Feeds

Blu-ray BD+ crypto tech to be cracked by year's end?

Method discovered, claims software developer

Providing a secure and efficient Helpdesk

Bullish optical disc decryption software developer Slysoft has claimed it has cracked Blu-ray Disc's BD+ copy-protection technology, though the most recent version of its disc hacking tool only extends to the AACS anti-rip mechanism.

Slysoft announced AnyDVD 6.1.9.3 earlier this week. Among its features, the developer claimed, is the ability to circumvent the latest incarnation of AACS' Media Key Block, aka MKBv4, a vital part of HD DVD and Blu-ray Disc encryption.

In a statement, Slysoft's head of development, James Wong, said: "We already found a way to crack BD+ and we have just turned to fine-tuning." The technique, which the Blu-ray Disc format incorporates in addition to AACS, is "on the verge of being circumvented", Slysoft said, adding it expects to ship a version of its software that can do just that "by the end of this year".

Of course, even at its most basic level - bypassing a DVD's CSS technology - Slysoft's code is verboten in the US and Europe under the terms of, respectively, the Digital Millenium Copyright Act (DMCA) and EU Copyright Directives, all of which criminalise the act of circumventing any copyright protection mechanism.

That's probably why Slysoft is based in Antigua. Though we hear the weather there's pretty pleasant too.

AnyDVD costs $49, plus a further $30 for folk who want the ability to open HD discs. That's just the decryption - to copy the data, you can use the company's CloneDVD, which is another $39. So Slysoft isn't doing all this out of altruism or the desire to get discs played on a platform the studios refuse to support.

But whatever the company's motives, its latest announcement is a blow for a part of the content that's industry seeking to prevent its work being ripped off by consumers who'd rather not cough up.

BD+ is based upon a virtual machine that runs disc-stored programs capable of checking the host's integrity and the security of the encryption keys. It can also add a further level of data-scrambling to the content.

New hybrid storage solutions

More from The Register

next story
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
Google recommends pronounceable passwords
Super Chrome goes into battle with Mr Mxyzptlk
Reddit wipes clean leaked celeb nudie pics, tells users to zip it
Now we've had all THAT TRAFFIC, we 'deplore' this theft
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
TorrentLocker unpicked: Crypto coding shocker defeats extortionists
Lousy XOR opens door into which victims can shove a foot
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.