HorizonForumsone horizon
Log inSign up

[ms] · Est. May 2002

Music madethis place,we just kept itgoing...

One durable person. One social graph. Many communities—and every way people speak, share, listen, write, gather and remember.

Forums / Computers / Electronics / Games

HDCP has (apparently) been broken

2 durable postsStarted 2010-09-14Latest 2010-09-17
#87656Post 1 of 2

[URL]http://pastebin.com/kqD56TmU[/URL]

Apparently here is a master HDCP key which can be used to subvert the entire HDCP protection system.

Paper about how this works here:

[URL="http://www.cypherpunks.ca/%7Eiang/pubs/hdcp-drm01.pdf"]http://www.cypherpunks.ca/~iang/pubs/hdcp-drm01.pdf[/URL]

[quote] Abstract. We describe a weakness in the High Bandwidth Digital Content Protection (HDCP) scheme which may lead to practical attacks. HDCP is a proposed identity-based cryptosystem for use over the Digital Visual Interface bus, a consumer video bus used to connect personal computers and digital display devices. Public/private key pairs are assigned to devices by a trusted authority, which possesses a master secret. If an attacker can recover 40 public/private key pairs that span the module of public keys, then the authority’s master secret can be recovered in a few seconds. With the master secret, an attacker can eavesdrop on communications between any two devices and can spoof any device, both in real time. Additionally, the attacker can produce new key pairs not on any key revocation list. Thus the attacker can completely usurp the trusted authority’s power. Furthermore, the protocol is still insecure even if all devices’ keys are signed by the central authority. [/quote]If this is true, another DRM system down the drain....

#1412334Post 2 of 2

Re: HDCP has (apparently) been broken

[url]http://www.engadget.com/2010/09/16/confirmed-intel-says-hdcp-master-key-crack-is-real/[/url]

Looks like this is real...

[quote] It's been just a few days since [URL="http://www.engadget.com/2010/09/14/hdcp-master-key-supposedly-released-unlocks-hdtv-copy-protect/"]we broke news[/URL] of the HDCP master key crack -- a rogue unlocking of the code that keeps HD content under strict control. Now Intel has independently confirmed to both [I]Fox News[/I] and [I]CNET[/I] that the code is indeed the genuine article. According to company spokesman Tom Waldrop, "It does appear to be a master key," adding that "What we have confirmed through testing is that you can derive keys for devices from this published material that do work with the keys produced by our security technology... this circumvention does appear to work." Coming from the company that developed and propagated the protocol, that's about as clear as you can get.[/quote]

Log in to reply