HDCP cracked using $250 of gear and a lot of talent

http://www.theverge.com/2011/11/25/2586097/germans-crack-hdcp

by barredo • 15 years ago

62 18 15 years ago

To look at this another way it took 10 years for this crack to be feasible. Not many content protection systems can say that they have stood the test of time for that long.

ldar15• 15 years ago

Yes and no. The content was cracked almost immediately. We don't need an HDCP crack to rip blurays, so there wasn't much motivation to go after the pipe. That said, I assume the "crack" was dependent on the key being released in September, which basically demonstrates that these things are uncrackable, and its your key security that's the determining factor.

However, the truest part of the article for me was "In the meantime, HDCP continues to bother only a single group of people: those who buy stuff legally."

keeperofdakeys• 15 years ago

In the case of HDCP, the master key wasn't found because of bad key security, but because of the design of the encryption algorithm. The keys are matrices, and given enough keys from devices that use HDCP, you can calculate the master key using matrix algebra.

mortenjorck• 15 years ago

What's interesting to me is how the landscape has changed since the early days of non-broadcast HD consumer content, and what this crack might mean for the future of it.

In 2006, if you wanted to see a movie at home in HD, you bought a Blu-Ray or HD-DVD player and picked up the movie on disc. If you wanted to attempt to copy it, the disc was clearly the most attractive vector; the pipe would be inefficient.

In 2011, however, if you want to see a movie at home in HD, you have several choices, only one of which involves a disc. Netflix, Vudu, Hulu, iTunes, CinemaNow, and others all offer HD content without a physical media vector – if you want to attempt a copy, suddenly your only vector is the pipe.

rufugee• 15 years ago

However, the truest part of the article for me was "In the meantime, HDCP continues to bother only a single group of people: those who buy stuff legally."

AMEN. HDCP is the reason I can't use my large computer monitor to play my PS3 while my wife is using our television...my monitor won't support HDCP, but it does have an HDMI input. Very frustrating.

bryanlarsen3• 15 years ago

For most of those 10 years, HDMI was protected simply via its data rate of 1.8TB/hour. Even today data rate and data size considerations require a RAID-0 array, so it's still out of the grasp of most casual copiers.

mbell2• 15 years ago

HDMI is "protected" for the same reason HDCP lasted as long as it did. There was simply a more efficient way to access the data. Also, HDMI's data rate rose to ~3.56 TB/hour in the 1.3 release (circa 2006ish).

Quequau• 15 years ago

When HDCP first was announced Ed Felten (Director of the Center for Information Technology Policy at Princeton University) described a workable attack vector (which was shortly confirmed) and labeled it so weak that most plausible explanation of its existence as: "only as a hook on which to hang lawsuits"

https://freedom-to-tinker.com/blog/felten/hdcp-why-so-weak

jevinskie• 15 years ago

This has already been done before the master key leak, using ill-gotten keys. [1] What is shown here isn't that groundbreaking. HDFury uses either an ASIC or FPGA so the HDL for HDCP crypto has already been done, just not openly. The stream cipher itself is quite simple. In HW it is very fast (just the PRNG generator + XOR) and in SW it is feasible but slow. [2] The really impressive work was done by whoever leaked the master keys - this project would have been impossible without their work. Intel's statement that any HW decrypter would be prohibitively expensive was just hot air to cover their asses. With the leaking of the master keys their precious DRM was immediately broken forever and they are just trying to save face.

[1] http://www.hdfury.com/ [2]: http://www.cs.sunysb.edu/~rob/hdcp.html

wmf2• 15 years ago

Intel's statement that any HW decrypter would be prohibitively expensive was just hot air to cover their asses.

Some people probably believed that hot air, so it's necessary to actually implement the crack to convince everyone. (The same thing happens in software where vendors ignore vulnerabilities until an exploit appears, then scramble to fix them.)

CamperBob• 15 years ago

Pretty funny, all right. The moment Digilent announced the Atlys, it was obvious that it was tailor-made for a MIM attack against HDCP. I'm surprised it took somebody this long.

nitrogen• 15 years ago

How did I not know about that board before? Ever since HD displaced SD, I've always wanted an FPGA platform to experiment with custom video processing a la tvtime and DScaler. Now I know what to save up for.

HDCP cracked using $250 of gear and a lot of talent

Related Stories