Ultra HD Blu-ray

[Dandu]

Hi,

I have a question, is there a way to decrypt Blu-ray Ultra HD on a PC ?

Actually, i have a Blu-ray Player who read Ultra HD Blu-ray (LG BH16NS55) but there is no software to read the content (i use a Xbox One S to watch it).

The structure seems the same as classic Blu-ray, i suppose that with the key, it's possible to decrypt the content.

[Music Fan]

Are you sure the LG BH16NS55 is UHD compatible ? I don't find any mention of that about this model.
AACS 2.0 hasn't been cracked yet ;
https://www.reddit.com/r/Piracy/comments/4hkyo7/4k_bluray_rips/
http://arstechnica.com/gadgets/2016/02/next-gen-ultra-hd-blu-ray-discs-probably-wont-be-cracked-for-a-while/

[Dandu]

Yep, i can read a Ultra HD Blu-ray (see the content) on my Mac without problem

https://pbs.twimg.com/media/CqsVaMHWgAAlnlM.png

[Music Fan]

Interesting, was this skill written on the box ?
I wonder if others pc's BD players can play UHD discs without mentioning it.

[sneaker_ger]

This isn't new. In the avsforum there are other reports of LG drives who could also "read" the discs. But "read" only means showing the title and size. The encryption is not broken so you cannot do anything useful.

[Sparktank]

According one professor here, you only need AACS 2.0 for decrypting audio only.
The AACS 2.0 is a protection that does not let you to RIP THE AUDIO , yet. You can do it with video and in 10bit "precision" , with HEVC 10bit, just fine. You cannot rip the audio in multi channel because of the protection, just stereo.

[Music Fan]

According one professor here, you only need AACS 2.0 for decrypting audio only.
I already imagine what will do most of people : rip UHD discs for video, Blu-ray for audio then mux both.

[qyot27]

Blu-ray Discs use UDF 2.5 as their filesystem. That's not the problem, and it's not really related to the optical drive. You could probably put one of the UHD Blu-rays in a first-generation BDXL-capable drive accessed by Windows Vista with stock drivers and it'd show the contents of the disc just fine. It'd probably even be fine if the filesystem on UHD Blu-ray is UDF 2.6 (still >10 years old) rather than 2.5.

The problem is AACS 2.0 not being broken. It's not inconceivable that studios could face such a backlash or early implementation problem from AACS 2.0 that they might issue some discs with the first version of AACS like with regular Blu-ray. I just highly doubt that. Highly.

According one professor here, you only need AACS 2.0 for decrypting audio only.
The AACS 2.0 is a protection that does not let you to RIP THE AUDIO , yet. You can do it with video and in 10bit "precision" , with HEVC 10bit, just fine. You cannot rip the audio in multi channel because of the protection, just stereo.
I'm gonna need some ibuprofen.

[dizzier]

I've spent some time digging through Sony WikiLeaks stash, here's what I've found.

UHD Bluray-Discs are basically BDXL discs, so some drives might read them. It is not official though and not mentioned on the box or in the specs. Note that not all BDXL drives are capable of this, I'm not sure why.

AACS 2.0 has some similarities with AACS 1.0. It obviously encrypts all the audio and video content on the disc. Problems:
- host/drive certificates and any kind of device/processing key are completely separate, keys/certs from AACS 1.0 will not work
- AACS 2.0 discs can be either offline or online, offline let's you play the disc in a usual way if you have device keys, online discs require Internet access to get proper decryption keys (I have no idea what kind of discs are currently available)
- they've made some attempts to secure the online protocol, it probably will not be sufficient to just replay the request sent by legitimate player
- since drive/host certs are separate (and in different format, with longer key and signature) this probably means that a new method of retrieving VID must be implemented by the drives; this means that while BDXL drives can read UHD discs, they will not be able to perform AACS 2.0 auth and retrieve VID (this obviously might be possible with a firmware upgrade, but I guess drive manufacturers will prefer to sell you a new drive)
- there are no PC software players capable of AACS 2.0 yet, so there is no place to try to extract any keys/certs
- there is no public specification (unlike AACS 1.0) and there won't be one

All of this is based on various drafts and presentations, so it might as well all work differently. Unfortunately it seems that there won't be any progress with AACS 2.0 until official UHD supporting PC drives and software players are available. Unless you can reverse engineer hardware players;)

[SeeMoreDigital]

Okay...

If you put aside the data decryption side of things. Can people extract all the data from UHD disc's with one of these LG BH16NS55 drives?


Cheers

[Dandu]

Blu-ray Discs use UDF 2.5 as their filesystem. That's not the problem, and it's not really related to the optical drive. You could probably put one of the UHD Blu-rays in a first-generation BDXL-capable drive accessed by Windows Vista with stock drivers and it'd show the contents of the disc just fine. It'd probably even be fine if the filesystem on UHD Blu-ray is UDF 2.6 (still >10 years old) rather than 2.5.



No.

I have tried with many BD-XL drive and they can't read Ultra HD BLu-ray. It's a new generation.

There is difference between Ultra HD BLu-ray and BDXL, this paper explain that : http://www.blu-raydisc.com/Assets/Downloadablefile/White_Paper_General_4th_20150817_clean.pdf

Actually, a drive compatible with BD-ROM4 (https://www.blu-raydisc.info/content-protection/content-protection-rom4.php) is an obligation, and LG is the only manufacturer who made that.

[Dandu]

And i can try to read files on the disc today (and try to obtain the video).

But it's complicated to send the files on the net, it's very big (98 GB for Batman v Superman)

[sneaker_ger]

And i can try to read files on the disc today (and try to obtain the video).

But it's complicated to send the files on the net, it's very big (98 GB for Batman v Superman)
No one asked for it.

[dizzier]

No one asked for it.

And sharing the whole disc would be really pointless. You need to get a working player and observe how it interacts with a original disc to try to do anything about AACS 2.0.

[dizzier]

I've also found an interesting presentation: http://www.cptwg.org/assets/2015/2015-1014_CPTWG_AACS%20Presentation.pdf

[dizzier]

I have bought BH16NS55 and Deadpool UHD Blu-Ray disc.

First, some impressions about the drive. Yes, it can read UHD Blu-Ray. Deadpool is a two layer UHD disc with 33GB per layer. There are also three layer discs, with the same data density, like Batman vs. Superman, but I haven't tested that (will not spend money on that piece of crap). While it reads UHD discs, it is kinda unreliable. From time to time it simply refuses to work and returns various errors. Usually reloading the disc fixes the problem, but one time I had to power it down, otherwise it refused to work at all. I was able, on the second try, to make image of Deadpool disc with data transfer not leaving 10-20MB/s range. It might be just an unreliable disc, I don't have a second one yet. The drive does not support AACS 2.0, so it almost surely will not work with software players, if they become available.

Now onto AACS 2.0, which is more interesting. The overall disc structure seems the same. UHD disc does not contain BD+ (normal Blu-Ray counterpart is BD+). It does have bus encryption enabled, which seems mandatory for AACS 2.0.
The MKB file has the same basic structure like those from AACS 1.0. It reports itself as a MKBv60. It has a new type and several new record types with unknown purpose. It is signed with a different AACS LA certificate, which was expected. Host and driver revocation lists are exactly the same like those found on normal Blu-Ray MKBv60 discs. This makes sense, as drives would need to maintain only a single list of host certs to revoke (AACS 2.0 certificates use longer keys, but the certificate ID space seems shared). The subset-difference tree seems to be much larger, instead of usual 562 entries there are now 181250 (number of C-values record entries to be precise).

I've tried running AACS 1.0 auth for this disc. Surprisingly... it was successful. I was able to read VID, PMSN and Read Data Key (used by bus encryption). Now, onto some speculation why it works and what does it mean.
My guess is that AACS 1.0 drives are not supposed to read UHD discs. Both VID and PMSN are simply some values store on disc, that are not accessible in normal way. Drive is perfectly able to read them, but reading is protected by AACS-authentication process, which requires host certificate. If we assume that AACS 2.0 stores those values at the exactly the same place as AACS 1.0, then AACS 1.0 drive, capable of reading UHD discs, will gladly read them, provided AACS 1.0 host certificate. Bus encryption is somewhat different, (some) disc sectors have some low level markers that tell the drive to encrypt them on the fly. Getting the decryption key from the drive also requires AACS-authentication. If the same markers are used by AACS 2.0 (I don't see why not, it is kinda low level thing) then AACS 1.0 drive will handle this perfectly fine, if it can read the disc. Which we know it can :)
If the above is correct, then it means that this kind of drive kinda defeats part of AACS 2.0. But, don't get your hopes too high. The values (VID, etc.) I was able to retrieve could be completely bogus. Also, to fully decrypt AACS 2.0 we would need device/processing/volume key. There were no new device/processing keys available even for AACS 1.0 for a few years and we don't have any player/ripper to extract volume key from.

Disc information:
Disc ID: F58AA868C40D5894C332F9BDB978522432D5CC82
VID : 55F4D4B1F77D26D0E7A9D55DA5599AA7
MKBv : 60
PMSN : will not provide for obvious reasons, but was able to read it
Bus encryption:
Device support: yes
Enabled in media: yes
Content Certificate ID: 006F8005EF00
BD-J Root Cert hash: 0000000000000000000000000000C73B53981817
Device binding ID: some random value generated by my PC
Host Revocation List (MKB version 60):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff2210400001 - ff221040001f
ff2220000001 - ff22200000ff
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff2340000001 - ff23400000ff
ff2710000001 - ff271000001f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff80000146
Drive Revocation List (MKB version 60):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

[candela]

There were no new device/processing keys available even for AACS 1.0 for a few years and we don't have any player/ripper to extract volume key from.


Do you have any idea why no PS3 bluray keys have leaked? The device keys of the original hacked PS3 firmware are available (they work with AACSKeys). Then I read here (http://wololo.net/2015/05/19/ps3-blu-ray-renew-aacs-encryption-keys-on-mfw-4-46/) PS3 Bluray player can be updated on hacked firmware. So can't they use the same method to get the keys from this updated player or is this player better protected?

[Dandu]

For information, the player can read Batman vs. Superman, i have tested with this disc.

[dizzier]

Do you have any idea why no PS3 bluray keys have leaked? The device keys of the original hacked PS3 firmware are available (they work with AACSKeys). Then I read here (http://wololo.net/2015/05/19/ps3-blu-ray-renew-aacs-encryption-keys-on-mfw-4-46/) PS3 Bluray player can be updated on hacked firmware. So can't they use the same method to get the keys from this updated player or is this player better protected?

Not really sure, however PS3 encryption was defeated only because of a stupid mistake. The cryptography behind PS3 security itself was not defeated, Sony just screw up by using it incorrectly (using constant 'k' in ECDSA algorithm instead of cryptographicly secure random number). They have fixed it, however I am not really exactly how, I was not following that. Some ideas why there are no new processing keys:
- processing keys are present in the firmware, however, as I've said, the cryptography of PS3 was not broken; they fixed their usage of cryptography and then released a new firmware, using it correctly with new keys; while you can update it you cannot decrypt it and thus you cannot get hold of the new processing keys
- after PS3 screw up AACS discs were switched to use different processing key for each disc; there is nothing in the spec that forbids it and it was even noticed on this forum
- they've fixed it by making the MKB treatment online; PS3 sends MKB file to Sony servers, they provide VUK in response, that way no processing or device key is present on the console
- nobody skilled looked at it for a while ;)

[candela]

I have bought BH16NS55 and Deadpool UHD Blu-Ray disc.

If the above is correct, then it means that this kind of drive kinda defeats part of AACS 2.0. But, don't get your hopes too high. The values (VID, etc.) I was able to retrieve could be completely bogus. Also, to fully decrypt AACS 2.0 we would need device/processing/volume key.


According to this post (http://www.makemkv.com/forum2/viewtopic.php?f=12&t=16832) on the MakeMKV forum the VID retrieved using the AACS1 cert is valid. Therefore it should be possible to play the discs for which a VUK is known. So if there is anyone that has one of these AACS1 UHD-friendly drives and also has one of the discs for which a VUK has been posted here (https://forum.doom9.org/showthread.php?p=1826296#post1826296) , please try to play it in VLC and post the results

[sneaker_ger]

wait, what
It can't be that easy. What were they thinking? Should I stockpile these for later ebay use now?

[BRC85sYrg]

what about the LG BH14NS40?

would it be possible to read and decrypt UltraHD discs on it?

The specs say it supports BD-R QL:
http://www.lg.com/us/support/products/documents/BH14NS40.pdf

Is someone who owns such a device willing to try it out and share the result?

thank you.

[SeeMoreDigital]

what about the LG BH14NS40?

would it be possible to read and decrypt UltraHD discs on it?Hi @BRC85sYrg,

A few weeks ago I asked much the same question here: https://forum.doom9.org/showthread.php?t=175009

[BRC85sYrg]

thanks for your answer SeeMoreDigital.

I'm aware of the deuhd compatibility list.

But I think they just didn't test the drive I posted about. So my question is still unanswered.

My goal:
If the datasheet is faultless I will try to buy this now discontinued drive to test out it's lightscribe feature and at the same time have a UltraHD friendly drive with AACS 1.0.

Edit:
found a thread which explains it does work if it's a second gen BH14NS40 (SVC. Code NS50, 2015+)
source: https://club.myce.com/t/lg-wh14ns40-doesnt-read-4k-uhd-discs/313420

[candela]

wait, what
It can't be that easy. What were they thinking? Should I stockpile these for later ebay use now?

Well apparently it works according to people on makemkv forum and myce forums. I just ordered a drive in case they release some 4K movies I actually want to buy in the future :)

[KaraokeAmerica]

I own the following LG drives:

WH14NS40 v1.01
BH10LS30 v1.00
WH16NS60 v1.00

The last one is labeled a UHD drive so I'm guessing it will not be "friendly". However, I am not sure about the other two.

I have a WH16NS40 coming next week. It would be nice to find out though that, one or more of my existing drives would work!

I also have a Plextor PX-940SA. It's not currently installed and there is no more Plextor support for it at all that I'm aware of.

[MikeN]

Using ANYDVD my drive gives an error which states:-

Drive supports bus encryption!
Disc wants bus encryption!
couldn't retrieve AGID (bus encryption)!
ERROR processing Blu-ray disc!

Can someone translate or have I wasted over £150 on this drive and will be unable to copy UHD discs

(apologies if this has been posted previously)

[candela]

Using ANYDVD my drive gives an error which states:-

Drive supports bus encryption!
Disc wants bus encryption!
couldn't retrieve AGID (bus encryption)!
ERROR processing Blu-ray disc!

Can someone translate or have I wasted over £150 on this drive and will be unable to copy UHD discs

(apologies if this has been posted previously)

You can probably use DeUHD with that drive which will cost you another few $100. The VUKs are useless for you until an AACS 2.0 certificate is made public (or Redfox/MakeMkv/Dvdfab stop pretending they don't have one already)

[Ch3vr0n]

You can probably use DeUHD with that drive which will cost you another few $100. The VUKs are useless for you until an AACS 2.0 certificate is made public (or Redfox/MakeMkv/Dvdfab stop pretending they don't have one already)

First of all the VUK are NOT useless if you've got an UHD friendly drive. AnyDVD uses a similar approach as other tools to decrypt UHD titles based on the VUK's in the config file.

I'd also love to see your proof to where ANY redfox staff member said they had a certificate, or proof to your claims that they had one but are hiding it. You seem to be severely underestimating how difficult AACS 2.0 is and it's requirements (and dependencies like Intel SGX for certain playback methods). If redfox had a certificate i'm pretty damn sure they wouldn't be using a half baked solution such as the VUKs.

James (Lead Anydvd developer) said it himself that he only added the VUK method to keep a minor batch of ppl happy, including himself.

So, before you go make claims as to ANY party (whether it's RedFox or someone else) has a valid host certificate but are deliberately hiding it, make damn sure you've got the proof to back it up.

No software developer wants ppl to rush over to their support staff / forums with "hey, decrypting UHD title X using software Y doesn't work. Someone on forum Z said you could do it" after spending lots of cash to get the needed hardware, and having to disappoint the users.

Many of you may know Redfox 1 and myself from the Redfox forums and i am pretty damn sure they DO NOT have any valid host certificate. Both of us have direct line (as in among other things working mailboxes for the staff) to the staff and we'd know if they had.

[Maxiuca]

Drive supports bus encryption!
Disc wants bus encryption!
couldn't retrieve AGID (bus encryption)!
ERROR processing Blu-ray disc!

I had the same issue with the Buffalo drive recommended for DeUHD. DeUHD can use a couple of drives that officially support UHD BD and AACS 2.0, so probably they've found some kind of a workaround (the demo version of DeUHD did work with that drive).

The VUK method needs an older drive that only uses AACS 1.0. I've just received my LG BE16NU50 from newegg and the decryption works with both AnyDVD and MakeMKV out-of-box.

[KaraokeAmerica]

I had the same issue with the Buffalo drive recommended for DeUHD. DeUHD can use a couple of drives that officially support UHD BD and AACS 2.0, so probably they've found some kind of a workaround (the demo version of DeUHD did work with that drive).

The VUK method needs an older drive that only uses AACS 1.0. I've just received my LG BE16NU50 from newegg and the decryption works with both AnyDVD and MakeMKV out-of-box.



Can you please explain this more?

I already owned two LG Blu-ray drives (I don’t have the models in front of me) but neither was one of the “friendly” models that I found in the forums that would work with the VUK method. So I bought the same NU50 drive that you just did. Haven’t even installed it yet it’s firmware revision 1.02 based on the sticker.

I also have one brand new LG Blu-ray drive that is advertised as UHD capable and comes with software to play 4K disc’s. I haven’t even tried anything with that yet Other than regular Blu-ray’s.

Are you saying that any of my LG Blu-ray drives that possibly I already have will work with the VUK method assuming I don’t upgrade the firmware?

For the record I haven’t tried actually ripping a 4K disc at all yet. I only own one and it’s guardians of the galaxy 2. I haven’t even had time to play with it.

Thanks for posting!




Sent from my iPhone using Tapatalk

[Maxiuca]

Can you please explain this more?
I'll try :)

I haven't dug into this very deeply, so anyone please feel free to correct my bullshit, but basically you have 3 kinds of Blu-ray drives currently available on the market (or the aftermarket):

- "old" drives that use AACS 1.0 and are not physically (and/or firmware wise) able to read the "new" UHD discs (which hold up to 66 GB on two layers or 100GB on three layers)

- "new" drives that still use AACS 1.0 but implemented some more recent Blu-ray spec (which was and might still be in development) that also included all current physical formats, including BDXL discs as well as UHD discs

- "newest" drives that are UHD certified, so basically they use AACS 2.0, follow recent BD specs, usually come with UHD software players bundled.

The VUK method (so AnyDVD/MakeMKV and the keyfile) will only work with one the "new" drives. My NU50 drive came with 1.01 firmware (and I'm keeping it that way), but I haven't seen anyone reporting those drives not working.

DeUHD probably has some additional code (they found a workaround or a loophole) and it can work with at least one of the "newest" drives (namely the Japanese Buffalo drive) to decrypt the UHD disks. Since their software can't break just any disk and you can still use some of the "new" drives with DeUHD I think their decryption method still relies on VUK keys and some "exploit" that enable the usage of the "newest" drives.

To sum it up, yeah, you should be able to rip your disk of GotG2 if you can find the VUK key matching your disk ID.

To get the disk ID you need to calculate the SHA1 checksum (hash) the AACS\Unit_Key_RO.inf file on the disc.
You can do it online (onlinemd5.com) or using your own preferred tool.

You'll find the VUK keys here: https://forum.doom9.org/showthread.php?t=120988&page=26

[KaraokeAmerica]

I'll try :)

I haven't dug into this very deeply, so anyone please feel free to correct my bullshit, but basically you have 3 kinds of Blu-ray drives currently available on the market (or the aftermarket):

- "old" drives that use AACS 1.0 and are not physically (and/or firmware wise) able to read the "new" UHD discs (which hold up to 66 GB on two layers or 100GB on three layers)

- "new" drives that still use AACS 1.0 but implemented some more recent Blu-ray spec (which was and might still be in development) that also included all current physical formats, including BDXL discs as well as UHD discs

- "newest" drives that are UHD certified, so basically they use AACS 2.0, follow recent BD specs, usually come with UHD software players bundled.

The VUK method (so AnyDVD/MakeMKV and the keyfile) will only work with one the "new" drives. My NU50 drive came with 1.01 firmware (and I'm keeping it that way), but I haven't seen anyone reporting those drives not working.

DeUHD probably has some additional code (they found a workaround or a loophole) and it can work with at least one of the "newest" drives (namely the Japanese Buffalo drive) to decrypt the UHD disks. Since their software can't break just any disk and you can still use some of the "new" drives with DeUHD I think their decryption method still relies on VUK keys and some "exploit" that enable the usage of the "newest" drives.

To sum it up, yeah, you should be able to rip your disk of GotG2 if you can find the VUK key matching your disk ID.

To get the disk ID you need to calculate the SHA1 checksum (hash) the AACS\Unit_Key_RO.inf file on the disc.
You can do it online (onlinemd5.com) or using your own preferred tool.

You'll find the VUK keys here: https://forum.doom9.org/showthread.php?t=120988&page=26



Thanks! Sorry for the slow reply!


Sent from my iPhone using Tapatalk

[Dasa21]

Hello, welcome to ask why BD Rebuilder ver. 0.61.05 still converts DTS-HD XXL 7.1CH audio to DTS 5.1CH? At the same time, I have set the original English soundtrack to 7.1ch during compression. I convert 4K movies with 85 GB to 50 GB. Please advise where I make mistakes.

[microhunt]

Okay...

If you put aside the data decryption side of things. Can people extract all the data from UHD disc's with one of these LG BH16NS55 drives?


Cheers

Yes no problem. You can flash the firmware on this drive from the current firmware which should be 1.05 encrypted if it is a brand new drive.

You can crossflash this drive to Hitachi WH16NS60 on firmware 1.02mk which will be compatible with MakeMKV.

You can then backup your personal discs to a lossless format. You can backup to a MKV file or full folder backup with menus.

There is plenty of useful threads on MakeMKV for flashing this drive. Search the user asmcon who I am sure will help you out with your BH16NS55/BH16NS40 drive. If the drive is older than 2015 then you might not be able to read UHD discs. Drive Platform MT1939 is not supported. If you install MakeMKV and loaf a UHD disc in the drive you will see if your drive build is MT1959 which is supported.

Hope this helps

[SeeMoreDigital]

Yes no problem. You can flash the firmware on this drive from the current firmware which should be 1.05 encrypted if it is a brand new drive.

You can crossflash this drive to Hitachi WH16NS60 on firmware 1.02mk which will be compatible with MakeMKV.

You can then backup your personal discs to a lossless format. You can backup to a MKV file or full folder backup with menus.

There is plenty of useful threads on MakeMKV for flashing this drive. Search the user asmcon who I am sure will help you out with your BH16NS55/BH16NS40 drive. If the drive is older than 2015 then you might not be able to read UHD discs. Drive Platform MT1939 is not supported. If you install MakeMKV and loaf a UHD disc in the drive you will see if your drive build is MT1959 which is supported.

Hope this helpsThanks. I managed to sort out how to back-up 4K UHD discs more than three years ago using an ASUS BW-16D1HT drive ;)