Can the in memory key searching trick for AACS cracking be used on CPRM cracking?

[Wilbert]

Anyway I tried to do memdumps of WinDVD 7.0 B27.066 while playing CPPM protected DVD A and only interesting constant I was able to find was DEADBEEF which is used for verification of the Media Key with Dv - Verify media key that is at the begining of MKV.

That's described in table 3-2, ok i see. I can't find that constant in my memory dump. Any idea what i'm doing wrong? Does it matter when you take the dump?

[tjf]

Originally Posted by Wilbert

I can't find that constant in my memory dump. Any idea what i'm doing wrong? Does it matter when you take the dump?

Not at all. Actualy I can find 0xDEADBEEF it in memdump taken with fresh WinDVD without any disc. The values around it stay the same if there is a disc or not as well.

[arnezami]

I bought a DVD-Audio disc (man these are rare).

Just to play around a bit...

But when using PowerDVD it first tries to update the CPPM keys and then seems to (always) play the video on the disc (well I get a typical dvd menu so I guess thats the video part of the disc). Its a DVD-video/audio combi disc apparently. I've tried setting the player to choose DVD-audio above video but this doesn't seem to have any effect. And there is no option (I think) to switch between audio/video.

How do I make sure the CPPM protected audio is played?

arnezami

[evdberg]

If you can select the MLP 96/24 5.1 track from the Audio menu, you are pretty sure you are playing the DVD-Audio ...

[arnezami]

Hmmm. I reinstalled the 2911 version and it says this at first startup:

PowerDVD will automatically play DVD-Video content because there is no CPPM key available. Please activate the CPPM key via the Internet.

And then at each startup (for a second):

Waiting to update CPPM key...

And then plays the video.

PowerDVD is activated btw.

Has anybody gotten this to work?

arnezami

PS. These guys seemed to have a similar problem.
PPS. WinDVD 8 (not HD) also play sthe DVD-video with ac3. There doesn't seem to be a way to force it to play the DVD-audio.

[tjf]

Try WinDVD Platinum 7.0.27.66. Even in trial mode it plays DVD-A. Google "WinDVD.v.7.0.27.66".

[Wilbert]

Sorry to bump in again

Try WinDVD Platinum 7.0.27.66. Even in trial mode it plays DVD-A. Google "WinDVD.v.7.0.27.66".

I'm using 7.0 B27.172. If i select the "i" of Info i see it's playing the mpeg2/ac3 stream. I've enabled "DVD-Audio navigation" in the Preferences tab. I've also enabled "96KHz/24bit decoding" in the Audio tab.

How can i select the MLP stream that evdberg is talking about? I don't see an audio menu. I see something called "Audio center", but i can't see/select any tracks in there.

edit: is it possible that there is no MLP stream on my disc?

[evdberg]

How can i select the MLP stream that evdberg is talking about? I don't see an audio menu.

I mean the menu on the DVD itself. As arnezami says, PowerDVD plays the dvd-video and -audio combined. I have "Queen - Night at the Opera". At start of the disk, you get a menu just like regular DVDs. Now you can enter the Audio selection menu, again just like regular DVDs have. In this menu you see 3 audio options: 2 for dvd-video (PCM and DTS) and 1 or dvd-audio (MLP 96/24 lossless 5.1). This last option only works when I play it in PowerDVD. In all other players (like the Apple DVD player) only the 1st 2 work.

[CZroe]

I backed up the LPCM tracks from my DVD-Audio of The Crystal Method - Legion of Boom album with DVD Decrypter. I never had any idea that there was some special kind of protection for DVD-A, just that PC software wasn't allowed to play it back without downsampling at one time. Is mine not protected like that or something? I just demuxed the streams and ran the output (WAV) through WMEncoder9 to Lossless WMA. Even the album information with bonus tracks + DVD-Audio cover art was avalable through WMP.

[mommyman]

Both keysets (CPPM/CPRM) have already been extracted from software and firmware. A long time ago... So, there is no reason to "just hack" them again

[arnezami]

Originally Posted by mommyman

Both keysets (CPPM/CPRM) have already been extracted from software and firmware. A long time ago... So, there is no reason to "just hack" them again

Can you give us a link or more info?

[mommyman]

As I know there are no available links today. Do you think that this would be a good idea to make these keys public? By now DVD-Audiio is a dying thing, seems that no one will be interested to incorporate this kind of "support" in software. And DMCA is not the last issue...

[evdberg]

Originally Posted by mommyman

Both keysets (CPPM/CPRM) have already been extracted from software and firmware. A long time ago... So, there is no reason to "just hack" them again

Hmmm ... I've been following this kind of stuff for years and the only 'hack' for dvd-audio I have ever seen is the one that uses WinDVD to capture the decoded audio from the soundcard output. And if you can not provide the previous hack, there is no other solution then to hack it again.

[mommyman]

Originally Posted by evdberg

Hmmm ... I've been following this kind of stuff for years and the only 'hack' for dvd-audio I have ever seen is the one that uses WinDVD to capture the decoded audio from the soundcard output. And if you can not provide the previous hack, there is no other solution then to hack it again.

If it is going to happen this way... http://www.sendspace.com/file/atzn56

[HyperHacker]

Originally Posted by tjf

Not at all. Actualy I can find 0xDEADBEEF it in memdump taken with fresh WinDVD without any disc. The values around it stay the same if there is a disc or not as well.

0xDEADBEEF is commonly used to fill uninitialized memory, so that it stands out when debugging. IOW, you're probably looking at variables that haven't been used yet.

[evdberg]

@mommyman: that's some pretty solid proof ... stange I missed it back then ... thanks for sharing! Looks like this thread can be closed ...

[ron spencer]

it was not a hack/patch per se....you used WinDVD as it was....output was redirected to hard disk (not sound card). the tools were removed:

http://www.cdfreaks.com/news/DVD-Aud...DVD-patch.html


The programs never got rid of the Verance watermarking (if used), so if you re-burned the content and your player saw the watermarking but no CPRM it would stop.

[Wilbert]

If it is going to happen this way... http://www.sendspace.com/file/atzn56

I tried to compile it, but got dozens of errors. Did someone else succeed?

[ron spencer]

what is it supposed to do this proof??

[evdberg]

Originally Posted by Wilbert

I tried to compile it, but got dozens of errors. Did someone else succeed?

Which compiler did you use? From what I saw it looks like Visual C to me. To compile it with another compiler you need at least to change the pragma statements. And I am not sure, but maybe you also need some header files from the Platform SDK or DDK.