Chris Lanier's Blog

News, Analysis, and Opinion on Microsoft Digital Media Technologies (and TGB News!)

No, AACS Was Not Cracked

All that happened was the method Cyberlink to decrypt AACS used was semi-compromised.  Their implemention kept the key in memory, a key which is needed to legally decrypt the content protection.  What is likely going to happen is that specific key will be revoked, and Cyberlink will have to issue an update in order to play newer titles.  CSS didn't have a good way to revoke the keys, AACS does.


Waiting to see what Cyberlink and AACS said happened, but I don't see that AACS was cracked.

Comments

 

scuffs said:

Your right it isnt cracked yet.  CSS was "cracked" by reverse engineering the CSS decryption key found in the Xing DVD-Player.  Disabling the code wouldnt matter because once it was found they reverse engineered it and found the way the keys were produced and from there were able to easily brute force the encryption.

The first step in all this was finding the key, like they have now done for AACS, now they just need to find out if it can be brute forced, and if so how hard it is.  They are also talking about ways to pull out a hardware key.  Someone found a way to pull the hardware CSS keys out of DVD players, and are now in the process of trying to get the key out of a blueray drive (PS3).  The idea is they wont disable a hardware key since it would mean recalling any hardware players (1 Million PS3s).

If they succeed in getting the hardware key (Sony helped them along with the ability to install linux on the thing, thanks sony) in my opinion it will be as good as cracked.  I didnt bookmark the forum I found all this in but it was 3 links or so off the slashdot article.
January 8, 2007 2:28 PM


Terms of Service | Privacy Statement | Code of Conduct | About