Talk:Basic Bluray disc authentication procedure

From PS3 Developer wiki
Jump to navigation Jump to search

https://web.archive.org/web/*/http://ps3devwiki.com/files/documents/-aacs/
https://web.archive.org/web/*/http://ps3devwiki.com/files/devtools/aacs/

AACS / BD SCSI commands[edit source]

  • AACS (Advanced Access Content System) keys are (/handled/) in /dev_flash/bdplayer/AacsModule.spu.isoself
  • EID3 is passed to AACS SPU module as parameter.
  • SCSI cmd 0xad (read disc structure), format code 0x83 (MKB) is not supported (using sg_raw)


command table in spu module[edit source]

there are total (0x78 til 4.75, 0x57 since 4.76) commands,but some are dummies, NULL pointers
e.g. 0x3d is for host cert, but it returns error 
0x3 sends it to SPU module, 0x3e stores it in local memory of SPU, 0x3f verifies
for 3.55 the table there, where it starts : http://pastie.org/2260002
entry is 4 bytes, ptr to cmd handler

key related content on BD movie discs[edit source]

\AACS\MKB_RO.inf
\AACS\MKB_RW.inf
\AACS\ContentRevocation.lst
\AACS\Unit_Key_RO.inf
\AACS\Content000.cer
\AACS\CPSUnit00001.cci
\AACS\mcmf.xml
\AACS\DUPLICATE\MKB_RO.inf
\AACS\DUPLICATE\MKB_RW.inf
\AACS\DUPLICATE\ContentRevocation.lst
\AACS\DUPLICATE\Unit_Key_RO.inf
\AACS\DUPLICATE\Content000.cer
\AACS\DUPLICATE\CPSUnit00001.cci
\AACS\DUPLICATE\mcmf.xml
\AACS\DUPLICATE\ContentHash000.tbl
\AACS\ContentHash000.tbl

cprm /cppm[edit source]

See also: /dev_flash/bdplayer/CprmModule.spu.isoself Iso module and http://501post.com/audio/db/from%20aaron/DVDAExplorer2008.07.21/src/libdvdcpxm/src/libdvdcpxm.c

sbox[256] decrypted[edit source]

3ad09ab6f5c116b7 58f6ede6d98c57fc fd4b9b470e8efff3 bbba0a8015d72b36
6a435a89b45d7119 8fa088b8e88ac3ae 7c4e3db596cc2100 1a6b12db1fe4119d
d39368b07f3b52b9 94dda51b466031ec c9f8e95e1398bf27 560891e36f2040b2
2cce0210e018d56c decd8779afa92650 f233926ec03f3941 aa5b7d2403d62feb
0b99864c51458d2e ef077be24d7afe25 5c29a2a8b1f0b3c4 307e6338cbf44fd1
df4432dc175f662a 819e774a656734fa 541e14be04f1a79c 8b37ee85ab220f69
c5d40584a47342a1 64e1708390c2480d 611cc672fb7674e7 01d8c8d275a3cf28
821d4935c7bdcaa6 ac0c62adf93cea2d 59da3e976d09f755 e523539f06bc9578

cppm_device_keys[edit source]

rev. - key
00 4821 6d05086b755c81
01 091c 97ace18dd26973
02 012a fefc0a25a38d42
03 469b 0780491970db2c
04 0f9b 0bedd116d43484
05 59b2 566936bcebe294
06 5fc8 dc610f649b1fc0
07 11de 6ee01d3872c2d9
08 52b6 d0132c376e439b
09 135f 800faa66206922
0a 3806 9d1aa1460885c2
0b 2da2 9833f21818ba33
0c 113f d50aa7d022045a
0d 11ec 88abee7bb83a32
0e 071b 9b45eea4e7d140
0f 5c55 5a49f860cca5cf
rev. - key
00 0375 1a12793404c279
01 4307 61418b44cea550
02 1f70 52bde5b73adcda
03 1bbc 70a031ae493159
04 1f9d 0a570636aedb61
05 4e7b c313563e7883e9
06 07c4 32c55f7bc42d45
07 4216 4f854df6c1d721
08 11c5 c0e3f0f3df33cc
09 0486 bfca7754db5de6
0a 2f82 a964fc061af87c
0b 236a b96d68856c45d5
0c 5beb d2ca3cbb7d13cc
0d 3db6 58cf827ff3c540
0e 4b22 bb4037442a869c
0f 59b5 3a83e0ddf37a6e

cprm_device_keys[edit source]

rev. - key
00 0809 d50fe4150d32d2
01 0719 3131c69e825462
02 0408 7c2e6878b3a494
03 040a 3c9f93ec5848a2
04 03bc 614f4bda9876a5
05 0812 2e901a9227fc47
06 090d eebf4957d53d62
07 0322 6314ec2ca6b32b
08 0035 14f6d08c096483
09 07c5 8f7eff1d689a81
0a 069a ff4b538492c611
0b 0bd8 909300c14c1467
0c 01d1 ba5826ef832e2b
0d 0583 a92e636998767d
0e 02e8 313f0a51478df8
0f 08fc d28ce525a2be4b

HostKeyCertificate[edit source]

Host Private Key (Hpriv): 8C8647FE2A70EF0388EA9E43F432CC441C6B108C
Host certificate (Hcert): 0200005CFFFF000000AE00004142A5411F1E63F185581C876B939FB40B523BF69C004CA69E047606EE5183C0ABEF1E7D04CB6E65260677E7B0573D08E60957935503ED78F7E27B190B4A7CAFCBAFF4A2
836453ECF72E49668DAF1DB9
Host Nonce (Hn): 2923BE84E16CD6AE529049F1F1BBE9EBB3A6DB3C

AACS processing keys[edit source]

Master Keys (ProcessingDeviceKeysSimple) from other sources (128-bit or 16-byte):
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 (MKB v1)
45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2 (MKB v3)
97 39 40 bb 18 0e 83 26 62 31 ee 59 6c ef 65 b2 (MKB v3/4/7/8/9/10/12)
F1 90 A1 E8 17 8D 80 64 34 94 39 4F 80 31 D9 C8 (MKB v4)
7A 5F 8A 09 F8 33 F7 22 1B D4 1F A6 4C 9C 79 33 (MKB v6/7/8)
C8 72 94 CE 84 F9 CC EB 59 84 B5 47 EE C1 8D 66 (MKB v9)
45 2F 6E 40 3C DF 10 71 4E 41 DF AA 25 7D 31 3F (MKB v10)
58 eb da df 88 dc c9 33 04 cb be db 9e e0 95 f6 (MKB v14/15/16)
46 5f a8 be 82 85 09 01 4d 05 d2 fc ce ff 35 d2 (MKB v17)
ad 5e 54 6c 46 d7 2d c0 83 ae b5 68 69 24 e1 b3 (MKB v18/19)
53 fc e7 8e cd 35 2d a5 0d 52 6b 5e e3 d3 d9 6b (MKB v20/21)
c3 22 38 97 6f f4 4a 51 e2 d3 35 53 cf e8 57 72 (MKB v23/25)

MKB_RW.inf / MKB_RO.inf / KCD[edit source]

version MKB_RW MKB_RO KCD Remarks
1 MKB_RW_v1.inf
2
3 MKB_RW_v3.inf
4 MKB_RW_v4.inf
5
6 MKB_RW_v6.zip (11.16 KB)
7 MKB_RW_v7.inf
8 MKB_RW_v8.zip (12.66 KB)
9 MKB_RW_v9.inf
10 MKB_RW_v10.inf
11
12 MKB_RW_v12.inf
13
14 MKB_RW_v14.inf
15 MKB_RW_v15.inf
16 MKB_RW_v16.inf
17 MKB_RW_v17.inf
18 MKB_RW_v18.inf
19 MKB_RW_v19.inf
20 MKB_RW_v20.zip (13 KB)
21 MKB_RW_v21.inf
22
23 MKB_RW_v23.zip (13.1 KB)
24 MKB_RW_v24.zip (13.16 KB)
25 MKB_RW_v25.inf
26

aacs_auth[edit source]

aacs_cc_pub_key[edit source]

  78 4C F5 C3 63 97 A4 39 04 06 A4 9F 78 00 C7 7D E9 0C B3 4C 00 1D F3 6B 8F 2E CF 83 CD EE 43 8F 7F D1 F4 80 6F D2 0D E7

aacs_la_pub_key[edit source]

  63 C2 1D FF B2 B2 79 8A 13 B5 8D 61 16 6C 4E 4A AC 8A 07 72 13 7E C6 38 81 8F D9 8F A4 C3 0B 99 67 28 BF 4B 91 7F 6A 27

powerdvd71_host_cert[edit source]

  02 00 00 5C FF FF 00 00 00 0C 00 00 6E 3D EB 67 9B 9A 16 AD FA A8 E3 08 78 76 7B A6 EB 2A 9B 41 53 85 AD 11 81 B4 44 6C 31 E9 A5 DD 2A B8 08 B3 64 FF 15 88 5B AC 49 09 64 31 8C 9B F8 02 9F CF 76 F6 88 A5 4F BD A0 3F 6D 93 32 EF 04 E5 A6 13 12 DA 85 88 0A 4D 9C BB 79 D8 60 2E

ps3_host_cert[edit source]

  02 01 00 5C FF FF 80 00 00 39 00 00 65 EA C9 87 8B 85 EF F4 D7 7A 62 B1 D6 00 02 4A CE 68 DD 33 66 88 0E 4F 84 4F 34 B7 7A 05 01 35 A2 0E 73 B6 26 DA EA 51 57 B3 2E B8 4B C6 E8 7B 0D EE 4D 83 3C EA DA 86 12 01 51 00 2C 3C 66 D5 25 6F 71 CF A6 8B 7E 55 BA 1B 35 1F 34 03 43 4E

ps3_host_cert2[edit source]

new since 4.76

ps3_host_priv_key[edit source]

  00 66 8C 9A 75 EE FC 8D A4 26 19 38 E2 71 28 50 61 BB 09 F0 DD


External Reference[edit source]