Slashdot Mirror
Decryption Keys For HD-DVD Found, Confirmed
kad77 writes "It appears that, despite skepticism, 'muslix64' was the real deal. Starting from a riddle posted on pastebin.com, members on the doom9 forum identified the Title key for the HD-DVD release 'Serenity.' Volume Unique Keys and Title keys for other discs followed within hours, confirming that software HD-DVD players, like any common program, store important run-time data in memory. Here's a link to decryption utility and sleuthing info in the original doom9 forum thread. The Fair Use crowd has won Round One; now how will the industry respond?"
I took a look at the spec for the HD-DVD encryption. The data is encrypted with AES-128 in CBC mode. The spec states clearly that the IV is a fixed constant. CBC required the IV to no only be unique, but also random. Not making it unique and random leads to a leak of key material. I assume that this is the weakness through which the keys are being extracted.
So rejoice. The HD-DVD media keys will be free.
Evil people are out to get you.
If I remember correctly they can only revoke keys for future movies. All movies released when the compromised player was cracked can still be decrypted.
Yeah. Then you can DoS the industry, by generating a significant portion of the possible key-space, and releasing it in a crack.
Nice going!
"Speaking the Truth in times of universal deceit is a revolutionary act." -- George Orwell
Ahhh. But only the player key can be revoked, not the title key for discs already in the wild. They could use different keys on all subsequently pressed discs of the same title, but that doesn't affect the titles already cracked. And they can't expect to do a recall of cracked titles.
Or they could revoke the device key for the software player, which would mean the software player gets upgraded with a new key, and newer discs can be cracked using the exact same technique. Otherwise anyone selling software players would be faced with the massive liability of having sold something that doesn't work as advertised.
Since this technique relies on using the title and/or volume key and not the player key, it will not be so easy to fix through the device key revokation system that's a part of AACS.
Round one definitely goes to the good guys. And I don't see how it's anything but a matter of time before AACS is as completely broken as CSS is. Even with device key revokation, it's just a cat and mouse game with newer titles and newer devices. And how will the MPAA and the device manufacturers react when people who pay out the nose for players and films are no longer able to use them?
Supposedly you google each line of this, and the first result will have a 3 digit number in the title, which you convert to hex, and the result is the hash key
Um, as The Pirate Bay has demonstrated already, there are three wrong with your supposition. First off, ICANN does not and will not revoke domain names at the behest of the government. As long as Doom9 has backbone (and this hasn't been their first time in this type of situation), they're not gonna crumple.
The second thing is that they might not be located in the USA. The whois dossier shows that the domain was registered by (anonymous) proxy, and it's entirely possible that he's not American. If his servers are physically located outside of the USA, then he can't be legally threatened by civil suits, and he's not subject to DMCA. (However, this is a hypothetical, and since he refuses to host DeCSS, it is my guess that he is somewhere in the USA.)
The third thing is that the website is http://www.doom9.org/ , not doom9.com.
~ C.
There was lots of porn on Beta, but that is because anyone could record Beta due to the nature of the tape. Anyone can NOT record BluRay. In order to get a disc mastered, you have to go thru a Sony-authorized mastering service and they've been told NO PORN.
I also feel the studios are more interested in a token attempt. The encryption, even when broken, protects against the vast majority of that type of piracy. The geek market that is capable of doing that is so small it is almost negligible. They just have to go thru the motions to make sure the rest of the public keeps thinking "this is too hard to bother with, unless you are a basement-living uber-geek with no life". The big problem is the counterfeit discs that are mass-produced.
Learning HOW to think is more important than learning WHAT to think.
Sure you can: take output from computer a), feed into hdtv card on computer b), compress to mpeg2, store on disk. And btw, it is 24bit per pixel, 30 fps (non-interlaced), but the figures come out the same.
Revoke the key. It will happen each time.
Like I posted last time this crack was on slashdot, it's futile to revoke a key. Every movie released to HD-DVD before the key is revoked will still be readable with the known key, and within a few days or weeks another software key will be found to read all the newer movies. Additionally, true pirates who recover the key of a particular player are able to keep their discovery secret by not publishing the key, and they will always be able to rip new HD-DVD movies. There's no way to watermark movies based on the player key, because the entire stream must be encrypted with a single master key that the player key decrypts. There's no way for the media companies to discover which keys have been secretly compromised, even when movies are being released on the Internet.
In the best case, AACS will be fundamentally broken because of some oversight and all the player keys will be compromised, making key revocation laughable.
The TPM does slow public key authentication. It doesn't have the throughput to do high data rate AES which is what's necessary to decrypt the video stream.
Test your net with Netalyzr
You are so far off about DRM that it isn't even funny. First of all, the decryption keys are being discovered in software DVD players (PowerDVD, etc). While it's basically a never-ending game of cat and mouse, the developres just need to issue a simple patch every so often. This is virtually irrelevant anyway, because the vast majority of people watch DVDs on hardware DVD players. If and only if a name-brand hardware DVD player's key is revoked will there be any kind of backlash, and I really don't think the industry would be willing to take it that far. I think we all agree that DRM doesn't really accomplish much if anything, and unless the MPAA is going to really push key revocation I don't think the vast majority of consumers will run into any problems. As far as your predictions for online distribution, you might be on the right track. However, there are still a number of problems that need to be overcome. Broadband is not ubiquitous, and even when it is available it can take hours to download the whole thing depending on a number of factors. Also, people still prefer traditional televisions to computers for watching movies. iTunes works for music because you can put music on your iPod, take it anywhere, and plug it in to anything with a line-in. I think iTunes could work for movies if the iPod (or whatever other player) had RCA/DVI/HDMI/whatever jacks so you could just hook it right up to your television in a similar manner.
For when any of these services get killed, let the record state that:D .zip)= c9f28f76ff4f1a8bfe74fa963466e8483da95effB ackupHDDVD.zip)= 661a12808e64ec516b1eb9e493bf5de4a08223f2ee4258735d aa6a382a1d2e1fbe4b732bebd4133e5af0d968c0904d310f73 40e63edab7b69e1948b08z ip)= 4860e9248663d52dc47bfc98d61ec6d7D VD.zip)= COD1504ECJM52QOUN7I97FQTSIG848VITP15GSQTL9L3GAGT5O FRSIRJ5FLT84PUBBODIQ60I16J23RJ83J3TMLNMQF1II5GGFEI C5O.COTARKV5PLT8MFC6EP PO6AEFF75S439R2T731ODI37MP0HM3TQ27266N6FMK4PS8SDLC KNE3UIPD8
MD5(BackupHDDVD.zip)= 484a73b61fb795d84e11d72614f77db0
SHA1(BackupHDDV
SHA512(
3dd2617
ED2K(BackupHDDVD.
GNUNET(BackupHD
BDF83IMEJI74A3H0QNTGMEGDS6
Truth is, you can't. You just can't record a signal of 1920 x 1080 pixel times 12 bit per pixel times 60 frames per second on a harddisk
Yes, surely you can. For a start it's approximately 30 frames a second (it's 60 fields a second). That gives you a stream of:
(1920 * 1080 * 12 * 30) / (1024*1024) = ~ 712 Mib/s (megabits per second) or
about 89 MiB/s.
I would have though an array of high speed reasonably standard disk drives could handle that quite easily, after all consumer SATA drives have a theoretical 1.5 Gib/s interface.
Actually you can already buy DVI capturing cards capable of recoding 1600x1200x60:7 0.php
http://www.fi-llc.com/boards/Products/AccuStream1
Real-time recoding of HDTV videos is not that far away on consumer PCs either. I doubt that it would be a problem in 5 years.
So if there was no HDCP, and there was no way to get the compressed signal, capturing the data would become a viable option.
According to the Wikipedia article the DVI specification does indeed have a colour depth of 24 bits per pixel.
Maybe so, but it's still available on google.
More like 3.0 Gib/s (SATA2), but either way, it doesn't matter, modern consumer hard drives can't write faster than ~40M/sec. But if you put 2 or 3 of those consumer drives in RAID 0, you shouldn't have much trouble at all writing 89M/s, especially if you compress the signal before dumping it to disk. In a couple years it'll be even easier.
Game! - Where the stick is mightier than the sword!
easy way to nail Jello (tm) to the wall Liquid Nitrogen basically you freeze the tray of jello down to just a few degrees K and then use a diamond saw to cut it into cubes and then its bring out your Nail Gun Time.
Any person using FTFY or editing my postings agrees to a US$50.00 charge
You'd have to slow down the content eventually though, wouldn't you? I mean, 1920x1080 at 60fps with 24 bits per pixel is 2,847MiB per second. That's 1920*1080 = 2,073,600 pixels^2 per frame, and that multiplied by sixty seconds equals 124,416,000 pixels^2 per second, and using n pixels^2 = 24n bits we get 2,985,984,000 bits per second. Divide by eight to get bytes, and we have 373,248,000 bytes. That equals 364500 KiB, or ~355.95MiB/second.
That means you'd fill up your multiple GiB buffer in a matter of seconds. Are you using a fast enough hard drive to write it to disc? Even over SATA 3.0Gb/s your actual throughput is right around 300MiB/s. So you're losing 60MiB to the buffer every second, which means for every gigabyte of RAM you have, you can encode raw HD content for another seventeen to eighteen seconds, assuming everything works really well.
Simply put: without realtime compression and probably signal loss, you can't encode that signal on common hardware. Far easier to simply decrypt the HD content on whatever media it's stored on and reencode it at your leisure.
You just can't record a signal of 1920 x 1080 pixel times 12 bit per pixel times 60 frames per second on a harddisk.
30 frames/second, not 60. Anyway, that's 1920x1080x1.5 bytes/frame, just over 3 megabytes/frame. About 93 megabytes per second with zero compression. Reasonably modern hardware on a RAID 0 or RAID 5 setup should do that easily, or any modern SCSI drive system. Heck, you can buy off-the-shelf Firewire-B external drive systems capable of that. And disk subsystems aren't getting any slower (unless you're saddled with crappy drivers and filesystems at the software level.)
That said, I pretty much agree with your conclusion.
-- Alastair
Aye, my MythTV backend with the disk dump has two 320GB 7200 RPM 16MB Cache SATA 3.0Gb/s Hard Drives in a RAID 0 array. The frontend has three HDTV capture cards(two HD-5500 & one HD-3000). A Lowly 100mbps full-duplex network link between the two boxes.
I'm able to record three HD streams at once via nfs(nfs ver3, ver4 cause kernel panic under that load). Playback of one of the three streams while it is being recorded isn't do-able but recording two and watching an earlier(yet to be transcoded) one all at the same time works.
An hour of 1080i is a little shy of 8.5GB. The network link is the bottleneck in my setup, the disk array handles the task without a problem.
If the govt becomes a lawbreaker, it breeds contempt for law, it invites man to become his own law, it invites anarchy
Actually, these figures are just about achievable with contemporary hardware. Something like one of the latest Nforce motherboards with 6 SATA2 ports loaded with the latest fast, high capacity hard drives (like the Seagate 750GB 7200.10 drives) in a RAID0 stripe. I have an Nforce4 system with 4 500GB 7200.10 drives sitting under my desk right now. It nearly hits that transfer rate, but only on the faster part of the disk. Of course, with a typical length movie you'll then have about 3TiB of uncompressed video that you'll need to run through a suitable codec (like X264), and that will take a while... but it's the sort of challenge that some people would relish.
Well, first off you're assuming there's no such thing like a HDTV hardware encoder (after which you can store it on a plain non-raid HDD as far as bandwidth is concerned). Those chips are in sub-1000$ cameras, and you don't need lens, ccd, tape mechanism or any other fancy electronics, just the encoder chip. Probably a few hundred dollars at most, really.
Secondly, raw capture is certainly possible. Full HDTV is about 1.5Gbps (HD-SDI used for uncompressed HDTV interlinks for example). Then you can throw in some very light lossless capture codec like huffyuv who'll covert to YUV2 (half the bits) and compress it 2:1 again on any normal CPU, and you're down to ~360Mbps, or 45MB/s. Hell, I capture 25MB/s from my DV camera on a regular basis. 45MB/s would take a fancier disk like a Raptor X or a RAID 0, but then again RAID 0 is standard on pretty much every mobo I've seen.
No, it's not that pretty... but if you were a slightly dedicated pirate (remember, they think they're going to stop everyone) then setting up this is hardly excessive. The only thing that's not in common circulation is in fact a DVI *in* port.
Live today, because you never know what tomorrow brings
You can - all the HDDVD and BluRay players have internet connectivity. They can and do download blacklists in 'firmware updates'. Such updates are also pressed into future disks - so you can't even get away with never connecting the player. These can revoke both disk and hardware keys, so you'd have to replace your copy of serenity, or even potentially your TV if the keys for that got revoked.
The only question is whether they have the guts to do it.
Capturing the LCD bus data directly would provide a better unencrypted rendering of the movie than recording the image displayed by the actual LCD. But, sure, whatever is easier! :)
Conservatism: (n.) love of the existing evils. Liberalism: (n.) desire to substitute new evils for the existing ones.
1828B68D292D2EA1E9EEA1C7044DC864FDBC3EB6=12 Monkeys |V|MM/DD/YY| 2662C05B5238B0C50BD1BDF693223712e s of Riddick |V|01/02/07| 69197293FCEF6F0ADE4BD33C4B1F132Ei um (Jap) |V|MM/DD/YY| 343CE9EE7DCB4018AA064BA09FF19B6F
1BAB7EEBB20C5425F5911E0272F07DD8F7208747=Aeon Flux |V|MM/DD/YY| A5F1A71839B666A68B1138B1DDDDEBAB
4ACABE525F5CBF77DAA43EA2B83E04918D5FA6D4=Apollo 13 |V|MM/DD/YY| 8BA9C422F93C9B4B4247814530B29C48
B9A62093767C0E7CB2BF16447A52E864A45FE50D=Batman Begins |V|MM/DD/YY| 423C48E5ABB185FC7FB8DB2BF764BEB0
A236F74A67CC51270E328F94BC6B4D905A628F9F=Casino |V|MM/DD/YY| A1DC17F6FA052A4BB4A0D66A7C49DBD9
4DF295764864556F3B44B71C0B8828DB80D84CA0=Chronicl
E34FBD5B8ABDC5312B38028002865BB3530AE3CE=Enter the Dragon |V|MM/DD/YY| 15C7F34076AED16E75637DC3BFDE84F8
419D740F2288CEE1EEB60613DAD9D74D7B63203B=Equilibr
A6EF2686A417863FEC63D1F7824F9406DEEB5ACC=Fear & Loathing Las V |V|MM/DD/YY| 246D84CBD2B6F747B6962B53BE026BF2
0E75082678AAD5CD4410A28A662D6832D21EB325=King Kong |V|09/18/06| 802F78B1B20D1183638D84E1A96D6EDD
EBC08E19B2059140DFF133E2B953D3A1538D7669=Miami Vice |V|MM/DD/YY| 3CB25E9C23BED3A496D049B9FCD0915B
EDEA3051F5802CB7FF80A24DFE7C720705D36A0F=Mission: Impossible |V|MM/DD/YY| 10CA125A572A96AE6EB74F6574CCC24D
1DBFD499BC05FB33F14FB76BBDD847B79B190AEA=Mission: Impossible 2 |V|MM/DD/YY| 8FD8341028A8A300AA16D7F8CCAB7E89
AF4BC7D6A55B08E6175204CABE862ECBB33B1DED=Mission: Impossible 3 |V|MM/DD/YY| 11D6A8CD59494EF3D4EC4E9002E902F9
A85B0043201474AC56794EA4AAE2C35577752FB3=The Mummy |V|MM/DD/YY| D6984C6B80D56F96CAE369474345E2B9
EB7A44A88AE2AF4B14C0B69B5DD5C621DE988593=Pitch Black |V|MM/DD/YY| 9D82A55BF2DAC3995AD24B40B802D71F
BA3C0208848EA13383F34E9E5BB95BDF0D89F1C8=Red Dragon |V|MM/DD/YY| 80596E6D9A94D2A3FDB094B9BA2D0A0A
C8A57242AF4CB5C0D7848BDA10821F984DC656E0=Serenity |V|MM/DD/YY| D075568AE6BB0B3F85446927B3794C28
17C8312A7BEA25A08606F118AD265FD657161D0D=SuperMan Returns |V|MM/DD/YY| EC2EC7F847F6D304B3C26F121CA578DA
87A660A656EDD1E07F66DB1A7DE594028A9587E2=V for Vendetta |V|00/00/00| AE196597E6A87A04AE6A24655990A4A6
B32592B86E782DBAEB4801FC1CD1B64CB3FF94A3=World Trade Center |V|01/13/07| DA41B36D90C25E533EE84A307EB2D929
echo '[q]sa[ln0=aln80~Psnlbx]16isb572CCB9AE9DB03273snlbxq' |dc
Just to add a little to the other reply - your mythtv stream is only a few megabits/sec. Certainly not 700Mb/s! You might be able to record at that rate with the right drive setup, but you'd fill your hard drive mighty fast (80 megabytes per second eats through space pretty quick).
Go ahead and check the mythtv-users list - this is a common topic. The hardware capable of compressing live HD is very expensive - studio gear. We're not talking Apollo-mission cutting edge, but even the TV studios have difficulty with live HD streams (I know somebody who works in the industry).
Anybody recording HD using myth is recording compressed MPEG2 - not DVI. In fact, there is a company that will mod your cable box with DVI/HDMI-only output to add a firewire port so that you can record the HD stream at a decent rate.
Like others in this discussion, I have a homebrew VoD system set up in my apartment. A media server with a few terabytes of hard drive space and a trio of TV tuners (two analog for cable and one OTA HD) stores all of my movies and every episode of my favorite TV shows. Thanks to this, my roommates and I have point-and-click access to all of those videos from every computer, Xbox, and Xbox 360 in the apartment. It's very convenient and I never have to worry about a scratched disc or missing a single episode. Thanks to DRM + the DMCA, every single movie on the server is technically illegal even though I can point at the shelf where the DVDs sit gathering dust.
There are commercial hard drive based DVD library devices, but they're overpriced (in to the thousands of dollars for a mere terabyte last time I checked) and nowhere near as compatible as my solution. The one I looked at would only stream to proprietary set-top boxes and even now I'd wager only possibly the Xbox 360 out of my current line up would be compatible with any similar products on the market now (due to its support for streaming DRM). None would support streaming to my modified Xbox and certainly not to any of my computers.
I would say the home media server is a substantial example of fair use which is legally blocked by DRM+DMCA issues. One like I have is trivial to set up (Myth + Linux + Samba or XP/Vista MCE) and works with a number of clients (I intend to test using my DS as a client once I get the adapter card which enables homebrew and I've already used a PSP as a client in the past). Everyone I know who's seen my setup wants to clone it and if it weren't for the legal issues I'm sure the market would be flooded with such devices.
I used to get high on life, but I developed a tolerance. Now I need something stronger.