37C3 - Full AACSess: Exposing and exploiting AACSv2 UHD DRM for your viewing pleasure

LigH · 12th February 2024, 15:19

DVD Video, Content Scrambling System: ❌
Blu-ray Video, AACS v1: ❌ (Free Speech Flag) — props to muslix64

Ultra HD Blu-ray, AACS v2: ❌ ... and already nearly obsolete by intel removing SGX from gen. 11+

media.ccc.de proudly presents a demonstration on the 37C3 (37th Chaos Communication Congress) that AACSv2 on Ultra HD Blu-ray has been broken too (YouTube video)

The core attempt is breaking Intel SGX using side channel attacks and emulating the authentication in Python on a RasPI.

Minute 25: Wait ... did CyberLink accidentally ship their software debugging implementation with PowerDVD 20 Ultra?

hajj_3 · 12th February 2024, 17:33

this was posted in another thread a month ago.

LigH · 12th February 2024, 17:37

But the video was released today...

hajj_3 · 12th February 2024, 17:43

Quote:

Originally Posted by LigH

But the video was released today...

https://forum.doom9.org/showthread.php?t=185232

LigH · 12th February 2024, 17:49

... on YouTube. And while the CCC published it on their own server, I missed it in hospital. Sorry.

coricopat · 14th February 2024, 00:00

I wonder whether anything that is actually practically usable for end-users comes out from this talk.

But I don't think the author actually released any code of how he did it.

LigH · 14th February 2024, 14:53

It was mainly a proof of concept: The system is vulnerable.

And because that was not the only attack vector, intel discontinued the support of SGX in newer CPUs already.

BleepingComputer: New Intel chips won't play Blu-ray disks due to SGX deprecation

12th February 2024, 15:19	#1 \| Link
LigH German doom9/Gleitz SuMo Join Date: Oct 2001 Location: Germany, rural Altmark Posts: 6,781	37C3 - Full AACSess: Exposing and exploiting AACSv2 UHD DRM for your viewing pleasure DVD Video, Content Scrambling System: ❌ Blu-ray Video, AACS v1: ❌ (Free Speech Flag) — props to muslix64 Ultra HD Blu-ray, AACS v2: ❌ ... and already nearly obsolete by intel removing SGX from gen. 11+ media.ccc.de proudly presents a demonstration on the 37C3 (37th Chaos Communication Congress) that AACSv2 on Ultra HD Blu-ray has been broken too (YouTube video) The core attempt is breaking Intel SGX using side channel attacks and emulating the authentication in Python on a RasPI. Minute 25: Wait ... did CyberLink accidentally ship their software debugging implementation with PowerDVD 20 Ultra? __________________ New German Gleitz board MediaFire: x264 \| x265 \| VPx \| AOM \| Xvid Last edited by LigH; 12th February 2024 at 16:49.

12th February 2024, 17:37	#3 \| Link
LigH German doom9/Gleitz SuMo Join Date: Oct 2001 Location: Germany, rural Altmark Posts: 6,781	But the video was released today... __________________ New German Gleitz board MediaFire: x264 \| x265 \| VPx \| AOM \| Xvid

12th February 2024, 17:49	#5 \| Link
LigH German doom9/Gleitz SuMo Join Date: Oct 2001 Location: Germany, rural Altmark Posts: 6,781	... on YouTube. And while the CCC published it on their own server, I missed it in hospital. Sorry. __________________ New German Gleitz board MediaFire: x264 \| x265 \| VPx \| AOM \| Xvid

14th February 2024, 14:53	#7 \| Link
LigH German doom9/Gleitz SuMo Join Date: Oct 2001 Location: Germany, rural Altmark Posts: 6,781	It was mainly a proof of concept: The system is vulnerable. And because that was not the only attack vector, intel discontinued the support of SGX in newer CPUs already. BleepingComputer: New Intel chips won't play Blu-ray disks due to SGX deprecation __________________ New German Gleitz board MediaFire: x264 \| x265 \| VPx \| AOM \| Xvid

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

12th February 2024, 17:33	#2 \| Link
hajj_3 Registered User Join Date: Mar 2004 Posts: 1,125	this was posted in another thread a month ago.

14th February 2024, 00:00	#6 \| Link
coricopat Registered User Join Date: Jan 2024 Posts: 24	I wonder whether anything that is actually practically usable for end-users comes out from this talk. But I don't think the author actually released any code of how he did it.