Public MKBs [Archive] - Doom9's Forum

Eneri

5th October 2016, 20:07

Are there security or law-related complications about publishing MKBs found in Blu Ray disks one buys? Are there publicly downloadable copies of the last MKBs? Is it allowed to post them on this forum?

I own just a few Blu Ray disks, all of them with very old MKBs. If it is allowed, I would thank you if someone could share the latest MKB available from one of your disks (it is the file AACS/MKB_RO.inf in the disk). I managed to get the private host key from a couple of players and would like to know whether they are revoked or not.

dizzier

6th October 2016, 13:29

I believe there is nothing prohibiting MKBs to be published. However, to save space, here's the host revocation list for MKBv61:
0x000000000001 - 0x0000000003E8
0x000080000001 - 0x0000800080E8
0x270F80000001 - 0x270F80000BB8
0xFF2210100001 - 0xFF221010001F
0xFF2210400001 - 0xFF221040001F
0xFF2220000001 - 0xFF22200000FF
0xFF2290100001 - 0xFF229010001F
0xFF2290400001 - 0xFF229040001F
0xFF22A0000001 - 0xFF22A00000FF
0xFF2318000001 - 0xFF231800001F
0xFF2318100001 - 0xFF231810001F
0xFF2318400001 - 0xFF231840001F
0xFF2340000001 - 0xFF23400000FF
0xFF2710000001 - 0xFF271000001F
0xFF2790000001 - 0xFF279000001F
0xFFFF0000000B - 0xFFFF00000014
0xFFFF00000016
0xFFFF00000021 - 0xFFFF0000002A
0xFFFF00000035 - 0xFFFF00000038
0xFFFF0000004E - 0xFFFF00000052
0xFFFF00000054 - 0xFFFF00000057
0xFFFF0000005D - 0xFFFF00000066
0xFFFF00000080
0xFFFF00000088 - 0xFFFF00000091
0xFFFF00000094
0xFFFF000000AE
0xFFFF000000B2 - 0xFFFF000000BB
0xFFFF000027DB
0xFFFF00002817
0xFFFF00002820
0xFFFF00002834 - 0xFFFF0000283D
0xFFFF00002846
0xFFFF0000284B
0xFFFF80000001 - 0xFFFF80000024
0xFFFF80000029
0xFFFF8000002F
0xFFFF80000039
0xFFFF80000045
0xFFFF80000071
0xFFFF80000079
0xFFFF8000007C - 0xFFFF8000007E
0xFFFF800000AD
0xFFFF800000C4 - 0xFFFF800000C6
0xFFFF800000D0
0xFFFF800000F4 - 0xFFFF800000FD
0xFFFF80000146

Just check certificate ID and you'll see if it is revoked or not. Note that host private keys aren't particularly interesting, they can be easily extracted. The one I've posted some time ago on this forum still works up to MKBv61 (MKBv62 was released since then, but I don't know if it was revoked there or not).

candela

25th March 2018, 23:26

For testing purposes, I made a collection of MKB_RO.inf files and dumped the HRL and DRL lists. Download links: MKBv01-64 (http://s000.tinyupload.com/index.php?file_id=45029431818335546875) & HRL_DRL_MKBv01-64 (http://s000.tinyupload.com/index.php?file_id=09920693935119565226)

For some reason, MKBv26 cannot be dumped by libaacs. I tried several different discs. However, the HRL and DRL are identical to MKBv27. Also, it appears these MKB versions were never released: 02, 05, 11, 13, 29, 41, 45, 59. If you have any disc with these versions please post.

HRL and DRL for MKBv64

Host Revocation List (MKB version 64):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
015380013c69 - 015380018a88
06d580000015 - 06d580000028
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff2210400001 - ff221040001f
ff2220000001 - ff22200000ff
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff2340000001 - ff23400000ff
ff2710000001 - ff271000001f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b4
ffff800001c0
ffff800001d2
Drive Revocation List (MKB version 64):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

candela

19th June 2018, 18:41

Discs with MKBv65 are beginning to popup. Download links: HRL_DRL_MKBv01-65.7z (http://s000.tinyupload.com/index.php?file_id=06573138205838437466) & MKBv01-65.7z (http://s000.tinyupload.com/index.php?file_id=14758816572330585189)

HRL and DRL for MKBv65

Host Revocation List (MKB version 65):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
015380013c69 - 015380018a88
06d580000015 - 06d580000028
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff2210400001 - ff221040001f
ff2220000001 - ff22200000ff
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff2340000001 - ff23400000ff
ff2710000001 - ff271000001f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b4
ffff800001c0
ffff800001d2
Drive Revocation List (MKB version 65):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

Compared to MKBv64, host certificate ffff80000053 has been revoked

TTide

19th June 2018, 21:05

Where do you save this information to?
Does this mean we can watch MKBv65 movies?

candela

19th June 2018, 21:52

Where do you save this information to?
Does this mean we can watch MKBv65 movies?

No, it means you don't want to insert a MKBv65 disc in your drive if you want to keep using the revoked certificate (should you have the key for it). The data in this thread is only for information/testing purposes, it does not contain anything you can use to enable playback

candela

20th November 2018, 18:57

MKBv66 has been released. Download links: HRL_DRL_MKBv01-66.7z (http://s000.tinyupload.com/index.php?file_id=03929126756579118725) & MKBv01-66.7z (http://s000.tinyupload.com/index.php?file_id=04970658091284521874)

HRL and DRL for MKBv66

Host Revocation List (MKB version 66):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
015380013c69 - 015380018a88
06d580000015 - 06d580000028
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff2210400001 - ff221040001f
ff2220000001 - ff22200000ff
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff2340000001 - ff23400000ff
ff2710000001 - ff271000001f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b4
ffff800001c0
ffff800001d2
ffff800001e9
ffff800001eb
Drive Revocation List (MKB version 66):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

Compared to MKBv65 the following host certificates have been revoked:
- ffff800001e9
- ffff800001eb

They really don't seem to like the UHD loophole as they are now blocking host certificates every MKB release :(

maetel99

29th November 2018, 06:45

They really don't seem to like the UHD loophole as they are now blocking host certificates every MKB release :(
Candela, could you explain what you mean by this? What is the "UHD loophole" and why would it affect AACS 1.0 host certificates?

dizzier

29th November 2018, 17:11

Candela, could you explain what you mean by this? What is the "UHD loophole" and why would it affect AACS 1.0 host certificates?

This is nicely explained here (https://www.makemkv.com/forum/viewtopic.php?f=16&t=16832)

candela

11th March 2019, 00:25

MKBv68 has been released (MKBv67 was skipped). Download links: HRL_DRL_MKBv01-68.7z (http://s000.tinyupload.com/index.php?file_id=42715416445056626621) & MKBv01-68.7z (http://s000.tinyupload.com/index.php?file_id=75511319736882913731)

HRL and DRL for MKBv68

Host Revocation List (MKB version 68):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
015380013c69 - 015380018a88
06d580000015 - 06d580000028
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff221010005f - ff2210100064
ff2210100068 - ff221010006b
ff2210400001 - ff221040001f
ff22104004f7 - ff22104004fb
ff22104084f6 - ff22104084fa
ff2220000001 - ff22200000ff
ff22200084f6 - ff22200084fa
ff22200104f6 - ff22200104fa
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff23184004f7 - ff23184004fb
ff2340000001 - ff23400000ff
ff2710000001 - ff271000001f
ff2710000063 - ff2710000068
ff271000006c - ff271000006f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b4
ffff800001c0
ffff800001d2
ffff800001e9
ffff800001eb
Drive Revocation List (MKB version 68):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

Compared to MKBv66 the following host certificates have been revoked:

ff221010005f - ff2210100064
ff2210100068 - ff221010006b
ff22104004f7 - ff22104004fb
ff22104084f6 - ff22104084fa
ff22200084f6 - ff22200084fa
ff22200104f6 - ff22200104fa
ff23184004f7 - ff23184004fb
ff2710000063 - ff2710000068
ff271000006c - ff271000006f

Hmm... anyone has an idea to which device these certs belong or which ripper uses these?

candela

4th July 2019, 21:41

MKBv70 has been released (MKBv69 was skipped). Download links: HRL_DRL_MKBv01-70.7z (http://s000.tinyupload.com/index.php?file_id=40836230892701190072) & MKBv01-70.7z (http://s000.tinyupload.com/?file_id=04885383036943456065)

HRL and DRL for MKBv70

Host Revocation List (MKB version 70):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
015380013c69 - 015380018a88
06d580000015 - 06d580000028
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff221010005f - ff2210100064
ff2210100068 - ff221010006b
ff2210400001 - ff221040001f
ff22104004f7 - ff22104004fb
ff22104084f6 - ff22104084fa
ff2220000001 - ff22200000ff
ff22200084f6 - ff22200084fa
ff22200104f6 - ff22200104fa
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff23184004f7 - ff23184004fb
ff2340000001 - ff23400000ff
ff2710000001 - ff271000001f
ff2710000063 - ff2710000068
ff271000006c - ff271000006f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b1
ffff800001b4
ffff800001c0
ffff800001d2
ffff800001e9
ffff800001eb
Drive Revocation List (MKB version 70):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

Compared to MKBv68 the following host certificates have been revoked:

ffff800001b1

candela

15th October 2019, 20:05

MKBv72 has been released (MKBv71 was identical to MKBv70 as far as HRL/DRL). Download link (https://mega.nz/#F!9M8gDASB!tmB7DvGIZKxmp6-31x0NhQ)

HRL and DRL for MKBv72

Host Revocation List (MKB version 72):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
015380013c69 - 015380018a88
06d580000015 - 06d580000028
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff221010005f - ff2210100064
ff2210100068 - ff221010006b
ff2210400001 - ff221040001f
ff22104004f7 - ff22104004fb
ff22104084f6 - ff22104084fa
ff2220000001 - ff22200000ff
ff22200084f6 - ff22200084fa
ff22200104f6 - ff22200104fa
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff23184004f7 - ff23184004fb
ff2340000001 - ff23400000ff
ff2710000001 - ff271000001f
ff2710000063 - ff2710000068
ff271000006c - ff271000006f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b1
ffff800001b4
ffff800001c0 - ffff800001c9
ffff800001d2
ffff800001e9
ffff800001eb
Drive Revocation List (MKB version 72):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

Compared to MKBv70 the following host certificates have been revoked:

ffff800001c0 - ffff800001c9

candela

5th April 2020, 18:32

MKBv76 has been released (MKBv73,74,75 were skipped). Download link (https://mega.nz/#F!9M8gDASB!tmB7DvGIZKxmp6-31x0NhQ)

HRL and DRL for MKBv76

Host Revocation List (MKB version 76):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
015380013c69 - 015380018a88
06d580000015 - 06d580000028
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff221010005f - ff2210100064
ff2210100068 - ff221010006b
ff2210400001 - ff221040001f
ff22104004f7 - ff22104004fb
ff22104084f6 - ff22104084fa
ff2220000001 - ff22200000ff
ff22200084f6 - ff22200084fa
ff22200104f6 - ff22200104fa
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff23184004f7 - ff23184004fb
ff2340000001 - ff23400000ff
ff2710000001 - ff271000001f
ff2710000063 - ff2710000068
ff271000006c - ff271000006f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b1
ffff800001b4
ffff800001c0 - ffff800001c9
ffff800001d2
ffff800001e9
ffff800001eb
ffff80000217
Drive Revocation List (MKB version 76):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

Compared to MKBv72 the following host certificates have been revoked:

ffff80000217

Losko

6th December 2021, 20:27

candela

7th December 2021, 20:48

A couple of questions from a noob:

when you say some host certificate have been revoked, does it mean some device will stop decrypting discs? (btw, does "host" mean a PC? a set-top-box? a bluray drive?)
if the Media Key Block can revoke some certificates, does this mean it is stored onto the bluray drive? and if it is, is this irreversible?

You would need to read the AACS specification to get a better understanding of how everything works

1. The host certificate is used in PC based systems (software player + bd-drive) to read the Volume Identifier (VID) and remove optional bus encryption. If the host certificate used by the player is revoked, the drive refuses to talk to the player. If you can't read the VID you cannot calculate the keys needed for disc decryption. However if all the keys for your disc are already in a database like the one from FindVUK, you no longer need the host certificate (unless the disc uses bus encryption you need it for playback but that's just a small percentage of BD discs. However, all UHD discs use it).

2. When you insert a disc in a drive, the drive compares the MKB version on the disc to the version stored in its flash memory. If the version is higher it overwrites the stored revocation list with the new one on the disc. From then on it's no longer possible to play new or old (!) discs with a revoked certificate. It's possible on some drives to "clear" the list with a firmware flashing tool like Dosflash but that's a dangerous tool that can easily brick your drive so it's not recommended

Losko

7th December 2021, 21:57

Thanks Candela! :thanks:

1. The host certificate is used in PC based systems (software player + bd-drive) to read the Volume Identifier (VID) and remove optional bus encryption. If the host certificate used by the player is revoked, the drive refuses to talk to the player. If you can't read the VID you cannot calculate the keys needed for disc decryption. However if all the keys for your disc are already in a database like the one from FindVUK, you no longer need the host certificate (unless the disc uses bus encryption you need it for playback but that's just a small percentage of BD discs. However, all UHD discs use it).

I recently used FindVUK to find keys for a few bluray discs and noticed they all were MKBv70 and MKBv72, some of the latest released.
So I was worried about my ability to keep using that optical drive to get more disc keys in future.

maetel99

9th December 2021, 05:50

The drive doesn't actually write a newer MKB to flash memory when you put the disc in. It only writes it when there is an attempt to "authenticate" the drive, meaning to obtain keys from the disc or to read data with bus encryption enabled. Usually this happens when you try to play or rip the disc.

So long as you don't play or otherwise attempt to obtain keys off the disc, you can read the disc without disturbing your stored MKB. That is why if you already have the keys for the disc via the keydb database, you can avoid overwriting your drive's MKB (so long as bus encryption is not required). You can also read the MKB file off the disc and determine its version.

candela

24th June 2022, 22:29

MKBv77 has been released. Download link (https://mega.nz/#F!9M8gDASB!tmB7DvGIZKxmp6-31x0NhQ)

HRL and DRL for MKBv77

Host Revocation List (MKB version 77):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
015380013c69 - 015380018a88
06d580000015 - 06d580000028
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff221010005f - ff2210100064
ff2210100068 - ff221010006b
ff2210400001 - ff221040001f
ff22104004f7 - ff22104004fb
ff22104084f6 - ff22104084fa
ff2220000001 - ff22200000ff
ff22200084f6 - ff22200084fa
ff22200104f6 - ff22200104fa
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff23184004f7 - ff23184004fb
ff2340000001 - ff23400000ff
ff2340518005
ff2710000001 - ff271000001f
ff2710000063 - ff2710000068
ff271000006c - ff271000006f
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b1
ffff800001b4
ffff800001c0 - ffff800001c9
ffff800001d2
ffff800001e9
ffff800001eb
ffff80000217
Drive Revocation List (MKB version 77):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

Compared to MKBv76 the following host certificates have been revoked:

ff2340518005

Note: I found out that MKBv75 does exist. However, HRL/DRL is identical to MKBv72

pitsie

30th June 2022, 10:19

MKBv77 has been released.

Thanks for that! Do you know of any titles that use v77?

candela

30th June 2022, 17:57

Thanks for that! Do you know of any titles that use v77?

"06E8DC16468C97E745851E0D51DFAED4B4541C85" "LUPIN_PART6_5 (ルパン三世 PART6 BOX II Disc1)"
"20D6B1480310EB02ADB3E7882C9CCBB31F1887E2" "PROMISES (Promises)"
"4274C5DBC9A822FA7A9AB902786763C6B2E1CBCA" "BDROM (Love Live! Nijigasaki High School Idol Club 2nd Season Vol.1)"
"6A7A81FC14BB9D8A099071D104102D00D2449AF2" "WORLDS_END_HAREM_3 (終末のハーレム 3)"
"89BA2BD8D35B2517E8DB4639A2C1B2BAE09302DF" "BD_VIDEO (Puella Magi Madoka Magica Magia Record Side Story Final SEASON 1)"
"8C0FCE3D88BA7A9F6B26582757C0A6725905D759" "LUPIN_PART6_8 (ルパン三世 PART6 BOX II Disc4)"
"9AFA9D4A73E55D2D28C2F31CC68C82D805974ED0" "LUPIN_PART6_7 (ルパン三世 PART6 BOX II Disc3)"
"FD0B4A15663510FD2B55CDAC8130E8D3FE7D2ACA" "LUPIN_PART6_6 (ルパン三世 PART6 BOX II Disc2)"

candela

2nd August 2022, 20:15

MKBv78 has been released. Download link (https://mega.nz/#F!9M8gDASB!tmB7DvGIZKxmp6-31x0NhQ)

HRL and DRL are identical to MKBv77

pitsie

4th August 2022, 20:06

MKBv78 has been released.

Wow years without new MKB and now two in short succession! Do you know which titles use v78?

Thanks!

candela

4th August 2022, 21:32

Wow years without new MKB and now two in short succession! Do you know which titles use v78?

Thanks!

"1D9CC3B22D44728376669F331F51D750DF72232E" "VS400B" "Righting Wrongs"
"77CCD7406626E7A60D031A1488F25E9A01B06E12" "" "SPY×FAMILY　Vol.1"
"F0F45D4F03B7E04DA380A920F769958EC38809E2" "VS400C" "Righting Wrongs"
"F23C80D05C0E40D53D179858287FDDCFF6DABC97" "BRMM_10552" "Pastel＊Palettes Special Live「TITLE DREAM」"

DirkAbt1

21st August 2022, 05:06

I have a question, I hope its fine to ask it here because I basicially don't know further, can anyone help me? Are there AACS host certificates available that are good to v76 or even higher (its the version I poisoned my drive with)? If so where would I have to go to get them? Is it possible that someone could share it privatly with me or is there just no way to get such a host certificate. I mean I am aware of MakeMKV and it works but I would just feel way better if I could just use every of my blu rays without worrying to need the VUK or an extra program.

I am just asking because the host certificate I get on the FindVUK Online Database is only good to v72 since 6 months.
Like I feel like there should be one out there, considering that the version was atleast 2 years ago from this post history but I just can't find anything.

Grimsdyke

23rd August 2022, 00:54

Yes, would be good to know if end-users have to/can do anything with the new datas or if these get added by the devs soon. Best wishes

DanTheMann15

23rd August 2022, 22:46

I am just asking because the host certificate I get on the FindVUK Online Database is only good to v72 since 6 months.
Like I feel like there should be one out there, considering that the version was atleast 2 years ago from this post history but I just can't find anything.[/QUOTE]

The problem is that there hasn't been many revocations and hence nobody is posting their valuable non-revoked host certs (for good reason too), a new one can come up if theirs happens to get revoked.

if this recently revoked cert gets found and published ff2340518005 it would work up to MKBv76, but we still won't have processing/device keys to play discs above v71, FindVUK can provide disc-specific keys for ya in that case.

but for now the best keys/cert we have publicly is this, which works with everything up to MKBv71
; KEYDB.cfg

; Processing Keys

; Device Keys
| DK | DEVICE_KEY 0x5FB86EF127C19C171E799F61C27BDC2A | DEVICE_NODE 0x0A00 | KEY_UV 0x00000400 | KEY_U_MASK_SHIFT 0x17 ; MKBv01-MKBv48
| DK | DEVICE_KEY 0x38841673E2B4E05191659899606CFFB8 | DEVICE_NODE 0x0C00 | KEY_UV 0x00000A00 | KEY_U_MASK_SHIFT 0x0B ; MKBv49-MKBv71

; Host Certificate
| HC | HOST_PRIV_KEY 0x909250D0C7FC2EE0F0383409D896993B723FA965 | HOST_CERT 0x0203005CFFFF800001C100003A5907E685E4CBA2A8CD5616665DFAA74421A14F6020D4CFC9847C23107697C39F9D109C8B2D5B93280499661AAE588AD3BF887C48DE144D48226ABC2C7ADAD0030893D1F3F1832B61B8D82D1FAFFF81 ; MKBv71

; Bluray Disc VUK Keys ;

Good luck!

DanTheMann15

13th March 2023, 02:12

@Candela Head's up, MKB v78 and v81 are out in the wild.

i looked in the FindVUK database.

candela

13th March 2023, 22:53

@Candela Head's up, MKB v78 and v81 are out in the wild.

i looked in the FindVUK database.

thanks, v78 was already posted before but v81 I haven't found yet. It did trigger me to check if there was new PS3 FW...

DanTheMann15

15th March 2023, 22:23

It did trigger me to check if there was new PS3 FW...

Fittingly, there is a new PS3 firmware, v4.90! :p

progg42

5th June 2023, 11:12

Hi,

Here's what I've found in MKBv81:
Read record type 10 of length 12
MKB version 81, type KCD (pre-recorded medium)
Read record type 21 of length 612
Host Revocation List (70 entries)
Signed block with 70 revoked entries
000000000001-0000000003e8
000080000001-0000800080e8
000080a3000b
015380013c69-015380018a88
06d580000015-06d580000028
270f80000001-270f80000bb8
ff2210100001-ff221010001f
ff221010005f-ff2210100064
ff2210100068-ff221010006b
ff2210400001-ff221040001f
ff22104004f7-ff22104004fb
ff22104084f6-ff22104084fa
ff2220000001-ff22200000ff
ff22200084f6-ff22200084fa
ff22200104f6-ff22200104fa
ff2290100001-ff229010001f
ff2290400001-ff229040001f
ff22a0000001-ff22a00000ff
ff2318000001-ff231800001f
ff2318100001-ff231810001f
ff2318400001-ff231840001f
ff23184004f7-ff23184004fb
ff2340000001-ff23400000ff
ff2710000001-ff271000001f
ff2710000063-ff2710000068
ff271000006c-ff271000006f
ff2790000001-ff279000001f
ffff0000000b-ffff00000014
ffff00000016
ffff00000021-ffff0000002a
ffff00000035-ffff00000038
ffff0000004e-ffff00000052
ffff00000054-ffff00000057
ffff0000005d-ffff00000066
ffff00000080
ffff00000088-ffff00000091
ffff00000094
ffff000000ae
ffff000000b2-ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834-ffff0000283d
ffff00002846
ffff0000284b
ffff80000001-ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c-ffff8000007e
ffff800000ad
ffff800000c4-ffff800000c6
ffff800000d0
ffff800000f4-ffff800000fd
ffff8000012d-ffff8000012e
ffff80000146
ffff80000153-ffff80000154
ffff80000174
ffff80000189
ffff80000196-ffff80000197
ffff800001b1
ffff800001b4
ffff800001c0-ffff800001c9
ffff800001d2
ffff800001e9
ffff800001eb
Signature validation: skipped
Read record type 20 of length 92
Drive Revocation List (5 entries)
Signed block with 5 revoked entries
000000000001-0000000003e8
000080000001-0000800055f0
270f20000001-270f20000514
270f80000001-270f800007d0
ff2600000001-ff2600000096
Signature validation: skipped
Read record type 81 of length 20
Media Key Verification Record
Verification data: a0936d736768afe5eb2f8934104e088b
Read record type 7f of length 112
String: (C) Copyright 2023, Advanced Access Content System (AACS) License Administrator, LLC., All Rights Reserved.
Read record type 7 of length 1548
Subset-Difference Index, 4194304 devices.
Read record type 4 of length 2996
Explicit Subset-Difference Record
Read record type 5 of length 9556
Media Key Data, 2388 entries
Read record type 2 of length 44
End of Media block
Signature validation: skipped

When diff'd with MKBv78, I've found this new one to be revoked:

000080a3000b

MrPenguin

27th October 2023, 12:53

Hi,

Here's what I've found in MKBv81:

When diff'd with MKBv78, I've found this new one to be revoked:
000080a3000b
Does anyone know what that actual HOST_PRIV_KEY / HOST_CERT values of key 000080a3000b are, please? Or perhaps of any of the other host keys revoked in MKBv78 that weren't already revoked in MKBv76?

I am asking because while these keys have now been revoked, I still have a drive that hasn't seen any disc beyond MKBv76.

candela

13th March 2025, 21:27

MKBv82 has been released. Download link (https://mega.nz/#F!9M8gDASB!tmB7DvGIZKxmp6-31x0NhQ)

HRL and DRL for MKBv82

Host Revocation List (MKB version 82):
000000000001 - 0000000003e8
000080000001 - 0000800080e8
000080a3000b
015380013c69 - 015380018a88
06d580000015 - 06d580000028
0bb980001771 - 0bb980001774
0bb98000177a
270f80000001 - 270f80000bb8
ff2210100001 - ff221010001f
ff221010005f - ff2210100064
ff2210100068 - ff221010006b
ff2210400001 - ff221040001f
ff22104004f7 - ff22104004fb
ff22104084f6 - ff22104084fa
ff2220000001 - ff22200000ff
ff22200084f6 - ff22200084fa
ff22200104f6 - ff22200104fa
ff2290100001 - ff229010001f
ff2290400001 - ff229040001f
ff22a0000001 - ff22a00000ff
ff2318000001 - ff231800001f
ff2318100001 - ff231810001f
ff2318400001 - ff231840001f
ff23184004f7 - ff23184004fb
ff2340000001 - ff23400000ff
ff2340518005
ff2710000001 - ff271000001f
ff2710000063 - ff2710000068
ff271000006c - ff271000006f
ff2710000085
ff2790000001 - ff279000001f
ffff0000000b - ffff00000014
ffff00000016
ffff00000021 - ffff0000002a
ffff00000035 - ffff00000038
ffff0000004e - ffff00000052
ffff00000054 - ffff00000057
ffff0000005d - ffff00000066
ffff00000080
ffff00000088 - ffff00000091
ffff00000094
ffff000000ae
ffff000000b2 - ffff000000bb
ffff000027db
ffff00002817
ffff00002820
ffff00002834 - ffff0000283d
ffff00002846
ffff0000284b
ffff80000001 - ffff80000024
ffff80000029
ffff8000002f
ffff80000039
ffff80000045
ffff80000053
ffff80000071
ffff80000079
ffff8000007c - ffff8000007e
ffff800000ad
ffff800000c4 - ffff800000c6
ffff800000d0
ffff800000f4 - ffff800000fd
ffff8000012d - ffff8000012e
ffff80000146
ffff80000153 - ffff80000154
ffff80000174
ffff80000189
ffff80000196 - ffff80000197
ffff800001b1
ffff800001b4
ffff800001c0 - ffff800001c9
ffff800001d2
ffff800001e9
ffff800001eb
ffff80000217
Drive Revocation List (MKB version 82):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
0bb920003a99 - 0bb920003a9c
0bb9800003e9 - 0bb9800003ed
0bb9800003ef
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096
ff2601ffd132

Compared to MKBv81 the following host and drive certificates have been revoked:

Host Revocation List (MKB version 82):
0bb980001771 - 0bb980001774
0bb98000177a
ff2340518005
ff2710000085
ffff80000217
Drive Revocation List (MKB version 82):
0bb920003a99 - 0bb920003a9c
0bb9800003e9 - 0bb9800003ed
0bb9800003ef
ff2601ffd132

johannu

27th March 2025, 20:16

I have an odd issue with my BD drive LG BU40N 1.00.

Executing aacs_info with a BD disc MKBv81 gives me:

Opening e: using libaacs 0.11.0 ...
libaacs open succeed.
src/libaacs/mmc.c:457: Host key / Certificate (id 0xffff80000217) has been revoked by your drive ?

This Host Certificate is revoked with MKBv82 but not with MKBv81. My drive has never seen a BD disc with MKBv82.

This is the Drive Revocation List of MKBv81.

Drive Revocation List (MKB version 81):
000000000001 - 0000000003e8
000080000001 - 0000800055f0
270f20000001 - 270f20000514
270f80000001 - 270f800007d0
ff2600000001 - ff2600000096

Does that mean that this Host Certificate is therefore revoked for my drive because my drive is in the Drive Revokation List? If yes, how to get the drive certificate of my drive to see if it's indeed in the Drive Revocation List?

Thank you for help?

mick0

27th March 2025, 21:29

I have an odd issue with my BD drive LG BU40N 1.00.
...
Does that mean that this Host Certificate is therefore revoked for my drive because my drive is in the Drive Revokation List? If yes, how to get the drive certificate of my drive to see if it's indeed in the Drive Revocation List?

It just means that the Host Certificate has been revoked by your drive. You can get your Drive Certificate e.g. with aacskeys.

AACS2 drives maintain two HRL's, one for AACSv1 and another one for AACSv2. If your BU40N has seen AACSv2 MKBv77 - where HC 0xffff80000217 is revoked - it won't accept it for AACSv1 either regardless whether the drive has seen AACSv1 MKBv82 or not.

MrPenguin

27th March 2025, 22:40

If your BU40N has seen AACSv2 MKBv77 - where HC 0xffff80000217 is revoked - it won't accept it for AACSv1 either regardless whether the drive has seen AACSv1 MKBv82 or not.
Whereas Pioneer drives ignore the AACSv2 revocation list when reading AACSv1 disks.

johannu

27th March 2025, 23:33

It just means that the Host Certificate has been revoked by your drive. You can get your Drive Certificate e.g. with aacskeys.

AACS2 drives maintain two HRL's, one for AACSv1 and another one for AACSv2. If your BU40N has seen AACSv2 MKBv77 - where HC 0xffff80000217 is revoked - it won't accept it for AACSv1 either regardless whether the drive has seen AACSv1 MKBv82 or not.

I think I have found the guilty ones: LAND OF BAD UHD MKBv77 and John Wick 4 UHD MKBv77 ... it seems, that mick0 had the solution... so my BU40N is revoked because of the Host Certificate, that is revoked in AACSv2 MKBv77 and not because of the revoked Drive Certificate ... thank you very much mick0!