View Single Post
Old 29th March 2019, 16:34   #568  |  Link
pietro
Registered User
 
Join Date: Jun 2018
Posts: 7
More Blueray 2.1 deductings

This are December deductings .. being sick with the doctors from then. Soon hopping somebodys can be useful for this even yet not finished.

More Blueray 2.1 deductings

.. thinkings and hypoethsiss and deductings after from before messagings ..


New files inside Blueray 2.1 not 2.0 AACS directory:

New file inside 2.1 discus Fury\AACS\IndividualSegment.tbl 19528 size bytes
Fury dump hex IndividualSegment.tbl:
00000000 01 00 00 00 04 c4 00 10 01 00 00 00 00 01 00 01 |................|
00000010 00 05 ad c0 00 05 b7 bf 01 00 00 00 00 02 00 01 |................|
00000020 00 09 53 40 00 09 5d 3f 01 00 00 00 00 03 00 01 |..S@..]?........|
00000030 00 0d ce 80 00 0d d8 7f 01 00 00 00 00 04 00 01 |................|
00000040 00 11 d5 00 00 11 de ff 01 00 00 00 00 05 00 01 |................|
00000050 00 18 98 c0 00 18 a2 bf 01 00 00 00 00 06 00 01 |................|
00000060 00 1f 29 40 00 1f 33 3f 01 00 00 00 00 07 00 01 |..)@..3?........|
00000070 00 23 3c 80 00 23 46 7f 01 00 00 00 00 08 00 01 |.#<..#F.........|
00000080 00 27 55 00 00 27 5e ff 01 00 00 00 00 09 00 01 |.'U..'^.........|
00000090 00 2b 4c 00 00 2b 55 ff 01 00 00 00 00 0a 00 01 |.+L..+U.........|
..
00004bc0 17 22 8d c0 17 22 97 bf 01 00 00 00 00 1d 00 01 |."..."..........|
00004bd0 17 27 24 00 17 27 2d ff 01 00 00 00 00 1e 00 01 |.'$..'-.........|
00004be0 17 2b f1 c0 17 2b fb bf 01 00 00 00 00 1f 00 01 |.+...+..........|
00004bf0 17 30 f1 40 17 30 fb 3f 01 00 00 00 00 20 00 01 |.0.@.0.?..... ..|
00004c00 17 36 00 40 17 36 0a 3f 01 00 00 00 00 01 00 01 |.6.@.6.?........|
00004c10 17 3a 91 c0 17 3a 9b bf 01 00 00 00 00 02 00 01 |.:...:..........|
00004c20 17 3f 5e c0 17 3f 68 bf 01 00 00 00 00 03 00 01 |.?^..?h.........|
00004c30 17 45 8d c0 17 45 97 bf 01 00 00 00 00 04 00 01 |.E...E..........|
00004c40 17 4a 57 80 17 4a 61 7f |.JW..Ja.|

Hypoethsis name:
"IndividualSegment.tbl" meanings "Individual Segment Table"
Table meanings N rows of datums bytes. Maybe rows same size?

Pattern is showing:
After beginning 01 00 00 00 04 c4 00 10
Repeat 1220 rows having 01 00 00 00 00 XX 00 01 YY YY YY YY ZZ ZZ ZZ ZZ

File bytes size 19528 = 8 + 1220 * 16

Hypoethsis first 8 file datums bytes:
01 00 4-BYTES-ROWS-COUNT 2-BYTES-ROWS-SIZE
4-BYTES-ROWS-COUNT = 00 00 04 c4 = 1220
2-BYTES-ROWS-SIZE = 00 10 = 16

Hypoethsis XX:
XX = 01 02 03 .. 10 repeating - counting 1, 2, 3, ..32, 1, 2, 3, ..32, 1, 2, 3, ..
Mysterius, yet always 01 02 03 .. 10 repeating.
Every 1, 2, 3, .. 32 is having 38+ repeatings.



New file inside 2.1 discus Patriot\AACS\IndividualSegment.tbl 24584 size bytes
Patriot dump hex IndividualSegment.tbl:
00000000 01 00 00 00 06 00 00 10 01 00 00 00 00 01 00 01 |................|
00000010 00 02 bc 80 00 02 c6 7f 01 00 00 00 00 02 00 01 |................|
00000020 00 06 99 40 00 06 a3 3f 01 00 00 00 00 03 00 01 |...@...?........|
00000030 00 0a 0e 00 00 0a 17 ff 01 00 00 00 00 04 00 01 |................|
00000040 00 0d 68 00 00 0d 71 ff 01 00 00 00 00 05 00 01 |..h...q.........|
00000050 00 12 01 00 00 12 0a ff 01 00 00 00 00 06 00 01 |................|
00000060 00 16 27 80 00 16 31 7f 01 00 00 00 00 07 00 01 |..'...1.........|
00000070 00 1b 22 40 00 1b 2c 3f 01 00 00 00 00 08 00 01 |.."@..,?........|
00000080 00 1f 15 40 00 1f 1f 3f 01 00 00 00 00 09 00 01 |...@...?........|
00000090 00 23 68 c0 00 23 72 bf 01 00 00 00 00 0a 00 01 |.#h..#r.........|
..
00005f80 19 c6 94 00 19 c6 9d ff 01 00 00 00 00 19 00 01 |................|
00005f90 19 c9 d9 80 19 c9 e3 7f 01 00 00 00 00 1a 00 01 |................|
00005fa0 19 cc e0 c0 19 cc ea bf 01 00 00 00 00 1b 00 01 |................|
00005fb0 19 d0 19 80 19 d0 23 7f 01 00 00 00 00 1c 00 01 |......#.........|
00005fc0 19 d3 a9 c0 19 d3 b3 bf 01 00 00 00 00 1d 00 01 |................|
00005fd0 19 d7 8d 00 19 d7 96 ff 01 00 00 00 00 1e 00 01 |................|
00005fe0 19 da a3 c0 19 da ad bf 01 00 00 00 00 1f 00 01 |................|
00005ff0 19 de 2b 00 19 de 34 ff 01 00 00 00 00 20 00 01 |..+...4...... ..|
00006000 19 e1 bf c0 19 e1 c9 bf |........|

Identicle pattern, yet 1536 rows

File bytes size 24584 = 8 + 1536 * 16

Hypoethsis identicle with Patriot first 8 file datums bytes:
4-BYTES-ROWS-COUNT = 00 00 60 00 = 1536
2-BYTES-ROWS-SIZE = 00 10 = 16
Every 1, 2, 3, .. 32 is showing 48 repeatings.



Fury:
Row XXXXXXXX YYYYYYYY
1 372160 374719
2 611136 613695
3 904832 907391
..
1218 390028992 390031551
1219 390434240 390436799
1220 390748032 390750591

YYYYYYYY = 0005adc0 .. 174a5780 growings every row
ZZZZZZZZ = 0005b7bf .. 174a617f growings every row
YYYYYYYY < ZZZZZZZZ inside row
YYYYYYYY > ZZZZZZZZ after row before
YYYYYYYY and ZZZZZZZZ hypoethsis now here

Identicle growings every row.


Manuel of 1.0 Blueray describe "Segment Portion" and "non-Segment Portion"
Manuel of 1.0 Blueray describe "Source Packets" = 192 bytes
Manuel of 1.0 Blueray describe "Aligned Units" = 32 Source Packet = 6144 bytes

Fury\STREAM\00001.fmts bytes size = 75139491840
6144 bytes multiple similarly with every m2ts files.
Hypoethsis 1: 2.0 and 2.1 very like 1.0 useing Aligned Units and Source Packets for NNNNN.m2ts files.
Hypoethsis 2: fmts useing Aligned Units small changings from m2ts - further deductings now here.
Hypoethsis: MKB 2.1 record 0C Media Key Variant Data useing this file.


Maximum YYYYYYYY ZZZZZZZZ = 390750591
75139491840 / 390750591 = 192.3
Hypoethsis: YYYYYYYY ZZZZZZZZ = index of Source Packets inside 00001.fmts


Every YYYYYYYY 32 multiple.
Hypoethsis: YYYYYYYY maybe must be multiple 32 is Aligned Unit.

Every ZZZZZZZZ - YYYYYYYY = 2559
Hypoethsis 1: ZZZZZZZZ existing hense not fixed 2559 hense future discus not always 2559 within.
Adding 1 is 2560 is 32 multiple.
Hypoethsis 2: YYYYYYYY ZZZZZZZZ = first .. last Source Packets numbering both Aligned Unit - YYYYYYYY is 6144 multiple, ZZZZZZZZ = YYYYYYYY + 31 + N * 32.
Questions: What is YYYYYYYY..ZZZZZZZZ meaning for? Deducted below.



Patriot:

Row XXXXXXXX YYYYYYYY
1 179328 181887
2 432448 435007
3 658944 661503
..
1534 433759168 433761727
1535 433990400 433992959
1536 434225088 434227647

Maximum YYYYYYYY ZZZZZZZZ = 434227647
Patriot\STREAM\00001.fmts bytes size = 83429818368
83429818368 / 434227647 = 192.1

Every Fury hypoethsiss identicle of Patriot



Hypoethsis: 00001.fmts file containing non-Segment Portion, Segment Portion, non-Segment Portion, .. , non-Segment Portion, Segment Portion, non-Segment Portion
Segment Portion always here size 80 Aligned Units =
non-Segment Portion always much more size bytes = thousands Aligned Units


New file inside 2.1 discus AACS\SegmentKey00001.tbl
Fury Patriot: 35127304 size bytes
Fury dump hex SegmentKey00001.tbl:
00000000 01 00 00 00 ff ff 02 18 01 00 00 00 00 20 01 02 |............. ..|
00000010 1b ae 52 c4 ad 08 5a ba 68 a1 a8 10 75 19 bd c5 |..R...Z.h...u...|
.. binary datums
00000210 65 59 97 9c 24 d8 1a 66 20 94 55 56 48 cf e6 5c |eY..$..f .UVH..\|
00000220 01 00 00 00 00 20 01 02 65 07 88 ce 54 af 6f 57 |..... ..e...T.oW|
00000230 4b 66 c0 ac d6 8a f4 2e 36 c3 65 28 d3 9d c3 f8 |Kf......6.e(....|
.. binary datums
00000420 a5 b2 d6 bc a3 5a c5 45 5a c4 5f 7f 0a 2c b8 97 |.....Z.EZ._..,..|
00000430 65 83 23 ac 6b 42 81 ae 01 00 00 00 00 20 01 02 |e.#.kB....... ..|
00000440 51 3e 52 fd 36 33 3f 53 ce fd 71 ea 72 0a 9f a3 |Q>R.63?S..q.r...|
.. binary datums .. 01 00 00 00 00 20 01 02 .. binary datums
..
.. binary datums .. 01 00 00 00 00 20 01 02 .. binary datums
0217fbc0 64 7b 0b b2 dd 1c 1d 81 82 ec 8f 64 99 c3 a5 21 |d{.........d...!|
0217fbd0 22 10 90 7f 90 31 3b a8 01 00 00 00 00 20 01 02 |"....1;...... ..|
0217fbe0 e4 45 f5 3e 4a 31 2d 1a a9 00 2d c1 29 28 fe 26 |.E.>J1-...-.)(.&|
.. binary datums
0217fde0 06 c9 44 c2 27 9e 60 ae 1c 98 dd c7 7f 80 e8 4d |..D.'.`........M|
0217fdf0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
.. zeros datums
02180000 00 00 00 00 00 00 00 00 |........|

Patriot Fury first 16 bytes datums same:
00000000 01 00 00 00 ff ff 02 18 01 00 00 00 00 20 01 02 |............. ..|

Patriot Fury last 536 bytes datums same zeros:
0217fdf0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
.. zeros datums
02180000 00 00 00 00 00 00 00 00 |........|

Patriot Fury having 01 00 00 00 00 20 01 02 same 65535 file positions 8, 8 + 536, 8 + 2 * 536, .. , 8 + 65534 * 536


File size and datums dump datums and first 8 bytes datums reveal hypoethsiss:

Hypoethsis name:
"SegmentKey00001.tbl" meanings "Segment Key Table 1"
Table meanings N rows of datums bytes - Maybe rows same size? Maybe 536?

Hypoethsis first 8 file datums bytes:
01 00 4-BYTES-ROWS-COUNT 2-BYTES-ROWS-SIZE
(Identicle first 8 bytes with IndividualSegment.tbl)
4-BYTES-ROWS-COUNT = 00 00 ff ff = 65535
2-BYTES-ROWS-SIZE = 02 18 = 536

Hypoethsis of last 536 zeros bytes:
Mysteryus. Fake unused row?

File bytes size 35127304 = 8 + 65535 * 536 + 536

Every row having:
01 00 00 00 00 20 01 02 <528 binary datums>

Hypoethsis of 01 00 00 00 00 20 01 02:
Mysteryus. Every row begins same.

Hypoethsis of 528 binary datums:
528 not 20 divisible (not 160-ECDSA or SHA-1 list)
528 not 32 divisible (not 256-ECDSA or AES-256 or SHA-256 list)
528 = 16 * 33
File having "Key" in name. Hense maybe 33 AES-128 keys?
Maybe hint "20" is 32 within first 8 bytes position 5.
Maybe nonce with 32 AES-128 keys?
Maybe Media Key with 32 AES-128 segment keys?
How encrypted? AES-CTR? AES-CBC? Blueray never useing AES-CTR
Hypoethsis: CBC likely with nonce using Media Key Variant within MKB.
Maybe XX within IndividualSegment.tbl row counting 1,2,3,..32 is number of key 1..32 ?
Somebody helping with needing for analyzings. Maybe waiting further 2.1 discus not Fury Patriot.


fmts file Segment Portion = 80 Aligned Units always.

Sorry yet not including thinkings and weeks of how analyzings happenings here for protecting of same analyzings by Blueray.

Results of analyzings:

Outside IndividualSegment.tbl YYYYYYYY-ZZZZZZZZ values using every Aligned Units all Source Packets normally playings.
Inside IndividualSegment.tbl YYYYYYYY-ZZZZZZZZ values abnormally playings useing half of Aligned Units not every Aligned Units.
Fury and Patriot always 2560 Source Packets 40x2 Aligned Units useing always only half.
Pattern 1 inside XXXXXXXX-YYYYYYYY Packets: useing 32, not-useing 32, useing 32, not-useing 32, ... useing 32, not-useing 32
Pattern 2 inside XXXXXXXX-YYYYYYYY Packets: not-useing 32, useing 32, not-useing 32, useing 32, ... not-useing 32, useing 32
Every identicle XX 1..32 always Pattern 1 or always Pattern 2.

Patriot = 165 minutes
13579072 Aligned Units
1536 * 40 IndividualSegment.tbl Aligned Units not-useings
13517632 = 13579072 - 1536 * 40 Aligned Units Playing
1365 Aligned Units every second
Every 6.4 seconds average having .03 seconds average IndividualSegment.tbl Source Packets maybe single video picture

Fury = 134 minutes
12229735 Aligned Units
1220 * 40 IndividualSegment.tbl Aligned Units not-useings
12180935 = 12229735 - 1220 * 40 Aligned Units Playing
1515 Aligned Units every second
Every 6.6 seconds average having .02 seconds average IndividualSegment.tbl Source Packets maybe single video picture


Hypoethsis: Playing having only 1 possible of 2 every 32 keys yet not having key for not-useing.
Hypoethsis: Forensic Mark inside useing IndividualSegment.tbl so Blueray can be knowing every 32 keys useing.
Hypoethses: Maybe not always 40x2 within future discus.
Hypoethses: Maybe not always 32 keys within future discus.
Hypoethses: Maybe not always 2 possible of every keys within future discus.
Hypoethses: Maybe not always 6.5 seconds within future discus.



Hense now MKB 2,1 records can be deducted.

AACS 2.1 MKB records:
10 Identicle with manuel, yet MKBType 48151003
21 Identicle with manuel
31 Identicle with AACS 2.0
07 Identicle with manuel
20 Identicle with manuel
30 Identicle with AACS 2.0
F8 Identicle with AACS 2.0
7F Identicle with manuel
86 Identicle with AACS 2.0
04 Identicle with manuel
0C Manuel of 1.0 explain with Media Key Variant Data
2D New with infirmations and hypoethsis following
88 New with infirmations and hypoethsis following
2F New with infirmations and hypoethsis following
28 Identicle with AACS 2.0
02 Identicle with manuel

2D infirmations and hypoethsis:
2D is 0D plus single bit added 20
18 or 20 more than 2 * subsets bytes datums
0C Media Key Variant Data happens hense likelyness to Introduction and Common Cryptographic Elements Book Unified Media Key Block?
Same as 0D Variant Number, yet 16 not 10 bits, 65536 Media Key Variant values, not 1024 from manuel of 1.0
Hypoethsis: AACS 2.1 Variant Number Record having maximum 65536 of values
Hypoethsis: bit 20 means 4K

2F infirmations and hypoethsis:
16 * 65535 bytes datums
Hypoethsis: additional cryptographic datums of 65535 Media Key Variant values
Last hypoethsis possible 2: 65535 encryptings of Media Key using every Media Key Variant

88 infirmations and hypoethsis:
Size 12 + 4 * 65536 or 16 + 4 * 65535
2F record having hypoethsis 65535 hense more likely than 65536
And plus SegmentKey00001.tbl hypoethsis matching 65535
Hypoethsis: nonce, plus additional cryptographic datums of 65535 Media Key Variant values
Function mysterius still - maybe 32 bits saying which Pattern 1 or 2 for every 32 keys.


More infirmations and questions:
Not like Unified Media Key Block because MKBRO.inf 2.1 is only MKB not extra MKBs.
So how now getting Media Key?
Hypoethsis:
Media Key encrypted somewhere - within MKBRO.inf or other file.
SegmentKey00001.tbl before hypoethsis: 65535 rows with 33 keys or nonce + 32 keys
Hypoethsis:
Blueray 4K player decrypt 1 of 65535 Media Key Variant from MKBRO.inf record 0C
Possible 1: Media Key is maybe in SegmentKey00001.tbl row - maybe key not nonce.
Possible 2: Media Key encrypted in MKBRO.inf record 2F for every 65535 Media Key Variants.



All 2.0 plus 2.1 new files now with hypoethsiss!! Yet for vericating hypoethsiss now are needing Processing Keys.
pietro is offline   Reply With Quote