Feeds

RealNetworks subsidiary's gaffe led to DVD crack

Hackers break 'unbreakable' DVD encryption

  • alert
  • submit to reddit

Secure remote control for conventional and virtual desktops

It hasn't been RealNetworks' week. Just as the company's scheme to nab Real Jukebox users' personal preferences data was exposed on Monday, yesterday it emerged that its engineers were responsible for the gaffe that allowed European hackers to crack the DVD encryption code.

According to Wired News, the hackers, from the Norwegian group Masters of Reverse Engineering (MoRE), said they'd been able to break through the uncrackable code because Xing Technologies' XingDVD software had failed to protect their decryption key as all DVD technology licensees are required to do.

Xing Technologies, you may recall, is a wholly owned subsidiary of RealNetworks. Whoops. DVD files are encrypted using 40-bit keys. While that's usually considered secure for most such transactions -- though it's still rather less than the standard for e-commerce transactions, which increasingly use 128-bit keys -- it is held to be difficult to crack unless you have a very powerful system and/or a lot of time.

Because Xing failed to encode its decryption key, MoRE was apparently able to figure out the format, and claim to have found over 170 other keys that will decrypt DVD files. Each DVD has 400 keys programmed in. All these keys are used by their 60K DeCSS application, which can copy the files from a DVD and save them in an unencrypted format on a hard drive.

Wired News found many of the movie and consumer electronics industries' trade organisations decidedly unwilling to comment of the news of the crack, so it's clear that they're rattled. However, such is the growing demand for DVD that a fix can't be far off, but implementing it quickly won't be cheap. Will RealNetworks be forced to pay for the work, we wonder? ®

Beginner's guide to SSL certificates

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Big Content outs piracy hotbeds: São Paulo, Beijing ... TORONTO?
MPAA calls Canadians a bunch of bootlegging movie thieves
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
YARR! Pirates walk the plank: DMCA magnets sink in Google results
Spaffing copyrighted stuff over the web? No search ranking for you
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
Hungary's internet tax cannot be allowed to set a precedent, says EC
More protests planned against giga-tariff for Tuesday evening
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.