AACSv2 UHD DRM finally fully cracked?

[boogiewoogie16787]

I saw this talk at CCC this past December and it has finally been released to the public. It looks like the entire encryption scheme for UHD has been fully cracked and so I guess we don't need "firmwares" for specific drives anymore?

https://www.youtube.com/watch?v=SEBuiecLZGg

mike admin have you seen this yet?

[Loverman]

Surprise this has not been talked about..

[Billycar11]

I saw this talk at CCC this past December and it has finally been released to the public. It looks like the entire encryption scheme for UHD has been fully cracked and so I guess we don't need "firmwares" for specific drives anymore?

https://www.youtube.com/watch?v=SEBuiecLZGg

mike admin have you seen this yet?

do you just mean the video? its been available just now its on youtube.
or they released the files to do it?
if so im out of business
but i dont see the files released anywhere
and this poses another problem what do you do with all the old flashed drives that are friendly not official this would not work on them i believe even if they were flashed to official

[dcoke22]

It looks like the associated paper released at SGX.fail (https://sgx.fail/files/sgx.fail.pdf) has an appendix with both a high level and detailed descriptions of how AACSv2 works. I would guess that it is probably enough that someone skilled could write code from it.

[SamuriHL]

Without device keys that are not revoked, it doesn't work. While what they did is amazing, it boils down to retrieving all the keys and host certs from powerdvd which just removed UHD support a couple weeks ago. I suspect their certs and device keys will be revoked soon. I mean it would be great to get the device keys even if they do get revoked because they'd work with everything up to the point of revocation but I've yet to see that happen. And that doesn't help going forward. So no, not "cracked" in any real sense of the word. Just some really insane kuel work from a team looking at sgx and used powerdvd as their example.

Sent from my SM-S928U1 using Tapatalk

[jemima]

powerdvd which just removed UHD support a couple weeks ago.

I wonder whether this will have any negative impact on the community of»people who want to actually be able to play back the videos they previously bought independent of the mood of some greedy industry«, i.e. "us"...

I mean I have no idea where they keys used by MakeMKV and/or DVDFab respectively the well known KEYDB.cfg come from, but if they ultimately all somehow used PowerDVD and they stop giving out UHD keys... things could become pretty bad.

[Billycar11]

I wonder whether this will have any negative impact on the community of»people who want to actually be able to play back the videos they previously bought independent of the mood of some greedy industry«, i.e. "us"...

I mean I have no idea where they keys used by MakeMKV and/or DVDFab respectively the well known KEYDB.cfg come from, but if they ultimately all somehow used PowerDVD and they stop giving out UHD keys... things could become pretty bad.

the keys makemkv and others use are not from powerdvd for aacs 2 stuff.
we dont have any aacs 2 keys unless you want to count the one in the video and im sure its been revoked since then maybe what's why powerdvd took away support lol then they asked aacs for a new one they said no and there were like ok i guess we remove it lol.
we have volume keys that are disc specific the powerdvd key would do all aacs2 discs up to the day it was revoked.

[MrPenguin]

we dont have any aacs 2 keys unless you want to count the one in the video and im sure its been revoked since then

The two values shown in the video look more like SHA-256 hashes of keys rather than actual keys, i.e. the sgx.fail team was just proving that they had the keys in their possession but without giving anything useful (to us) away.

The AACSv2 media keys that have started appearing in KEYDB.cfg have all been the same length as the AACSv1 ones.

[jemima]

the keys makemkv and others use are not from powerdvd for aacs 2 stuff.

Is it publicly known then, where they come from?

we dont have any aacs 2 keys unless you want to count the one in the video

Yeah I meant the VUKs... and as long as we get new ones of them, which is enough to rightfully open what one paid for, I don't really care if we have HC, PK etc. or not.

So question kinda is: is the support of VUKs secured, since I always thought they'd also come via DVDfab.cn and friends.