AACS bus encryption

Please post here for issues related to Blu-ray discs
mike admin
Posts: 4075
Joined: Wed Nov 26, 2008 2:26 am
Contact:

AACS bus encryption

Post by mike admin » Sun May 08, 2011 12:48 pm

Update: bus encryption is fully supported in MakeMKV 1.6.13 and beyond. You should not get any bus-encryption errors or messages.

Please be advised that some very recently manufactured BD-drives implement a new AACS "feature" - bus encryption. It's a new form of protection currenly present in a very few BD-drive models that adds additional layer of encryption in drive firmware, similarly like DVD drives switched to RPC-2 firmware. Contrary to what you may read elsewhere, no BD-decrypting software supports these drives yet. If you're a "lucky" owner of such drive, your only option is to wait for MakeMKV update; or to use it with official BD players. You can't even use such drive to make an encrypted disc backup as drive will encrypt M2TS files with a drive-specific key. The problem is only with the drive, and has nothing to with a disc - you should be able to open any BD disc with an older drive.

Known BD drives with bus encryption:

Code: Select all

HL-DT-ST DVDRWBD CH20N A201G
HL-DT-ST BD-RE UH12LS28 1.003
HL-DT-ST BD-RE BE06LU10 YE03
The current MakeMKV version, 1.6.8 would fail with following error message:

Code: Select all

Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT PRESENT' occurred while issuing SCSI command A30..00200740100720.. ...
The next version of MakeMKV will have more informative error message. And obviously MakeMKV will be updated to work with such drives once they become mainstream.

setarip_old
Posts: 2136
Joined: Wed Dec 09, 2009 1:31 pm

Re: AACS bus encryption

Post by setarip_old » Sun May 08, 2011 8:27 pm

@mike admin

Hi!

Would this be one more reason to consider making a driver version of MakeMKV available?



mike admin
Posts: 4075
Joined: Wed Nov 26, 2008 2:26 am
Contact:

Re: AACS bus encryption

Post by mike admin » Tue May 10, 2011 2:57 pm

setarip_old wrote:@mike admin
Would this be one more reason to consider making a driver version of MakeMKV available?
The driver version would change nothing - it's just another form of protection that MakeMKV will handle but doesn't handle presently. The reasons not to support this protection right now are not technical ( I can't say more ). If you refer to the famous post on another forum about advantages of a driver model - that's a lie, being a driver has no advantages for this protection.

setarip_old
Posts: 2136
Joined: Wed Dec 09, 2009 1:31 pm

Re: AACS bus encryption

Post by setarip_old » Tue May 10, 2011 4:27 pm

Thank you for clarifying ;>}



ToxicDreamz
Posts: 40
Joined: Fri May 06, 2011 4:21 am

Re: AACS bus encryption

Post by ToxicDreamz » Sun May 15, 2011 2:42 pm

Thanks for the update. I'm glad my recent Blu-ray drive purchase doesn't fall into this ridiculous category. Thanks for your continued hard work.

adalogue
Posts: 7
Joined: Sat May 14, 2011 6:36 pm

Re: AACS bus encryption

Post by adalogue » Tue May 17, 2011 2:14 am

Mine does, ack! Is an updated version of MakeMKV that will handle this less than a year away?

ddrueding
Posts: 3
Joined: Tue May 24, 2011 1:59 am

Re: AACS bus encryption

Post by ddrueding » Tue May 24, 2011 2:01 am

Ugh, just bought 3 UH12LS28 drives and sold my old ones before checking this out. I can handle waiting a week or so, but if it is longer than that I'll order different drives.

I've done software development, and I don't mean to rush you at all, just looking for guidance. ;)

skittle
Posts: 349
Joined: Thu Jan 14, 2010 4:23 am

Re: AACS bus encryption

Post by skittle » Thu May 26, 2011 6:30 am

please make this a sticky in the news&announcments as well

ddrueding
Posts: 3
Joined: Tue May 24, 2011 1:59 am

Re: AACS bus encryption

Post by ddrueding » Thu Jun 02, 2011 6:29 am

With current version 1.6.10 my log looks like this:

Code: Select all

MakeMKV v1.6.10 win(x64-release) started
Using direct disc access mode
Drive 'HL-DT-ST BD-RE UH12LS28 1.00' requires AACS bus encryption, disc decryption may fail.
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..002BB66712F6353B7DCCA34CBF9CCB32A60 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..03CA750636F9F55950ABC5BF7FB97BC4D to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..073F59FEB848528F968893D59DAB73AC9D7 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..03DB8BD5B702B212A3B6764CFE8FAF885C4 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..051EBF23E1953293099A874A16B38620D5C to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0CEC9D6F86A67B4C8187B483418ADDDC7AB to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0A7083CF9A4877E19399317DE79783DB187 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0D7A406EF3CAB8A0ADE5529DFC81FA96D3C to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0C3CD5DBA7D5CEFD96F5CA66E84CCBE047B to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..057441FF76BD139FBE4FECC7D3BBC099890 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..06D3D71DF4E62A8572A9071CA4E4523D49F to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0B5948F6988D6010823DDD9027B1443EB9B to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..09C92FCB885CEB97137CBA9A84519C879C1 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..03664F168BB27E70B3CAB6B4A6474508067 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0CFABB9AB628343C160D4E0D0479D96FD2B to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..030B4B4A378650422981F5D71C64C4FC568 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0DF12F525E10C50DE788708A180FE888FCC to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0482057EF43E667723E211A3C83FD2EF043 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0AC21C86B00967C14776E63BF55322F9A14 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0B2537DA38C7D66445AB29AC29748D890A5 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0E3CE37BF73288F2F24FA86A80A5985B0D3 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..006C2773B583D7A5056A48791BAFE0F9C05 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0AD35BA90896409AD762454417958D9DB1A to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..047A0E63366EFD4736621CD36E7638318B6 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0266B9F3209C57CAEE732B2F31E652D84D0 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..08D14C3DEC4586AD612B4AEC51AB087DA1C to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0388BCFAB908AE18EF27FA77D87457BFC35 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0B12EF14C2FA0FF7FED0E26E9714E4CDCA9 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0846B66C52C41896C49C116538FE1595BB4 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0A7B55E2CF65CFBDC39150BE44B9A3E4AE3 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Can't read AACS VID from disc - most likely current AACS host certificate is revoked by your drive
The volume key is unknown for this disc - video can't be decrypted
Failed to open disc
And here is my drive/disc info:

Code: Select all

Drive Information
Current profile: BD-ROM
Manufacturer: HL-DT-ST
Product: BD-RE UH12LS28
Revision: 1.00
Serial number: K9FB3GN2518
Firmware date: 2011-03-11 12:34:56
Bus encryption flags: 1F

Disc Information
Data capacity: 30.55 Gb
Disc type: BD-ROM
Number of layers: 2
Channel bit length: 74,5 nm (25.0 GB max. per layer)

priitv8
Posts: 19
Joined: Wed Jan 26, 2011 6:20 pm

Re: AACS bus encryption

Post by priitv8 » Sun Jun 05, 2011 7:23 am

mike admin wrote:

Code: Select all

HL-DT-ST BD-RE UH12LS28 1.003
Do you have any information, whether the BH12LS35 BD-Writer also falls into this category?

joe42
Posts: 103
Joined: Mon Jan 03, 2011 7:44 pm

Re: AACS bus encryption

Post by joe42 » Sun Jun 05, 2011 2:42 pm

priitv8 wrote:
mike admin wrote:

Code: Select all

HL-DT-ST BD-RE UH12LS28 1.003
Do you have any information, whether the BH12LS35 BD-Writer also falls into this category?
Probably not.

http://blog.insanegenius.com/2011/04/ar ... ction.html

DavidTigerFan
Posts: 10
Joined: Sat Feb 12, 2011 1:56 am

Re: AACS bus encryption

Post by DavidTigerFan » Wed Jun 08, 2011 2:20 am

I just bought a drive that turns out to be one of these. Should I just return it if I can?

ddrueding
Posts: 3
Joined: Tue May 24, 2011 1:59 am

Re: AACS bus encryption

Post by ddrueding » Wed Jun 08, 2011 5:24 am

I couldn't wait and bought a USB BD reader in the meantime. I'd assume that since it hasn't been included in the numerous updates that have come out since it's discovery that it is a tricky one to solve.

DavidTigerFan
Posts: 10
Joined: Sat Feb 12, 2011 1:56 am

Re: AACS bus encryption

Post by DavidTigerFan » Sat Jun 11, 2011 5:19 am

So I swapped the one I had and of course the new one has the same issue. You can add this samsung to the list:

Drive Information
Current profile: BD-ROM
Manufacturer: TSSTcorp
Product: DVDWBD SH-B123L
Revision: SB04
Serial number: R8496GIB400778
Bus encryption flags: 1E

What is the timeframe for getting MakeMKV working for these? I'm tried of buying drives only to find out that they don't work.

DavidTigerFan
Posts: 10
Joined: Sat Feb 12, 2011 1:56 am

Re: AACS bus encryption

Post by DavidTigerFan » Sat Jun 11, 2011 6:29 am

Yeah, tried AnyDVD out in windows and it works great. Would really MakeMKV work for these drives.

Post Reply