Feeds

RealNetworks subsidiary's gaffe led to DVD crack

Hackers break 'unbreakable' DVD encryption

  • alert
  • submit to reddit

Remote control for virtualized desktops

It hasn't been RealNetworks' week. Just as the company's scheme to nab Real Jukebox users' personal preferences data was exposed on Monday, yesterday it emerged that its engineers were responsible for the gaffe that allowed European hackers to crack the DVD encryption code.

According to Wired News, the hackers, from the Norwegian group Masters of Reverse Engineering (MoRE), said they'd been able to break through the uncrackable code because Xing Technologies' XingDVD software had failed to protect their decryption key as all DVD technology licensees are required to do.

Xing Technologies, you may recall, is a wholly owned subsidiary of RealNetworks. Whoops. DVD files are encrypted using 40-bit keys. While that's usually considered secure for most such transactions -- though it's still rather less than the standard for e-commerce transactions, which increasingly use 128-bit keys -- it is held to be difficult to crack unless you have a very powerful system and/or a lot of time.

Because Xing failed to encode its decryption key, MoRE was apparently able to figure out the format, and claim to have found over 170 other keys that will decrypt DVD files. Each DVD has 400 keys programmed in. All these keys are used by their 60K DeCSS application, which can copy the files from a DVD and save them in an unencrypted format on a hard drive.

Wired News found many of the movie and consumer electronics industries' trade organisations decidedly unwilling to comment of the news of the crack, so it's clear that they're rattled. However, such is the growing demand for DVD that a fix can't be far off, but implementing it quickly won't be cheap. Will RealNetworks be forced to pay for the work, we wonder? ®

Security for virtualized datacentres

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Big Content outs piracy hotbeds: São Paulo, Beijing ... TORONTO?
MPAA calls Canadians a bunch of bootlegging movie thieves
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
YARR! Pirates walk the plank: DMCA magnets sink in Google results
Spaffing copyrighted stuff over the web? No search ranking for you
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
Hungary's internet tax cannot be allowed to set a precedent, says EC
More protests planned against giga-tariff for Tuesday evening
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
ISPs handbagged: BLOCK knock-off sites, rules beak
Historic trademark victory, but sunset clause applies to future blocks
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Getting ahead of the compliance curve
Learn about new services that make it easy to discover and manage certificates across the enterprise and how to get ahead of the compliance curve.