[电脑] AACS告破！HD DVD复制工具放出

众所周知，AACS是蓝光和HD DVD这两种新一代高清影碟所共同倚仗的加密防盗版系统。通过这套系统，你无法从影碟中把视频文件复制出来，或者在没有HDCP支持的数字系统中播放。但就像DVD的防盗版措施CSS很快就被破解一样，一位名为muslix64的网友近日就放出了一个仅有17K大小的Java软件，成功将HD DVD影碟中的视频文件复制了出来。

这位破解者本月6号买到了一台HD DVD光驱，但是发现由于自己的显卡不支持HDCP，因此他无法在数字输出情况下观看HD DVD影片，而只能通过“老旧”的VGA输出到模拟显示器。这让他大为不满，于是决定破解这套系统。起初他和我们一样认为AACS的加密一定非常复杂，但在阅读了AACS的公开文档后发现其中还是存在非常简单的漏洞，一周内便成功拷贝出了第一张HD DVD影碟。

12月15，他便写出了一个小程序BackupHDDVD 0.99版，只要你拥有正版HD DVD附带的“Title Key”，就可以在命令行窗口中把HD DVD内的高清视频拷贝到硬盘上，没有限制的观看。

现在，他正在试图编写该程序的1.00版，用“Volume unique key”代替“Title Key”来实现同样的功能。

http://zavlakas.googlepages.com/BackupHDDVD.zip

网页
http://forum.doom9.org/showthread.php?t=119871

视频
http://www.youtube.com/watch?v=_oZGYb92isE

B a c k u p   H D - D V D   F A Q

-What is "Backup HDDVD" for?

It can do backup copies of HD DVD movies that YOU OWN! I don't want anyone to do
piracy here! This software is a good way to protect your investment, because I have
notice that this type of media seems very fragile, if it's scratched a little or
dirty, it won't play. It seems less tolerent than DVD format. (Higher density!)

-What "Backup HDDVD" is doing exactly?

This is a java based command line utility that decrypt video files (.evo) from a
HD DVD disk that you own, to your hard drive and you can play them back with a
HD DVD player software.

-What are the system requirements to use "Backup HDDVD"

1 - A Windows based system
2 - A HDDVD disk drive
3 - A HDDVD player software (like PowerDVD)
4 - A HDDVD movie(s)
5 - Java rutime 1.5
6 - The possibility to access the content of the disk with a drive letter under windows.
(you may need UDF 2.5 file system driver for this)
7 - A lot of free hard disk space to backup your movies!

-Was your first HDDVD movie hard to decrypt?

It took me around a week to do. But I have wasted few days
trying to work on too complicated approach. In fact, it is very simple.

-How do you do that?

The program itself has nothing special. It simply implement the AACS
decyption protocol. I have followed the freely available documents about AACS
Have a look at: www.aacsla.com
The trick, is to find what they call the "Title keys". So I figure out how to
extract them.

-How do you extract the "Title keys"?

I won't explain it in detail. Read the AACS doc first. You will understand.
The title keys are located on the disk in encrypted form, but for a
content to be played, it has to be decrypted! So where is the
decrypted version of the title key? Think about it...

-What kind of crypto algorithms are involved?
Standards algorithms:
        ECC-160
        AES-128

Look in the AACS doc for more details.

-What is the TKDB.cfg file?

This is the Title key Database file. It holds the decryption keys for the movies.

-What is the format of this file?

Field 1: SHA1 Hash of the VTKF000.AACS file on your HDDVD disk.

Next fields are pipe "|" delimited.

-Movie Title
-A variable number of Title key, pipe delimited

  You have a key number followed by the key value like:

   12-08A3DC61910280F2...

Key values are 128 bits long, so 16 bytes, or 32 hexadecimal characters long.

-The TKDB.cfg file provided with your program is empty or incomplete, what can I do?

Well, you are on your own.

-What do you think of the technical aspects of AACS?

The design is not that bad, but it's too easy to have an insecure player
implementation somewhere. And just one bad implementation is all it needs
to get the keys! There will always be insecure implementations
of a player somewhere! And the "Revocation system" is totaly useless if you use
the Title key directly.

-Is there any known problems with the decryption?

Yes. I call this problem the "Nav chain" bug. I realize that I have a lot of
frame skipping at playback after the decryption, so I hunted down the problem.
To avoid the frame skipping, I patch the video file.
This fix allows smooth playback of the movie, but there are some side effects.

-What are the side effects of the "Nav chain" bug fix?

You cannot do fast forward, or backward using the round dial, but you can still
use the progress bar to navigate through the film. So it's not that bad...

For some reason, the sub-titles don't seems to work anymore.
It may be a side effect of the nav chain bug. But may be not...

-Why the "Nav chain" bug is called the "Nav chain" bug?

Well, it has something to do with the chaining of navigation pack.
Look at some doc about standard DVD VOB file, you will see.
If someone wants to help me with that bug, please do!

-Are you going to support Blu-Ray?

I don't own a Blu-Ray drive!

-Do you plan to do a user interface version?

No, other people will do. You have the source code, so enjoy it!

-Do you plan to do a Linux version?

See the previous answer.
I don't use any windows specific API and this is a java application!
A port to Linux will be easy.

-Can you send me some decryption keys? PLEASE!

No.

-I have a question for you, can I send you an e-mail?

If you have something like, a technical problem using the software, look in the forums
talking about Backup HDDVD first. There will be a lot of information and everyone will help
each other out. If there is a major flaw in the program, I will post another version,
but honestly I realy want people to bring Backup HDDVD to a higher level without me!

Backup HDDVD!

How to install:

        -Simply unpack the zip file in a directory

        -Open a console window and go to the RUN directory

        -You have to populate your TKDB.cfg file with proper key for it to work...

        -juste type "BackupHDDVD f: e:\movies\mymovie"

        Where "f:" is the source drive and "e:\movies\mymovie" is the destination directory.

        Enjoy!

[ 本帖最后由 bikkibakki 于 2006-12-28 15:10 编辑 ]