HD-DVD cracked

[bascule]

http://forum.doom9.org.nyud.net:8080...d.php?t=119871

BWAHAHAHAHAHAHAHAHA

[Voltage Spike]

Re: HD-DVD cracked

Well, sort of. The designers of AACS actually expected this to happen and designed around it.

PowerDVD is apparently weak in terms of security. They have both the player license key and, while playing a movie, the title key in memory for everyone to see. This guy simply noticed that and took advantage of the fact.

What happens now is that the PowerDVD guys get yelled at and have to fix their software. Meanwhile, the current PowerDVD license key is not included in future HD-DVD releases (so you can't extract keys from those releases).

Unfortunately, AACS isn't quite cracked in the way that CSS is cracked. In order for this to continue working, companies must keep releasing easily-compromised players and someone must be willing to distribute key databases.

I'm just surprised that the key issuers don't care enough to audit (or demand an audit of) player code. Completely exposed keys? That's just sloppy.

[renderman]

Re: HD-DVD cracked

However it's the first salvo in an arms race. There was also a case a year or so ago that showed how 4 HDCP devices could be used to determine the key and thus get access to the video stream (google fu is weak tonight)

If I can see it, I can steal it.

[The Dark Tangent]

Re: HD-DVD cracked

You guys rule, thanks for the pointer. Just in time for a reporter calling about it!

[renderman]

Re: HD-DVD cracked

Here's the paper I was referencing. My brian was confusing which crypto god was involved:

http://apache.dataloss.nl/~fred/www....hdcp111901.htm

http://www.freedom-to-tinker.com/?p=1005

Edit: it was 40 devices not 4.

[Nikita]

Re: HD-DVD cracked

Dt quoted in the news, regarding this.

Clicky-here.

[Nikita]

Re: HD-DVD cracked

Video showing the hd-dvd hack in "action"
http://www.youtube.com/watch?v=_oZGYb92isE

The stupidest-greatest video in the world.
http://www.youtube.com/watch?v=oJ4fcGhqj_w
Does anyone else thing the pirate is the Ask a Ninja guy?

[LosT]

Re: HD-DVD cracked

Yep, more in the news...

FoxNews is also running the story with Jeff in it here:

http://www.foxnews.com/story/0,2933,240077,00.html

LosT

[VAX_to_PBX]

Re: HD-DVD cracked

What the original engineers meant to say I guess was it couldn't be cracked until someone took the time to understand how it worked. Now we just gotta wait for a shady commercial product that uses the reverse engineering algorithm to be released.

It'll be interesting to see what uncrackable security the Industry will come up with next.

Also why is it people who crack, and reverse engineer stuff rarely publicize the path to discovery? They could at least save us the trouble of breaking down there source code. That doesn't really reveal there audit process though.

[liberator]

Re: HD-DVD cracked

I wonder if it's possible to mount an ISO image from a Blu-Ray DVD and play it in PowerDVD 6.5 or some similar software? If so then I could experiment, looking for the keys in RAM and registers, without having to own a player and a disc. (I'm assuming that nobody has an ISO image from an HD DVD yet.)

I found this utility for mounting ISO images as virtual CD / DVD drives under Windows. I have not yet tried it. I don't normally spend much time in Windows, but I guess I will be doing so for a little while anyway.

Can anybody shed any light on the feasability of this approach? I'm just wondering if there is some show stopper that I'm overlooking, e.g. a dependancy on crypto functionality in the DVD drive electronics.

Thanks.

[liberator]

Re: HD-DVD cracked

I wonder if it's possible to mount an ISO image from a Blu-Ray DVD and play it in PowerDVD 6.5 or some similar software? If so then I could experiment, looking for the keys in RAM and registers, without having to own a player and a disc. (I'm assuming that nobody has an ISO image from an HD DVD yet.)

There is now discussion on that other site of doing something like this, but even better. That is to create your own very short HD movie, encrypted with AACS. Yes, there is software to do this. The movie need only be a few frames of video, so it can be small. This now gives the opportunity for a plain text attack, since they know the plain text and cypher text versions of the keys. Now they can look around in memory and registers to try to find where the keys are stashed.

I would expect to see this home brewed HD file, along with keys, etc. in the next couple of days. Therefore I expect to see some progress pretty fast.

Liberation may soon be at hand.

[robosycho]

Re: HD-DVD cracked

I found this utility for mounting ISO images as virtual CD / DVD drives under Windows. I have not yet tried it. I don't normally spend much time in Windows, but I guess I will be doing so for a little while anyway.
Thanks.

For mounting a drive in Windows, I'd advise using Alcohol: http://trial.alcohol-soft.com/en/index.php

I do not know if it will work with a Blu-Ray ISO.

Cheers!

[Second]

Re: HD-DVD cracked

Video showing the hd-dvd hack in "action"
http://www.youtube.com/watch?v=_oZGYb92isE

Video removed. Any other means of seeing the video?

[Nikita]

Re: HD-DVD cracked

Video removed. Any other means of seeing the video?

I am so sorry:-( Sorry, its been so long. You can try this video.
http://www.youtube.com/watch?v=vOlKg9sIc2k

Here is a new article on the subject, posted today....

AACS Attack: a Clear and Present Danger to DRM
http://www.slyck.com/story1391.html

and another:
http://thelede.blogs.nytimes.com/200...ections-again/

and the PM interview with muslix64
http://www.slyck.com/story1390.html

[Second]

Re: HD-DVD cracked

Thanks for the video, sweet!