1. DVD Decryption What happened and is it ethical?

2. DVD CSS n The purpose of encrypting data on DVD. n The CSS Security Model. n How that security model is flawed. n DeCSS. What is it? How did it happen? n What does that mean for the future? n Ethical issues presented by DeCSS.

3. DVD Consortium n Design “an effective system to prevent unauthorized copying of motion pictures and other filmed entertainment on prerecorded DVD-video.” 1 n Prevent digital duplication of the original n Prevent the piracy of movies

4. Content Scrambling System (CSS) n Scrambles the MPEG-2 content so that it cannot be copied. n CPU unintensive, so that inexpensive hardware could decrypt it. n Should be “unbreakable”

5. CSS Algorithm Characteristics n CSS Key is a 40 bit key. n Every DVD player has one of the 400 CSS keys. n Every DVD can be decrypted by any of the 400 keys. n That key is encrypted within the DVD player.

6. Flaws in the Security Model n CSS cannot prevent a bit-by-bit copy of a DVD. n That a 40 bit key, can be broken by trying the 2 40 possibilities. n There are algorithms that can crack it with a complexity of 2 25. 2 n The encryption scheme itself was simple.

7. More Flaws n The data has to be decoded into the raw data at some point, and that raw data can be captured, bypassing the CSS. n Security through “Obscurity” is not effective. n If someone can find one key, then they could easily figure out more keys.

8. DeCSS Decrypting CSS n Reverse engineered Xing’s DVD player to find one unencrypted key. n Used knowledge of this key to find approximately 170 keys that function. n Distributed the source code.

9. The future of DeCSS n It’s out there, both the source and the binaries. n The genie is out of the bottle, and you aren’t going to get it back in. 3 n www.opendvd.org is having a contest to see who can best proliferate/distribute DeCSS.

10. Results n You can watch DVD’s in Linux. n DVD Ripping programs. n DVD movies can be extracted and their digital contents duplicated.

11. The future of DVD’s n The motion picture industry is afraid of people pirating their content, and may pull away from DVD’s as a standard. n The DVD standard may change. You might not be able to have computer DVD players. n Intel has said that they are working on a technology that will allow a signal to be encrypted all the way up to the display. 4

12. Ethical Issues n Piracy of Data n Reverse Engineering n Freedom of speech

13. Piracy of Data n CSS does not prevent the copying of DVD’s. n Bit-for-bit copies can be made. n Display can always be captured. n People have the right to make copies of media they purchase for their own personal use.

14. Reverse Engineering n Reverse Engineering is legal. n Done with computer BIOS and held up in court. n Connectix Virtual Game Station was ruled to be legal. n Digital Millennium Copyright Act “Makes it a crime to circumvent anti-piracy measures built into most commercial software” 5

15. Freedom of Speech n The lawyers have attempted to quell pages that link to other pages pertaining to DeCSS. n Courts ruled that freedom of speech should not be held up because the DeCSS it involved “stolen trade secrets”

16. Conclusions n There are other means of copying DVD’s that were available before DeCSS. n DeCSS was developed to allow for the playback of DVD’s under Linux. n The cracking of CSS was inevitable, and its security model was inherently not solid.

17. Sources 1)http://www.riaa.com/tech/press/dvdencr.htm 2) http://people.a2000.nl/mwielaar/dvd- css/csspaper/css.html 3) http://www.opendvd.org/esr.html 4)http://slashdot.org/article.pl?sid=00/02/18/0853243&m ode=thread 5) http://www.gseis.ucla.edu/iclp/dmca1.htm