Countdown to Burning Crusade: win free stuff from WoW Insider every day til Jan 16! | Add to My AOL, MyYahoo, Google, Bloglines

AACS DRM cracked by BackupHDDVD tool?

Can it be? Is Hollywood's new DRM posterchild AACS (Advanced Access Content System, see more here) actually quite breakable? According to a post on our favoritest of forums (Doom9) by DRM hacker du jour muslix64, his new BackupHDDVD tool decrypts and dismantles AACS on a Windows PC. Just feed the small utility a crypto key (it comes bundled with keys for a few popular HD DVD titles, with the promise of more on the way), and it'll dump the video right off the disc onto your hard drive, supposedly playable in any HD DVD compatible player. If true, this would instantly become the DeCSS of high def optical (where you at, Jon?), as AACS is the copy protection scheme used not only by HD DVD, but by Blu-ray as well. Code and source posted in read link, let us know what you find!

Note: We're working on testing this ourselves, we'll report back with our findings asap.

[Thanks, Max and Adam]

Update: Well, it definitely does something. Click on for some pics and our experiences using the app.

So we have our Xbox 360 HD DVD plugged into our system with the Toshiba HD DVD / UFS 2.5 file system drivers going on, and are able to read the directory contents (drive G:).


We pulled the TRAILER.EVO file down and named it encrypted_TRAILER.EVO. We then ran BackupHDDVD on the disc (Full Metal Jacket).


We quit after we hit TRAILER.EVO, since that's what we wanted to compare against.


We then ran a binary compare against the two. You'd think an unencrypted movie file would have more than just a few hex offsets changed by the unencryption process, but we haven't yet been able to test playing back the files, namely because WinDVD and PowerDVD both totally blow as demos. More shortly.

Recent Posts

Subscribe to these comments

Reader Comments (Page 1 of 4)

vote up vote downReportHighest Ranked

DudeinAmerica @ Dec 27th 2006 6:31PM

Awesome sountrack that is.. YaY Fair Use!

 Replies: 1  |  Reply
vote up vote downReportNeutral

sc00ter @ Dec 27th 2006 6:34PM

cute

  Reply
vote up vote downReportNeutral

Jesse @ Dec 27th 2006 6:35PM

How the hell do you get the crypto is it something leak by an internal source is someone cracking these? Kind of shady until that is reveled

 Replies: 1  |  Reply
vote up vote downReportHighly Ranked

Das @ Dec 27th 2006 7:01PM

Assuming that this is legit, major props to muslix64 for figuring this out, and giving the rest of us a route around that draconian DRM.

  Reply
vote up vote downReportNeutral

Joe C @ Dec 27th 2006 7:02PM

Wonder if this has been tried out on a blu-ray then again i dont have a blu-ray drive for my pc just my ps3.

 Replies: 1  |  Reply
vote up vote downReportLowest Ranked

John Doe @ Dec 27th 2006 7:07PM

This is rather pointless, isnt it?
As I recall, the studios can just change the encryption, or the key or something, so the cracking gets rendered useless.
(they did this after deCSS

  Reply
vote up vote downReportHighest Ranked

Jeff Foster @ Dec 27th 2006 7:07PM

by the time engadget hears about ANYTHING, it's far too late to "save the underground"

vote up vote downReportNeutral

Max @ Dec 27th 2006 7:11PM

SIK!!!!

  Reply
vote up vote downReportLowest Ranked

What The @ Dec 27th 2006 7:30PM

Blu-Ray also uses AACS, however, it has BD+ Copy protection and watermarking as well! So they will need to do a lot more to crack blu-ray completely (which is why 90% of hollywood supports blu-ray). This is horrible news for HD-DVD, especially with CES so close. The show was already going to be 99% blu-ray, now add the humility of everyone bashing HD-DVD for being cracked first.

Now, where will these pretty files end up showing up for "private" use? haha, Viva La Blu-Ray!

 Replies: 2  |  Reply
vote up vote downReportHighest Ranked

Ryan Block @ Dec 27th 2006 7:52PM

Wow, I've never heard someone cheer on a "superior" DRM before!

vote up vote downReportNeutral

Person157 @ Dec 27th 2006 7:53PM

@ DudeinAmerica
The soundtrack is the song from Matrix Reloaded. The scene where Neo fights the lil asian dude in the teahouse. From memory I think the song is actually called Teahouse but no idea who did it.
:)

vote up vote downReportHighest Ranked

Mack Swift @ Dec 27th 2006 7:54PM

Now with all those different keys for all those movies, you'd think someone, somewhere would figure out the master key once enough of the movie keys are collected? Should be an interesting battle, as the studios will obviously keep changing the key, but still need to keep original movies with the original key compatible. It was only a matter of time before this happened anyways.

  Reply
vote up vote downReportHighest Ranked

Bah @ Dec 27th 2006 8:13PM

The DRM is not broken by this. He implemented the decryption algorithm which, as far as I know, is publically available and not a secret. You still can't access the content without knowing the key. The key is (supposed to be) hidden in the hardware (or software). And if a key is compromised it can be revoked (future titles won't play on the device where you got the key from).

So, you can decrypt the DVD if you know the key. This was *always* the case. Everyone knows this. (Everyone with a clue anyway).
In short, this is nothing.

CSS (for DVDs) was different in two ways: 1. The device key couldn't be easily revoked 2. The encryption was weak so that the key could be generated automatically. That's how/why CSS was broken.

AACS suffers from neither of these weaknesses and AACS has not been broken.

 Replies: 2  |  Reply
vote up vote downReportNeutral

Earl @ Dec 27th 2006 8:18PM

I love it! These big corporations are spending BIG $$ for all this DRM. Then some guy cracks it.
How long has this been the trend now?
There's nothing they can do about it.
Sure they can change the encryption, but with HD-DVD players already out there is only so much the encryption can be changed. They couldn't come up with a brand new scheme. Can't screw over all the early adopters.

  Reply
vote up vote downReportHighly Ranked

Syphon Filter @ Dec 27th 2006 8:20PM

Is anyone suprised?

Also to those singing praises to Blu-Ray for still being intact...it will happen and when it does the net result will be the same.

  Reply
vote up vote downReportHighest Ranked

Dan @ Dec 27th 2006 8:25PM

if the movie industry makes it, we will break it

  Reply
vote up vote downReportNeutral

Mike @ Dec 27th 2006 7:47PM

Makes me wonder if this guy is part of the Blu-ray contingent. Interesting coincidence when you consider that CES is a couple weeks away.

  Reply
vote up vote downReportNeutral

Henry @ Dec 27th 2006 8:31PM

Yeah the song is called Teahouse and it's by Juno Reactor and Gocoo.

When is the man ever gonna learn that no matter what sort of copyright protection scemes he dreams up, the people will find a way to circumvent them?

vote up vote downReportHighest Ranked

netdroid9 @ Dec 27th 2006 8:58PM

...Well... How do HDDVD players get the key? It always struck me as odd that it was so damn hard to decrypt a DVD when it played perfectly well on PowerDVD, WinDVD and all the other DVD playing software. Can't we just hook whatever they use for decryption/key-obtaining and be done with it?

 Replies: 1  |  Reply
vote up vote downReportNeutral

Russell @ Dec 27th 2006 7:53PM

Very nice... What The, Why would you champion bluray over hddvd now?

Think of what DVD has become since CSS was broken. We can now transcode DVD's to divx to store on a media center PC networked with any devices in the house in any format, we can put DVD's on our ipods/PMP's / PDAs and can make backup copies.

Since the actual Title encryption key was ripped from memory this isn't about revoking a player's key I think. Even a revoked player should be able to decode the volume/title keys. All it takes is one player software and some unprotected memory (Thanks Windows XP, it may be a LOT harder in Vista)

 Replies: 1  |  Reply

Add your comments

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br> tags.

New Users

Current Users


Discover what's new at Engadget

Featured Galleries

Winners of Engadget's Halloween Costume Contest! (2006)
Hands-on with Belkin's Cable-Free USB Hub
Wii Classic Controller vs. classic SNES controller
Replacement Wii straps arrive

Sponsored Links

Most Commented On (7 days)

Weblogs, Inc. Network

ConsumerAdd RSS
AdJabAOL | Yahoo
AutoblogAOL | Yahoo
AutoblogGreenAOL | Yahoo
Autoblog SpanishAOL | Yahoo
Autoblog ChineseAOL | Yahoo
Autoblog Simplified ChineseAOL | Yahoo
Blogging BabyAOL | Yahoo
Card SquadAOL | Yahoo
CinematicalAOL | Yahoo
Download SquadAOL | Yahoo
Divester (scuba)AOL | Yahoo
EngadgetAOL | Yahoo
Engadget MobileAOL | Yahoo
Engadget ChineseAOL | Yahoo
Engadget Simplified ChineseAOL | Yahoo
Engadget JapaneseAOL | Yahoo
Engadget SpanishAOL | Yahoo
HD BeatAOL | Yahoo
JoystiqAOL | Yahoo
LuxistAOL | Yahoo
PVR WireAOL | Yahoo
SlashfoodAOL | Yahoo
StyledashAOL | Yahoo
That's FitAOL | Yahoo
TUAW (Apple)AOL | Yahoo
TV SquadAOL | Yahoo

Technology

Add RSS
CSS InsiderAOL | Yahoo
Digital PhotographyAOL | Yahoo
Flash InsiderAOL | Yahoo
Google (Unofficial)AOL | Yahoo
JavaScriptAOL | Yahoo
Microsoft (Unofficial)AOL | Yahoo
OfficeAOL | Yahoo
Open SourceAOL | Yahoo
Peer-to-PeerAOL | Yahoo
Photoshop (Unofficial)AOL | Yahoo
RSSAOL | Yahoo
SAS (Unofficial)AOL | Yahoo
Search Engine MarketingAOL | Yahoo
Social SoftwareAOL | Yahoo
Tablet PCsAOL | Yahoo
TUAW (Apple)AOL | Yahoo
VoIPAOL | Yahoo
Yahoo (Unofficial)AOL | Yahoo

Travel/Destinations

Add RSS
GadlingAOL | Yahoo
Blogging New OrleansAOL | Yahoo
Blogging OhioAOL | Yahoo

Wireless

Add RSS
BBHub (BlackBerry)AOL | Yahoo
Engadget MobileAOL | Yahoo
Engadget: GPSAOL | Yahoo
Engadget: WirelessAOL | Yahoo
The Wireless ReportAOL | Yahoo

Video Games

Add RSS
Blogging E3AOL | Yahoo
DS FanboyAOL | Yahoo
Engadget: GamingAOL | Yahoo
JoystiqAOL | Yahoo
Nintendo Wii FanboyAOL | Yahoo
PS3 FanboyAOL | Yahoo
PSP FanboyAOL | Yahoo
Second Life InsiderAOL | Yahoo
WoW InsiderAOL | Yahoo
Xbox 360 FanboyAOL | Yahoo

Media & Entertainment

Add RSS
CinematicalAOL | Yahoo
DesignAOL | Yahoo
Digital MusicAOL | Yahoo
Droxy (Digital Radio)AOL | Yahoo
DV Guru (Digital Video)AOL | Yahoo

Finance

Add RSS
Blogging StocksAOL | Yahoo
Apple (AAPL)AOL | Yahoo
eBay (EBAY)AOL | Yahoo
Genl Electric (GE)AOL | Yahoo
Google (GOOG)AOL | Yahoo
Microsoft (MSFT)AOL | Yahoo
Time Warner (TWX)AOL | Yahoo
Wal Mart (WMT)AOL | Yahoo
Yahoo! (YHOO)AOL | Yahoo

Business

Add RSS
MortgagesAOL | Yahoo

Life Sciences

Add RSS
The Cancer BlogAOL | Yahoo
The Cardio BlogAOL | Yahoo
The Diabetes BlogAOL | Yahoo
Medical Informatics InsiderAOL | Yahoo

Personal

Add RSS
Brian AlveyAOL | Yahoo
Jason CalacanisAOL | Yahoo
Judith MeskillAOL | Yahoo
Ted LeonsisAOL | Yahoo

Events

Add RSS
Blogging BlogHerAOL | Yahoo
Blogging DEMOAOL | Yahoo
Blogging E3AOL | Yahoo
Blogging ETechAOL | Yahoo
Blogging GnomedexAOL | Yahoo
Future of MusicAOL | Yahoo
Blogging MilkenAOL | Yahoo
Blogging SundanceAOL | Yahoo
Blogging Web 2.0AOL | Yahoo
Live 8 InsiderAOL | Yahoo

On Hiatus/Retired

Add RSS
Telemedicine InsiderAOL | Yahoo
SCM Wire (supply chain)AOL | Yahoo
BluetoothAOL | Yahoo
RFIDAOL | Yahoo
Ultra WidebandAOL | Yahoo
WiFiAOL | Yahoo
The WiMAX WeblogAOL | Yahoo
Wireless DevAOL | Yahoo
WirelessAOL | Yahoo
Documentary FilmAOL | Yahoo
Enron BlogAOL | Yahoo
Independent FilmAOL | Yahoo
Magazine DesignAOL | Yahoo
NanopublishingAOL | Yahoo
SpamAOL | Yahoo
Unofficial Playstation 3AOL | Yahoo
Unofficial Xbox2AOL | Yahoo
Video GamesAOL | Yahoo

Other

Add RSS
Weblogs, Inc.AOL | Yahoo

Powered by Blogsmith

Add RSS
Paper MagazineAOL | Yahoo
Razor MagazineAOL | Yahoo

Other Weblogs Inc. Network blogs you might be interested in: