DumpHD - a HD-DVD / Blu-Ray Decrypter

[homerpez]

I'm sorry to be lagging so far behind on this, but I've come across a Blu-Ray disc that AnyDVD HD can't seem to handle, so I'm having to use aacskeys and DumpHD the "hard" way...

I guess I'm profoundly confused as to which numbers I'm supposed to use... here's what I tried, which created an m2ts that is corrupt when I try to open it:

6E9EA4549406108FFEC78195BED66ADD644DBFE3=MOVIE NAME |V|01/31/07| B671461B112C7D7A9D5FB7EA4B00A9B3

I took the disc ID shown in the window in DumpHD and put that in the first slot.

Then I marked the key type as "Volume Unique key" and put "V" there.

I added the date of the disc under MM/DD/YY (which I'm not sure I needed to do)...

And then I put what aacskeys had under "Volume Unique Key" and put that hash at the end.

As near as a can tell, this is how Dump HD is used, right? I run it through with these settings, and it dumps the disc, says decrypting enabled, but the resulting files won't even open. It says it decrypted it, but it just scrambled it.

What I'm confused about is what else can I try? I see a lot about "CPS Unit Keys" but there's no listing of that in aacskeys... so I'm not sure what else to look for, since it seems to only support one kind at a time? Again, I'm still pretty confused on this.

I guess... an easy way to ask this is...

WHICH KEYS ARE THE IMPORTANT ONES, AND SPECIFICALLY WHERE/HOW ARE THEY USED IN DUMPHD?

Anyone who can clear this up for me is GREATLY appreciated!

[SvT]

Originally Posted by homerpez

I've come across a Blu-Ray disc

6E9EA4549406108FFEC78195BED66ADD644DBFE3=MOVIE NAME |V|01/31/07| B671461B112C7D7A9D5FB7EA4B00A9B3


As near as a can tell, this is how Dump HD is used, right?

WHICH KEYS ARE THE IMPORTANT ONES, AND SPECIFICALLY WHERE/HOW ARE THEY USED IN DUMPHD?

Blu-Ray uses a different format !

<SHA-1 hash of AACS\Unit_Key_RO.inf>=This is my movie |U|00/00/00|1-09876543210987654321098765432109

See this post !

http://forum.doom9.org/showthread.ph...907#post977907

Goodluck !

[KenD00]

The most likely reason for the corrupted decrypted files is that the Volume Unique Key is wrong. The Movie you are trying to decrypt is probably a MKB v3 Disc and aacskeys can't get the Volume ID from the Disc. Run aacskeys in verbose mode and check if the Volume ID is all zero. If thats the case you have to obtain the Volume ID with DumpVID for BluRay and use the found Volume ID with aacskeys to generate the correct keys.

Another reason could be that this disc uses multiple CPS Unit Keys, check the log of DumpHD if it shows multiple CPS Unit Keys for the Disc (you should also be able to see this when running aacskeys in verbose mode).

CPS Unit Keys and Title Keys are technically the same, aacskeys names them Title Keys too. A Volume Unique Key is of more value than a Title Key. To use DumpHD everything you need is the DiscID and the Volume Unique Key.

A future version of DumpHD will be able to use aacskeys directly which simplifies things a lot (at least for XBox 360 HD-DVD users, for the others we are still in need of a new Host Certificate Private Key ) .

@SvT
DumpHD uses the same Key Format for HD-DVD and BluRay, the difference is that BackupBluRay uses another format.

[SvT]

@KenD00 Thanks for clearing that up !

I re-read the post and I see my mistake !

[homerpez]

Thanks for the help, I guess though I'm only slightly more ahead than I was at the start (I now know what I was doing was WRONG) But that's a start.

So if I understand this correctly, for the Disc ID key (key #1 that I highlighted RED), I am to use Dumpvid's "hammering" and use this key there instead of what DumpHD says the disc ID is?

Hammering drive...
vid: E3ADF0EEF2D740D2B48D4406FB9B4F92
Hammering finished.

And for the last number (highlighted in GREEN on my example), which do I use?

Aacskeys gives me these sets of numbers (I omitted the ones that are all zeros or hash marks):

Processing key
Encrypted C-value
Corresponding uv
Decrypted C-value
Media key
Encrypted verification data
Decr verif data should be
Decrypted verification data
AGID
Host certificate from
Host certificate(Hcert)
Host Private Key (Hpriv)
Host Nonce (Hn)
Host key point (Hv)
Volume Unique Key
Encrypted Unit Key 1
Decrypted Unit Key 1

Nothing is shown in aacskeys about "CPS" keys or "Title" keys. I used the "Volume Unique Key" value from here in my example above, as aacskeys shows it... If this is key wrong, which line do I get the correct key type from?

Thanks

[KenD00]

Originally Posted by homerpez

So if I understand this correctly, for the Disc ID key (key #1 that I highlighted RED), I am to use Dumpvid's "hammering" and use this key there instead of what DumpHD says the disc ID is?

No. DumpVID gives you the Volume ID, this comes from the AACS-Protection and is needed to decrypt the keys from the disc. The Disc ID is something that we calculate ourselves to identifiy the disc. Your red key #1 is correct.

You need to use the Volume ID from DumpVID with aacskeys to decrypt the keys correctly since it obviously cannot retrieve it. If your movie is e.g. in drive m: you have to type

aacskeys m E3ADF0EEF2D740D2B48D4406FB9B4F92

Now aacskeys decrypts the keys from the disc correctly, the Volume Unique Key it spits out should be different than the one you are currently using. You have to replace your green key with that new number and everything should work fine.

Originally Posted by homerpez

Nothing is shown in aacskeys about "CPS" keys or "Title" keys.

My fault, i didn't know how aacskeys names these keys. The Unit Keys are the CPS Unit Keys i meant. Instead of the Volume Unique Key you can also use the Decrypted Unit Keys, you just have to change the key entry in DumpHD's database accordingly (keytype U and you have to number the Unit Keys correctly like the Title Keys in the database included in DumpHD). But as i said, the Volume Unique Key is of more value because it can decrypt the CPS Unit Keys from the disc and it saves you work to type all the keys (well, not in your case, there is only one CPS Unit Key ).

[homerpez]

Thanks for the detailed reply...

No. DumpVID gives you the Volume ID, this comes from the AACS-Protection and is needed to decrypt the keys from the disc. The Disc ID is something that we calculate ourselves to identifiy the disc. Your red key #1 is correct.

You need to use the Volume ID from DumpVID with aacskeys to decrypt the keys correctly since it obviously cannot retrieve it. If your movie is e.g. in drive m: you have to type

aacskeys m E3ADF0EEF2D740D2B48D4406FB9B4F92

Now aacskeys decrypts the keys from the disc correctly, the Volume Unique Key it spits out should be different than the one you are currently using. You have to replace your green key with that new number and everything should work fine.

Just one problem...

I run this command line as you said (only I have mine in the d drive), and it just does the program and media keys, and aacskeys crashes.

When I run it normally (just after PowerDVD unlocks the disc), using the "V" or "S" commands, it runs fine, but when I use the vid code above, it crashes. Maybe I'm using the wrong version? (I think I am using the last one listed in this thread, which I assumed was the newest)

My fault, i didn't know how aacskeys names these keys. The Unit Keys are the CPS Unit Keys i meant. Instead of the Volume Unique Key you can also use the Decrypted Unit Keys, you just have to change the key entry in DumpHD's database accordingly (keytype U and you have to number the Unit Keys correctly like the Title Keys in the database included in DumpHD). But as i said, the Volume Unique Key is of more value because it can decrypt the CPS Unit Keys from the disc and it saves you work to type all the keys (well, not in your case, there is only one CPS Unit Key ).

Of course since I can't use the vid: code so far in aacskeys, I don't know if the numbers are correct, but I do know that the "Volume Unique ID" code I tried doesn't work. So I can try the "Decrypted Unit Key" instead? (just replacing V with a U, and adding the 1- in front?)

I feel like I'm REEEEEEALLY close here.

[KenD00]

Originally Posted by homerpez

When I run it normally (just after PowerDVD unlocks the disc), using the "V" or "S" commands, it runs fine, but when I use the vid code above, it crashes. Maybe I'm using the wrong version? (I think I am using the last one listed in this thread, which I assumed was the newest)

There is no need to "unlock" the disc (and btw. PowerDVD "locks" it again shortly after it retrieved the Volume ID), the latest aacskeys version is 0.2.8. If you cant get aacskeys to work you better ask in the aacskeys thread, i cant help you there.

Originally Posted by homerpez

Of course since I can't use the vid: code so far in aacskeys, I don't know if the numbers are correct, but I do know that the "Volume Unique ID" code I tried doesn't work. So I can try the "Decrypted Unit Key" instead? (just replacing V with a U, and adding the 1- in front?)

Because your Volume Unique Key is wrong the decrypted Unit Key is wrong too (the VUK is used to decrypt the Unit Keys) so this wont help, you need the correct VUK to proceed.

[homerpez]

SUCCESS!

I did have to go back to aacskeys 0.2.7 to get it to work (and even then, it only worked in "v" or "s" mode)... but I did get a different Volume Unique Key, and it looks like it worked! Thanks again.

DumpHD is awesome... now that I know how to use it.

[d0ORk]

When I rip the Movie (Troja) the ripped evos are some kinda damaged. They run picture by picture and the sound too, but the key is ok when I compare it with aacskeys.
Any Hints?

[KenD00]

Stupid question: Is your hardware powerful enough to play HD?

Intelligent question: Which PowerDVD version do you use?

[d0ORk]

Could it be that it takes a very long time to get a BluRay Movie to Harddisk? The 00009m2ts is 32GB big and it's working on it for 2 hours now and it has 15GB on HDD...

[KenD00]

Well, i don't own any BluRay hardware, i don't know for sure but i think it should be way faster, a 30 GB HD-DVD takes 1 hour.

Do you have 100% CPU load while decrypting? Then its your CPU which limits you like hell.

[d0ORk]

Hi. I got a E6600 @ 3Ghz and 2GB Memory. The CPU is about 50% while decrypting. It took at least 5h to get the movie to HDD...

[KenD00]

This is not normal, on this machine decrypting should not eat up that much cpu power. Weird that you have 50% load, looks like one core is running at 100% and the other one is doing nothing, DumpHD uses dual core. And it really should not take that long when so much CPU is used. You have maybe some other program running during the decryption that interferes like a virus scanner or so. It may also be that the Java VM has a problem.

[KenD00]

After a long time here it is, a new version of DumpHD which has some quite nice new features .

• Direct key retrieval
  DumpHD can now get the required keys off the disc itself by using aacskeys. However, it cannot use the executable version of aacskeys, it needs the library version of it. Because this version is still not available, i have developed a wrapper library as an intermediate solution (available as separate download). This library launches the aacskeys executable and parses its output to get the required keys. The retrieved keys get stored in the KEYDB automatically (no backup of the KEYDB is made, better to have a copy somewhere in case something goes wrong ). The library is available for windows and linux, aacskeys is NOT included.
• Slightly changed KEYDB format
  Because i had to rewrite the key database code i took the chance to update the key format slightly. The old format only allowed one key type per entry, this could not be enough for future AACS enhancements. The new format now allows multiple key types per entry and finally moved to the YYYY-MM-DD date format. The new format is NOT compatible with the old one and will break old programs. However, DumpHD can still read the old format but will write only in the new format. As long as only one key type is present the new format entry can be easily converted to the old format. See the included KEYDB.cfg for details of the new format.
• Streaming output
  This is an experimental feature, it is now possible to stream the output to stdout rather then writing to disk. This way you can pipe the output to e.g. mplayer and watch the movie while its decrypting. This feature can only be used in CLI mode, start DumpHD and supply only a source (no destination) as parameter, then the output will be written to stdout. Don't forget to pipe DumpHD to another program or your console will get crazy. I suggest to supply a file as source, but you can also supply a folder. In this case the folder gets scanned for EVO / M2TS files (recursive) and the found files will be played back in alphabetical order.
  There is a limitation however, HD-DVDs with Advanced Content can contain multiplexed ARFs inside an EVO, DumpHD cannot decrypt these in a streaming fashion, therefor they will get passed through encrypted. This is also the reason why i don't allow saving the stream to disk (like decryphd does).
  I have tested this feature with mplayer under linux, works quite well (without sound of course), but sometimes it looks like i have some dropped frames, looks like fast forward sometimes. This may be because of the buffering DumpHD does, but i'm not sure. I like to know how you like this feature and how it works for you, maybe i can optimize it in the future.
• DiscID override
  You can now change the DiscID of a disc to something else to force the use of another KEYDB key entry. I really don't know anymore why i wanted to have that feature, i think it was because of the duplicate old BluRay DiscIDs. Now this feature is not really useful anymore, but the button was in the GUI so i finally implemented this function .
• Title editing
  You can now change the title of a disc. This is quite useful if you used the direct key retrieval feature to get the keys from the disc to have a nicer entry in the KEYDB . Keep in mind that if you change the title of an entry which is in the old KEYDB format it will get updated to the new version.
• Additional enhancements
  DumpHD now copies the CERTIFICATE folder of BluRay discs and uses the Title Key File with the lowest number to calculate the DiscID for HD-DVDs with Advanced Content (for the case that the VTKF0000.AACS is missing)

[mrazzido]

Hey! thx for NEW version! Great Job! i test it later! :-)

[killa_kid]

That is incredible!

Thanks for all the fantastic work you do.


EDIT: well i have now tried to use the direct key retrieval but I keep getting the following error:

T:\Download\dumphd_0.4\aacskeys.dll: This application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem
Direct key retrieval disabled, only keys from the database will be used

I can use the aacskeys.exe on its own without a problem, so I am unsure what the problem is. Do you have any idea?

[FirstBorg]

Im not sure in which folder, but I just copied the aacskeys.dll in every(main dumphd folder, and all subfolders) and then it works.

Thanks for the new version!

[KenD00]

@killa_kid:
Are you using Windows Vista, maybe 64 bit Version? The library has been compiled under 32 bit Windows XP, it will most probably not work under 64 bit. However, the full sourcecode is included, you only need the (free) Visual Studio C++ 2005 Express Edition and the JDK 1.5 or later to compile it yourself.

@FirstBorg:
Both readme's say to copy the library into the directory of DumpHD...