket' and some 'King Kong'. THe Fullmetal Jacket wasn't so much WOW as it IS an old movie (Albiet a really good one!)
But he had the original dvd to compare, and still see a nice difference in quality either way. The King Kong was much better of course, Kongs hairs blowing in different directions, so sharp in detail.
I was just telling him yesterday while messing around with things, "I betcha someone will crack it and make it possible to copy it pretty soon already." Boy, your fast though!!!!!!!!!



Thankx SOOOO much, as i might be getting one soon myself now after seeing the quality of them, and i get HD-DVD's through work and such. Can't wait for the Jan. 2nd version!!!


Thanks for the hint at the end of the video ;-)

[Deihmos]

supposedly the decryption keys come off the disk. well actually they are encrypted, but when played the keys are decrypted, the rest is kind of left a mystery by the author. Let's see what happens on January 2nd.

I think he gets the keys from powerDVD. I am sure they will get some heat because of this.

[hajj_3]

Yes, protect your identity and IP. use proxies, firewalls etc etc.

dont release loads of versions, wait until your next version you release is perfect. the less releases the less likely you will be caught, we dont want you being sued for $10m.

Keep up the great work, i wouldnt have shared the source code just yet as they can change the code in future players and discs to stop this. i would have just created the code and then in 6 months release the code when hd-dvd players are more standard and more titles are out.

I'd delete the link to the sourcecode, ask people to stop sharing it and just release the executable for the time being we want as many hd-dvd's ripped and put out by the scene as possible.

please can you show some screenshots off the directories as your video showed a movie file that was about 4gb, unless its really short like a "making of" then surely a movie would be 10gb+.

this guy has done some serious coding!!! even the documentation is nice:)!

I could see hd-dvd getting hacked to death like the 360 firmware, once the hack has been released into the wild load of others will disect and improve it, this could be the next smartripper:)! hope slysoft anydvd incorporates some of this:)

thanks alot, keep up the FANTASTIC WORK!!!

[Devinator]

Make sure you've taken appropriate measures to protect your identity, muslix64.


I agree. Not only would the people behind draconian copy protection BS sue you, they would disapeer you if they thought they could get away with it.

[hajj_3]

I agree. Not only would the people behind draconian copy protection BS sue you, they would disapeer you if they thought they could get away with it.

they could then make a movie about it, maybe something along the lines of "Leon The Professional".

[CruNcher]

I'd delete the link to the sourcecode, ask people to stop sharing it and just release the executable for the time being we want as many hd-dvd's ripped and put out by the scene as possible.


:eek: :eek: :eek:
that's maybe what you wan't, but definately not the author of this decrypter or anyone else here on doom9.

and about the "protect your id thing" why should he, he did nothing wrong and nothing the industry didn't except to happen.
And everyone involved in AACS knew this would happen, their is no way to protect against such stuff on the PC Platform as we have it today, see all the HD-DVD/Blue-Ray Player and PS3/XboX 360 those are Platforms that can be called Secure but the PC isn't yet but industry is working on it to make it more Secure the first steps are made TPM 1.2 and Vista more will follow in the Future.

[hajj_3]

:eek: :eek: :eek:
that's maybe what you wan't, but definately not the author of this decrypter or anyone else here on doom9.

and about the "protect your id thing" why should he, he did nothing wrong and nothing the industry didn't except to happen.

i think their lawyers would disagree!!! the industry has accepted it will be cracked, however its still illegal and they will indeed hunt him down.

i dont want this guy to end up in jail for 5yrs, he's done a great job:)

[djdafreund]

I love it. It IS 100% LEGAL (Read you lawbooks on this!!!) to make a COPY of media you OWN (Reason why he did this, as he said, the media is VERY touchy to scratches.) "An individual is allowed to make 1 copy, per for archive purposes, of the media he owns. You, however, are not allowed to sell the copy, per said, for profit. "

It is the same reason ALL the dvd copy (ALL LEGAL) software, as well as all CD backup software/Music CD backups, Audio rippers to devices ('Because you own the original' in there eye's).

It's irritating to still watch people "Eh-eh-it's against the law!!" when they clearly don't understand the law one bit and THINK by assuming what they hear or there own believe's. I've actually asked the written law with my lawyer and how it's translated by definition in the courts systems. And more or less said the same thing i researched on the internet myself. I would agree to not post the source, so they don't learn so quick their mistake's however, and keep it the execution file/docs only.

Moves to rein in the DMCA have been initiated in the U.S. Congress, where at least two bills have been introduced that grant exemptions for consumers who crack encryption for certain legitimate purposes--for example, to make a backup copy of a legally purchased DVD.

[daddy_fizz]

Yeah, because it turned out so good for Lightning UK when he didn't release the source code and they came after him for DVD Decrypter...

I would take the advice to play it safe and do what you can to protect yourself, and get that source code spread across the net as far as it will go...

~Fizz

[XStylus]

Moves to rein in the DMCA have been initiated in the U.S. Congress, where at least two bills have been introduced that grant exemptions for consumers who crack encryption for certain legitimate purposes--for example, to make a backup copy of a legally purchased DVD.

Sure, whatever, that's nice. But until those bills are passed though, breaking a copy protection measure--even for the purpose of asserting a perfectly legal right--is illegal and punishable by prosecution. Thus, heroes the likes of DVDJon and now muslix64 need to make sure their identities are protected. The two **AAs have been churning out lawsuits against good people for a couple years now. It's easy for them to get YouTube or some other site to cough up an IP addy on this guy.

I'm also doubtful those bills you speak of (assuming they are reintroduced when the new congress convenes) will be passed anytime soon. Past history has shown congress to be very friendly to the media industries. For example, it's the US that is holding back Russia's entry into the WTO, and AllOfMP3.com's existence is cited as a primary reason.

[OverlordQ]

I think he gets the keys from powerDVD. I am sure they will get some heat because of this.

the 'nice' thing about ACSS though is they can revote PowerDVD's current key which will not allow any future media to be decrypted w/o updating PowerDVD :)

[XStylus]

the 'nice' thing about ACSS though is they can revote PowerDVD's current key which will not allow any future media to be decrypted w/o updating PowerDVD :)

If I understood correctly, the Title Keys were yanked from active memory, which would render revocation of PowerDVD's key moot. The player's key decrypts the encrypted title key which is the key needed to decrypt the video (somebody correct me if I'm wrong here).

Hence, if all you need is a way to yank the Title Keys, What's to prevent the next version of PowerDVD (or any software player, for that matter) from falling to this same tactic? They could also try to deauthorize the old software players and find some way to scramble the title keys in memory on the next versions, but reverse engineering the software itself to find the scrambling method will reveal those keys once again.

However, even if they do decide to go to an extreme and yank software players off the market (at least, for any OS other than the ass-puckered WinVista64), I could easily see someone cracking open a perfectly good HD-DVD player, probing the memory, and just create a list of HD-DVD keys that gets posted to some online website. The only trick is that you'd need to keep REAL QUIET on what players you're modified to pull title keys from.

That obviously would make it difficult for just anybody to make their own keys, so I foresee key distribution as the next big craze. This would relegate disc backups to an as needed sort of thing. You can back up a disc you bought if you really want (if, for example, you want to watch a movie on your laptop but prefer to leave the disc at home), but you'll need to go online and hunt down a key first.

[Nocturno]

I love it. It IS 100% LEGAL (Read you lawbooks on this!!!) to make a COPY of media you OWN (Reason why he did this, as he said, the media is VERY touchy to scratches.) "An individual is allowed to make 1 copy, per for archive purposes, of the media he owns. You, however, are not allowed to sell the copy, per said, for profit. "

Actually in large parts of Europe it's not illegal to make a copy for home use, but it IS illegal to break copy protections, even on your own bought movies, therefore usage of this tool is illegal imho

[hajj_3]

Actually in large parts of Europe it's not illegal to make a copy for home use, but it IS illegal to break copy protections, even on your own bought movies, therefore usage of this tool is illegal imho

EXACTLY. in the u.k the DMCA (digital millenium copyrights act) forbids circumventing copy protections. im pretty sure there is a law for the u.s too. if it dosent have a copy protection on a disc then you can indeed make 1 copy (aslong as you keep both of them and not transfer to a 3rd party).

cant remember what the U.S law is for this as im from the u.k.

i really hope a GUI of the 2nd jan of this tool is made, GUI's for the win:)!

[blutach]

Let's please focus on the technical and practical aspects of this exciting new program rather than debate legal issues in different jurisdictions.

Thanks folks and thanks to muslix64

Regards

[fairyliquidizer]

EXACTLY. in the u.k the DMCA (digital millenium copyrights act) forbids circumventing copy protections. im pretty sure there is a law for the u.s too. if it dosent have a copy protection on a disc then you can indeed make 1 copy (aslong as you keep both of them and not transfer to a 3rd party).

cant remember what the U.S law is for this as im from the u.k.

i really hope a GUI of the 2nd jan of this tool is made, GUI's for the win:)!


The US Law is the DCMA. Are we not governed by the Copyright, Designs and Patents Act 1988 in the UK? Is there a newer one that gives DCMA like restrictions. If so what is it?

Just found this looks like you may be wrong in name, right in principle: http://www.out-law.com/page-4168

[dukey]

should have posted the source from a internet cafe or library or something. Then don't have to worry about getting caught by IP/ISP :) But legal or not it doesn't make much difference because people will do it regardless.

[bob0r]

For those who may get this error:
Error: no `server' JVM at `C:\Program Files\Java\jre1.5.0_10\bin\server\jvm.dll'.

do this:
copy
C:\Program Files\Java\jdk1.5.0_10\jre\bin\server
to
C:\Program Files\Java\jre1.5.0_10\bin\

Backup HD-DVD V0.999 Starting
Usage: BackupHDDVD SourceDrive Destination_directory
Example: BackupHDDVD f: e:\movie\somemovie

Download JDK from:
http://java.sun.com/javase/downloads/index_jdk5.jsp
JDK 5.0 Update 10 is what i used (full offline version)

[bcrabtree]

For those who may get this error:
Error: no `server' JVM at `C:\Program Files\Java\jre1.5.0_10\bin\server\jvm.dll'.

do this:
copy
C:\Program Files\Java\jdk1.5.0_10\jre\bin\server
to
C:\Program Files\Java\jre1.5.0_10\bin\

Backup HD-DVD V0.999 Starting
Usage: BackupHDDVD SourceDrive Destination_directory
Example: BackupHDDVD f: e:\movie\somemovie

Download JDK from:
http://java.sun.com/javase/downloads/index_jdk5.jsp
JDK 5.0 Update 10 is what i used (full offline version)


bob0r,

Am I correct to take your posting as confirmation that you've used this tool and that it works?

Can anyone else confirm that they've successfully saved an AACA-protected movie to hard disk and then been able to play it from there?


Bob C

[Taktaal]

The Java source code is only an implementation of the AACS decoder which in itself is only a wrapper around AES. It looks like the OP found a way to take the title key through out of a HD-DVD player through reverse engineering, but he can't tell us because if the movie studios know which player has a weakness they'll revoke its player key.

It's much better to wait with that until after there's more HDDVD/Bluray releases because then doing a key revocation would
a) Be much less useful because there's already more movies out
b) Create more resentment towards movie studios among the consumers if they can't play a newly bought movie because their player was cracked

[chadamir]

It's nice to see that every lawyer who ever registered an account on doom9 in the last 4 years is coming out of the woodwork to give advice to this guy.

[Cyberace]

It looks like the OP found a way to take the title key through out of a HD-DVD player through reverse engineering, but he can't tell us because if the movie studios know which player has a weakness they'll revoke its player keyhmm, but if that player is a software player like PowerDVD, (like version 6.5 which is shown in the YouTube video)- then aren't studios are out of luck as people will always be able to install that exact same 'old' version of the software player on their own computer that is not connected to the internet (and can thus not get revoke updates) and thus use that to grab the keys from the RAM memory when it is playing/decoding the movie?

By the way, did any notice that YouTube video shows the title keys of some movies when he films the contence of his TKDB.cfg file? if those are the real keys, then people with the knowledge and software to scan/dump the active RAM memory should be able to search find one of those specific keys if he/she have one of those exact same movies, and then he/she can use that as a map to find the location where keys of others movies are 'stored' in the memory while the movie is being played/decoded by PowerDVD. As I assume PowerDVD always stores that key in memory the same way in the same version of the software?

[AlphaWolf]

Sure, whatever, that's nice. But until those bills are passed though, breaking a copy protection measure--even for the purpose of asserting a perfectly legal right--is illegal and punishable by prosecution. Thus, heroes the likes of DVDJon and now muslix64 need to make sure their identities are protected. The two **AAs have been churning out lawsuits against good people for a couple years now. It's easy for them to get YouTube or some other site to cough up an IP addy on this guy.

I'm also doubtful those bills you speak of (assuming they are reintroduced when the new congress convenes) will be passed anytime soon. Past history has shown congress to be very friendly to the media industries. For example, it's the US that is holding back Russia's entry into the WTO, and AllOfMP3.com's existence is cited as a primary reason.

It could happen. Over the years there have been more and more exceptions being added to the DMCA.

FWIW the DMCA is not something that the US congress wanted per se, at least not in the lobbying sense. The reason we have the DMCA is to be in accordance with the WTO and WIPO treaties. In fact when that and the CTEA were challenged by Lessig and his crew, the supreme court cited these treaties as the reason for justifying these laws as being constitutional, because the constitution says that treaties are the law of the land.

The US happened to be the first country to adopt the policies of these treaties in the form of the DMCA and the CTEA. Because of this many people on the internet go around blaming the US for being the reason that their country adopted similar, often more restricting copyright laws (I know many aussies that do this especially.) This isn't the case actually. These countries are enacting these laws as part of these treaties as well. In fact if you look at the tenets of these treaties, they call for far more restrictive policies than what the DMCA calls for.

Whenever you see some trolling site like slashdot or something mention that some country is enacting a new "Super DMCA" it is actually that country falling more in-line with the treaty than the US is.

If you ask me, eventually the DMCA will eventually boil down to this: don't decrypt or talk about decrypting any content unless there is significant fair use for doing so. E.g. backing up a DVD would be allowed, but stealing cable by decrypting the signal without authorization wouldn't be. Which I think would be very fair.

IMO though, you should've sat on this fix a bit longer. HD-DVD is still in first gen with little market penetration, so it's not too late for them to tweak the HD-DVD spec. Or worse, the studios could jump ship and go Blu-Ray exclusively. Wait until one of the formats hit a penetration point to where there's no return, then drop the bomb.

But anyway, what's done is done, and I hope this fix stands the test of time. If so, I know what format I'm buying.

Time to tinker with Blu-Ray anyway though, just to make sure the studios don't have anywhere to run. I'd buy you a Blu-Ray drive for the effort if I had the money.

IIRC doesn't blu-ray also use AACS?

In either case I don't imagine it mattering much. No form of video media will ever have a renewable security system, period. With that said, once it has been decrypted, its all over. Whether it happens now or later, it makes no difference in the end. Maybe a little more effort on the part of the crackers and content providers, if that. The AACS standard is for the most part set in stone already, and as we sit, it's mostly broken.

Mostly as in, we still need to obtain some decrypt keys before we can fully decrypt the video.

[hajj_3]

also, i hope a non-java version of the 2nd jan version is released. lots of ppl dont want to install java runtimes, if sourcecode for that is released then im sure someone will port it into c++ with a GUI.

[=A=RGOS]

The licence GPL may be add to this source code and a sourceforge project may be add for future contribution.
The C++ port is intersting but not GUI, the compatibility with linux may be possible for linux player and eventual libdeaacs.

sorry for my little english ...

[0xdeadbeef]

Some thoughts on this:

1) The player key was not yet compromised as far as I understand. Also the authentification mechanism was not found and recreated. Both should be possible by reverse engineering the software player, but it's not done yet and thus currently HD-DVD can't be called "hacked" yet IMHO.

2) As far as I understand, the player keys can be backlisted this way or the other. There is even a mechanism for this for normal DVDs - where all valid player keys are stored on each DVD. This mechanism was most probably improved for HD-DVD and BlueRay, so I guess as soon as the PowerDVD player key is compromised, it will be backlisted. Maybe even earlier, if a way is found to remote control PowerDVD to provide people with title/volume keys.

Anyway: very interesting topic, especially since this would allow many users to use their notebooks without HDCP to playback HD-DVDs on highres beamers and displays.

[DeepBeepMeep]

hmm, but if that player is a software player like PowerDVD, (like version 6.5 which is shown in the YouTube video)- then aren't studios are out of luck as people will always be able to install that exact same 'old' version of the software player on their own computer that is not connected to the internet (and can thus not get revoke updates) and thus use that to grab the keys from the RAM memory when it is playing/decoding the movie?


The studio may able to prevent existing titles to play with the compromised Dvd Player even if no upgrade is done through the internet. Indeed each device that participates in the AACS decoding is supposed to keep a revocation list. This revocation is updated whenever a new title is played.

So let's say you play a movie in the future that has blacklisted the software player. From this moment your HD DVD drive will refuse to communicate with the software player even to play old titles.

Now even if you prevent your Hd Drive from updating its revocation list with some form a reset, although old titles may still work, newer titles won't because they will no longer contain a valid device key which is required by the player.



By the way, did any notice that YouTube video shows the title keys of some movies when he films the contence of his TKDB.cfg file? if those are the real keys, then people with the knowledge and software to scan/dump the active RAM memory should be able to search find one of those specific keys if he/she have one of those exact same movies, and then he/she can use that as a map to find the location where keys of others movies are 'stored' in the memory while the movie is being played/decoded by PowerDVD. As I assume PowerDVD always stores that key in memory the same way in the same version of the software?

It seems the code we can see is in the video are only hash values of titles names, the title keys are obviously hidden behind a black box.

[colinhunt]

I tried this, and it didn't work. The config file has keys for a few titles, but there's no way to tell if the titles are US or European discs. Tomb Raider (US) did not work, got 18GB of crap on my HDD.

[ttringle]

If this does work, then it's only probably going to end up killing HD-DVD, unless it does also work on Blu-Ray which I doubt because Blu-Ray has an extra level of Copy Protection that HD-DVD does not. If that is the case then the studios will NEVER switch over support to HD-DVD no matter how many people buy discs.

Still I hope that this is true and that it does work for HD-DVD, because whether or not they like it the reason that DVD is as popular as it is has to do with the fact that for the last 5 years we have been able to do what we want with our DVD's. Without the ability to decrypt to HD or on the fly you wouldn't be able to stream video to another room off your HTPC playing a DVD etc, or from your 1st Gen XBOX.

TimT

[Dr Cain]

I tried this, and it didn't work. The config file has keys for a few titles, but there's no way to tell if the titles are US or European discs. Tomb Raider (US) did not work, got 18GB of crap on my HDD.

You'll still need to extract the key manually from memory in order to decrypt it.

The source code comes with all keys nulled.

EDIT: typed the wrong thing X_x

[colinhunt]

You'll still need to extract the key manually from memory in order to decrypt it.

The source code doesn't come with all keys nulled.
You mean it comes with all keys nulled? Took another look at the keyfile, and sure enough, the actual keys are all nulls. D'oh.

[DeepBeepMeep]

I tried this, and it didn't work. The config file has keys for a few titles, but there's no way to tell if the titles are US or European discs. Tomb Raider (US) did not work, got 18GB of crap on my HDD.


It doesn't look like what has been released contains any title key. It seems the title key has been delibarately replaced with "1-00000000000000000000000000000000". I think title keys are supposed to be "copyright information" and the lack of them in the code "may" protect the author since what has been provided so far is only a AACS decoder which still needs the right keys to work. No reverse engineering was necessary to write this code, all the information to write it is available publically.

The real exploit lies in extracting the title key from the memory of the software player. It is quite likely that if we had one title key it shoudn't be hard to get the others as long as the player is not considered as compromised. But unless the author of this program releases the key extractor or that somebody else writes ones knowing now that it is possible, beside greater hope we are almost at the same point as before.

[zeroprobe]

what it comes down to the "players" key in question is able to decrypt ALL of the hddvds out there today. Future ones can be barred out but for the 150+ out today the keys will work.

[Wilbert]

The reason we have the DMCA is to be in accordance with the WTO and WIPO treaties.
Yeah right (assuming you are talking about US DMCA). You are turning things around. The reason that we have that stuff in the WTO and WIPO treaties in the first place is because US pushed for it.

It doesn't look like what has been released contains any title key. It seems the title key has been delibarately replaced with "1-00000000000000000000000000000000".
In a \. post about this subject someone claimed that those keys are released into the wild, so you should be able to find them.