Feeds

Cheap-as-chips kit smashes Intel's HD video encryption

German boffins crack HDCP with $200 gear

Providing a secure and efficient Helpdesk

German boffins have pulled off a successful attack on HDCP copy protection – using cheap hardware and a lot of clever coding.

Intel's HDCP (high-bandwidth digital content protection) allows the encrypted transfer of high definition video signals via DVI, HDMI, DisplayPort and other connectors and between TVs and Blue-ray discs or set-top boxes. The HDCP master key was leaked last year but there was no easy way to exploit this.

Rather than trying to design a customised chip (both expensive and complicated), computer scientists in the Secure Hardware Group at Germany's Ruhr University built a custom board using relatively inexpensive FPGA chips. A Xilinx Spartan-6 FPGA featuring an HDMI port and a serial RS232 communication port was created and sat between a Blu-ray player and a flat screen TV, intercepting and decrypting traffic, without being detected. The rig, which cost little over $200, was built by professor Tim Güneysu and PhD student Benno Lomb, as part of a research project in copy protection.

Although the exercise shows that HDCP is vulnerable to practical attacks the whole exercise is of little interest to pirates, who can more easily tap compressed high-definition content from receivers rather than faffing about with uncompressed HDCP streams whether or not they are strongly encrypted.

"Our intention was rather to investigate the fundamental security of HDCP systems and to measure the actual financial outlay for a complete knockout," Güneysu explained, H Security reports. "The fact that we were able to achieve this in the context of a PhD thesis and using materials costing just €200 is not a ringing endorsement of the security of the current HDCP system." ®

New hybrid storage solutions

More from The Register

next story
Apple iPhone 6: Missing sapphire glass screen FAIL explained
They just cannae do it in time, says analyst
Quit drooling, fanbois - haven't you SEEN what the iPhone 6 costs?
How keen will buyers be when exposed to the real price?
Slap my Imp up: Bullfrog's Dungeon Keeper
Monsters need to earn a living too
Amazon axes hated Fire Phone price: 99 pennies but a niche? Ain't none
Forgive the double negative but seriously, no one wants this mobe
Apple's big bang: iPhone 6, ANOTHER iPhone 6 Plus and WATCH OUT
Let's >sigh< see what Cupertino has been up to for the past year
Apple's SNEAKY plan: COPY ANDROID. Hello iPhone 6, Watch
Sizes, prices and all – but not for the wrist-o-puter
The Apple Watch and CROTCH RUBBING. How are they related?
Plus: 'NostrilTime' wristjob vid action
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.