HD DVD and Blu-Ray hacked even further
Only one and a half month after the first vulnerability in HD DVD encryption was found, hackers have discovered the processing key, which can be used to decrypt all HD DVD and Blu-Ray discs released so far. The key was discovered by arnezami, and it has been posted at Doom9 discussion forums along with a description on the process of locating the key.
Basically the key was discovered by the same means as the volume keys are extracted -- by dumping memory at key points while playing back a HD DVD movie using a software player. Arnezami didn't specify which player he used (or abused) for the hack, but there aren't too many around to choose from really. Frankly it doesn't matter which player is to "blame", because all software players need to store the decryption keys in memory at some point of the execution.
With the processing key out in the open, it shouldn't take too long before tools taking advantage of it become available. One can only hope that the move to High Definition formats isn't hindered too much by this latest vulnerability in the "unbreakable" AACS DRM. AACS-LA can always implement a new processing key, as well as revoke the device keys for current software based HD players (ie. WinDVD and PowerDVD), and have the software manufacturers do a better job at implementing AACS securely. But that will always take time, and there will always be hackers that outwit the software engineers.
