1,901

Uploaded test version. http://www.mediafire.com/file/q5b8c94jv … st.7z/file

F1ReB4LL wrote:

GetLastError: 2147681032 Copy Protection Error - DVD session key not established

- fixed: establishment of session is needed per title key for some drive

sarami wrote:

It seems [001] to [081] are all same every time, but the remains are all different every time.

- fixed: mpc-hc original code

1,902

The test version test_20190508_190259 (currently the latest test version on the first post last I checked) has a bug when dealing with SafeDisc protected games. When using /sf it will appear to detect the SafeDisc protection but at the end of the dump with try and reread the bad sectors as if they were not supposed to be there as part of the copy protection.

1,903 (edited by Nexy 2019-06-11 00:10:15)

Haldrie wrote:

The test version test_20190508_190259 (currently the latest test version on the first post last I checked) has a bug when dealing with SafeDisc protected games. When using /sf it will appear to detect the SafeDisc protection but at the end of the dump with try and reread the bad sectors as if they were not supposed to be there as part of the copy protection.

I believe my report was not clear, there were no C2 errors for me. Only EDC/ECC errors from weak decoding and only at the end of the disc with lba > 200000.

I will redump and add logs later.

Plextor PX-760A 1.07 (+30) : Plextor PX-716SA 1.11 (+30) : Plextor PX-W5224A 1.04 (+30) : Plextor PX-W4824 1.07 (+30) : Plextor PX-W4012TA 1.07 (+98) : Plextor PX-W1610TA (+99) : Plextor PX-W1210TA 1.10 (+99) : Lite-On LTR-48246S (+6) : Lite-On LTR-52246S (+6) : Lite-On LH-20A1H LL0DN (+6) : BenQ DW1655 BCIB (+618) : ASUS DRW-2014L1 1.02 (+6) : Yamaha CRW-F1 (+733) : Optiarc SA-7290H5 1H44 (+48) : ASUS BW-16D1HT 3.02 (+6)

1,904

sarami wrote:

Uploaded test version. http://www.mediafire.com/file/q5b8c94jv … st.7z/file

F1ReB4LL wrote:

GetLastError: 2147681032 Copy Protection Error - DVD session key not established

- fixed: establishment of session is needed per title key for some drive

Nope, same error on USB and SATA drives. AnyDVD reads the keys fine.

Also, are you sure you read all the encrypted files' keys? Look at my AnyDVD screenshot again:
https://i.imgur.com/wJXfFQk.png

Now the end of the failed CSS.exe log:

PlayerKey[1]: 01 AF E3 12 80
DecryptedDiscKey[020]: 05 D7 88 32 5F
LBA:     324, Filename: VTS_01_1.VOB, No title Key
LBA:  524451, Filename: VTS_01_2.VOB, No title Key
LBA: 1048601, Filename: VTS_01_3.VOB, No title Key
LBA: 1572735, Filename: VTS_01_4.VOB, No title Key
LBA: 2096885, Filename: VTS_01_5.VOB, No title Key

The VIDEO_TS directory of this disc contains:

VIDEO_TS.BUP
VIDEO_TS.IFO
VTS_01_0.BUP
VTS_01_0.IFO
VTS_01_1.VOB
VTS_01_2.VOB
VTS_01_3.VOB
VTS_01_4.VOB
VTS_01_5.VOB

As far as I understand, either VIDEO_TS.BUP or VIDEO_TS.IFO is also encrypted and even has a separate key. It seems the keys are tied to either BUPs or IFOs (IFOs, most likely), but not to VOBs. Multiple IFOs - multiple possible keys, 1 IFO - 1 key (even if multiple VOBs are there).

1,905

sarami wrote:

Uploaded test version. http://www.mediafire.com/file/q5b8c94jv … st.7z/file

F1ReB4LL wrote:

GetLastError: 2147681032 Copy Protection Error - DVD session key not established

- fixed: establishment of session is needed per title key for some drive

sarami wrote:

It seems [001] to [081] are all same every time, but the remains are all different every time.

- fixed: mpc-hc original code

Tried using this new test version.
I have an LG USB DVD (GP65NB60 model)
When I run it I get this message:

D:\Downloads\CSS\Release>css s out.txt
[F:ExecReadDisc][L:150] GetLastError: 87, The parameter is incorrect.

lpCmd: a8, 00, 00, 00, 00, 10, 00, 00, 00, 01, 00, 00
dwBufSize: 2048

This message was the same in 20190531.

It produces output with matching keys after 81, unlike the 20090531 version I tried earlier.
But, output files end without the expected list of files (none of the LBA, file, key is output) :

[406]: 7B 8A DB 7A 9E [407]: 89 9C 3B E4 ED [408]: C7 D3 CA 2E B6 [409]: 7E 9E 1C 8B EF
PlayerKey[1]: 01 AF E3 12 80
DecryptedDiscKey[020]: 2E 90 FE F6 E8
END OF FILE

This behavior is the same in this version and 20090531.
Attaching results of 3 consecutive css.exe runs for the 2 discs I have here, DICUI output logs for the same discs can be found on the relevant dumps thread.

My drive is region 2. Historical Disc is also region 2. Dramatic DVD is region free (1-8).

Post's attachments

Dothack Dramatic DVD.zip 5.69 kb, file has never been downloaded. 

Dothack Historical Disc.zip 5.68 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

1,906

F1ReB4LL wrote:

either VIDEO_TS.BUP or VIDEO_TS.IFO is also encrypted and even has a separate key.

http://www.mediafire.com/file/q5b8c94jv … st.7z/file
Also check .BUP and .IFO

Maddog wrote:

I have an LG USB DVD (GP65NB60 model)
When I run it I get this message:

How about other drive and other DVD?

Hi sarami, what kind of protection is "Sysiphus"? I have the Italian version of Coffee Break, not only it has a ring but it also contains this particular anti-copy. Do you have any info about it?

Salviamo la cultura videoludica italiana.

1,908

sarami wrote:
F1ReB4LL wrote:

either VIDEO_TS.BUP or VIDEO_TS.IFO is also encrypted and even has a separate key.

http://www.mediafire.com/file/q5b8c94jv … st.7z/file
Also check .BUP and .IFO

This version finally works with all my drives. But it seems I was wrong and BUP and IFO files can't be encrypted smile Tested different discs, they can be easily copied with any file manager from all the discs (for VOBs you get an error about the encryption). So you can probably ignore BUP and IFO files.

PlayerKey[1]: 01 AF E3 12 80
DecryptedDiscKey[020]: 05 D7 88 32 5F
LBA:     298, Filename: VIDEO_TS.BUP, No TitleKey
LBA:     279, Filename: VIDEO_TS.IFO, No TitleKey
LBA: 2109490, Filename: VTS_01_0.BUP, No TitleKey
LBA:     301, Filename: VTS_01_0.IFO, No TitleKey
LBA:     324, Filename: VTS_01_1.VOB, TitleKey: DC 23 59 B3 11
LBA:  524451, Filename: VTS_01_2.VOB, TitleKey: DC 23 59 B3 11
LBA: 1048601, Filename: VTS_01_3.VOB, TitleKey: DC 23 59 B3 11
LBA: 1572735, Filename: VTS_01_4.VOB, TitleKey: DC 23 59 B3 11
LBA: 2096885, Filename: VTS_01_5.VOB, TitleKey: DC 23 59 B3 11

Any idea why does AnyDVD detect a standalone VIDEO_TS key ("657721003d") on this disc?

PlayerKey[1]: 01 AF E3 12 80
DecryptedDiscKey[020]: 2E 90 FE F7 19
LBA:     295, Filename: VIDEO_TS.BUP, No TitleKey
LBA:     276, Filename: VIDEO_TS.IFO, No TitleKey
LBA:  536967, Filename: VTS_01_0.BUP, No TitleKey
LBA:     298, Filename: VTS_01_0.IFO, No TitleKey
LBA:     308, Filename: VTS_01_1.VOB, TitleKey: EE 8B 96 03 C1
LBA:  524500, Filename: VTS_01_2.VOB, TitleKey: EE 8B 96 03 C1

This is the BNG0804_3 disc, it also has VIDEO_TS.BUP and VIDEO_TS.IFO, but AnyDVD doesn't detect any VIDEO_TS keys on it.

1,909

And another example from wiggy2k (http://forum.redump.org/topic/22786/dvd … ega-japan/):

https://i.imgur.com/PrJG0p8.png

PlayerKey[1]: 01 AF E3 12 80
DecryptedDiscKey[020]: 2E 90 FE F6 FE
LBA:     341, Filename: VIDEO_TS.BUP, No TitleKey
LBA:     278, Filename: VIDEO_TS.IFO, No TitleKey
LBA:     284, Filename: VIDEO_TS.VOB, No TitleKey
LBA:  884369, Filename: VTS_01_0.BUP, No TitleKey
LBA:     347, Filename: VTS_01_0.IFO, No TitleKey
LBA:     366, Filename: VTS_01_0.VOB, TitleKey: EE 8B 94 CB 41
LBA:     423, Filename: VTS_01_1.VOB, TitleKey: EE 8B 94 CB 41
LBA:  524625, Filename: VTS_01_2.VOB, TitleKey: EE 8B 94 CB 41

VIDEO_TS.VOB exists here as a file, but AnyDVD detects its key as 90d1e6ff74 and CSS.exe says "No TitleKey".

wiggy2k says the VIDEO_TS.VOB file is straight copyable without errors, for other 3 it says the sectors are encrypted - so the VIDEO_TS.VOB is unprotected and AnyDVD lies?

1,910

sarami wrote:
Maddog wrote:

I have an LG USB DVD (GP65NB60 model)
When I run it I get this message:

How about other drive and other DVD?

I have the exact same error message, using 20190531, 20190610 and 20190612 versions.
with PX-716SA and SH-222AB drives, tested with 2 DVD (NAMJ-00002 and Gpara DVD Magazine vol. 0, both pending submissions).

Saturn Database {-} Retro Deals search engine that helps you find stuff (plextor drives, games, etc.) easily on eBay {-} My Redump Logs

1,911 (edited by sarami 2019-06-13 03:42:16)

LoStraniero91 wrote:

what kind of protection is "Sysiphus"?

I don't know. It seems BurnOut can detect it.

        position = InStr(FileContent, "V SUHPISYS", CompareMethod.Binary)
        If position Then
            position -= 1
            If FileContent.Substring(position + 10, 3) = "DVD" Then
                Return "Sysiphus DVD " & GetSysiphusVersion(file, position)
            Else
                Return "Sysiphus " & GetSysiphusVersion(file, position)
            End If
        End If
F1ReB4LL wrote:

VIDEO_TS.VOB exists here as a file, but AnyDVD detects its key as 90d1e6ff74 and CSS.exe says "No TitleKey".

http://www.mediafire.com/file/q5b8c94jv … st.7z/file
added: checking VIDEO_TS directory. Btw DVDDecrypter can also output TitleKey.


F1ReB4LL wrote:

wiggy2k says the VIDEO_TS.VOB file is straight copyable without errors, for other 3 it says the sectors are encrypted - so the VIDEO_TS.VOB is unprotected and AnyDVD lies?

You can use /c flag.

        /c      Log Copyright Management Information

This flag outputs in _disc.txt whether sector is protected or not like this.

LBA[000291, 0x00123]: No protected sector
LBA[000292, 0x00124]: No protected sector
LBA[000293, 0x00125]: No protected sector
LBA[000294, 0x00126]: No protected sector
LBA[000295, 0x00127]: CSS or CPPM doesn't exist in this sector, no copying is permitted
LBA[000296, 0x00128]: CSS or CPPM doesn't exist in this sector, no copying is permitted
LBA[000297, 0x00129]: CSS or CPPM doesn't exist in this sector, no copying is permitted
LBA[000298, 0x0012a]: CSS or CPPM doesn't exist in this sector, no copying is permitted

No need to all dumping, please check only the LBA of VIDEO_TS.VOB.


Madroms wrote:

I have the exact same error message

Weird...

lpCmd: a8, 00, 00, 00, 00, 10, 00, 00, 00, 01, 00, 00

This command is clearly correct.

1,912

BurnOut is kind of junk, did you try ProtectionID ?

Plextor PX-760A 1.07 (+30) : Plextor PX-716SA 1.11 (+30) : Plextor PX-W5224A 1.04 (+30) : Plextor PX-W4824 1.07 (+30) : Plextor PX-W4012TA 1.07 (+98) : Plextor PX-W1610TA (+99) : Plextor PX-W1210TA 1.10 (+99) : Lite-On LTR-48246S (+6) : Lite-On LTR-52246S (+6) : Lite-On LH-20A1H LL0DN (+6) : BenQ DW1655 BCIB (+618) : ASUS DRW-2014L1 1.02 (+6) : Yamaha CRW-F1 (+733) : Optiarc SA-7290H5 1H44 (+48) : ASUS BW-16D1HT 3.02 (+6)

1,913

sarami wrote:
Madroms wrote:

I have the exact same error message

Weird...

lpCmd: a8, 00, 00, 00, 00, 10, 00, 00, 00, 01, 00, 00

This command is clearly correct.

could the error be due to the OS used ?
I am on Win7 64bit. It could depend on a command called.

[F:ExecReadDisc][L:150] GetLastError: 87, The parameter is incorrect.
=> Which parameter is incorrect ? My C++ skills are too limited to well understand the source code as I didn't code for years.
Is there a way to help you to ID the problem ? (having a compiled CSS.exe that logs everything, etc.)

Saturn Database {-} Retro Deals search engine that helps you find stuff (plextor drives, games, etc.) easily on eBay {-} My Redump Logs

Nexy wrote:

BurnOut is kind of junk, did you try ProtectionID ?

Both DIC's internal protection scanner (which is taken from BurnOut AFAIK) and ProtectionID says it's protected by Sysiphus. There's a page about this game in GameCopyWorld, I'm sharing the link only if it won't cause any problem.

Salviamo la cultura videoludica italiana.

1,915

http://www.mediafire.com/file/q5b8c94jv … st.7z/file
- fixed: TimeOutValue was not set

LoStraniero91 wrote:

DIC's internal protection scanner (which is taken from BurnOut AFAIK)

It's DICUI, not DIC.

LoStraniero91 wrote:

There's a page about this game in GameCopyWorld, I'm sharing the link only if it won't cause any problem.

I found some titles. http://search.gametarget.eu:81/data/gcw … h=Sysiphus

But the detailed page doesn't exist about this protection. https://www.cdmediaworld.com/hardware/c … ions.shtml

1,916 (edited by LoStraniero91 2019-06-13 22:38:06)

My bad sarami.
But here's some good news.
I've tried again the game on XP SP3 and it worked. Here's how I've made this dump:
1) With DIC+Plextor without C2, when the drive reached the ring section, I've ejected the disc, waited for the drive to get near the end of the disc, then reinserted it and it made the bin/cue;
2) Using CDArchive with an OptiArc 7230 (I will buy 7280 some time later), I've tried to read as much sectors as possible (there are actually two rings, or maybe the disc is a bit scratched, I don't know, errors always occur after the ring sections);
3) The game worked with my PC with XP SP3 installed, with a VM with XP SP3 installed on my main PC with Windows 10 and natively with Windows 10 by executing the game with XP SP3 compatibility mode.

Still, I want to make some more testing before submitting it, even it the game works without asking for the original CD!

Salviamo la cultura videoludica italiana.

1,917

Regarding CSS:

- Isn't the Player Key stored in the player, not on the disc? Do we need to add it into the disc entries?
- Is it possible to read not only the 409 Disc Keys, but also the Authentication Key?
- PlayerKey[1], DecryptedDiscKey[020] - what do "1" and "020" mean? Can these numbers differ?

Also, have you checked the DVDs without CSS but with modified structure, hacked TOC, etc? Does DIC read them fine?

1,918

sarami wrote:

http://www.mediafire.com/file/q5b8c94jv … st.7z/file
- fixed: TimeOutValue was not set

Good news on my side. smile
With this release, there's no longer any error message in the console window (I am tempted to say DOS to make F1ReB4LL correct me again, xD) and the output seems to contain title keys normally.
Attaching 3 consecutive runs for each of the 2 discs, results are identical in all 3 runs.

Post's attachments

Dothack Dramatic DVD.zip 6.07 kb, 2 downloads since 2019-06-14 

Dothack Historical Disc.zip 6.18 kb, 2 downloads since 2019-06-14 

You don't have the permssions to download the attachments of this post.

1,919

F1ReB4LL wrote:

Any idea why does AnyDVD detect a standalone VIDEO_TS key ("657721003d") on this disc?

Tried DVD Decrypter, also no "657721003d":

I 20:59:59 DVD Decrypter Version 3.5.4.0 started!
I 20:59:59 Professional (6.1, Build 7601 : Service Pack 1)
I 20:59:59 Initialising SPTI...
I 20:59:59 Searching for SCSI / ATAPI devices...
I 21:00:10 Found 1 DVD-ROM, 1 DVD±RW and 2 DVD-RAM/±RWs!
I 21:00:23 Operation Started!
I 21:00:23 Source Device: [2:0:0] PIONEER DVD-RW  DVR-218L 1.02 (G:) (Unknown (0x0B))
I 21:00:23 Source Media Type: DVD-ROM
I 21:00:23 Source Media Region Code: 2
I 21:00:23 Source Media Copyright Protection System Type: CSS/CPPM
I 21:00:23 Source Media Implementation Identifier: Sonic Scenarist 3.1
I 21:00:23 Destination Folder: Q:\PSVITA_PV_69M\VIDEO_TS\
I 21:00:23 File Splitting: By File
I 21:00:23 Detect Mastering Errors: No
I 21:00:23 Multi Angle Processing: No
I 21:00:23 Remove Macrovision Protection: Yes
I 21:00:23 Stream Processing: No
I 21:00:23 Copying VIDEO_TS.IFO... (LBA: 279 - 281) - KEY: N/A
I 21:00:23 Copying VIDEO_TS.BUP... (LBA: 298 - 300) - KEY: N/A
I 21:00:23 Copying VTS_01_0.IFO... (LBA: 301 - 323) - KEY: N/A
I 21:00:23 Decrypting VTS_01_1.VOB... (LBA: 324 - 524450) - KEY: DC 23 59 B3 11
I 21:01:58 Decrypting VTS_01_2.VOB... (LBA: 524451 - 1048600) - KEY: DC 23 59 B3 11
I 21:03:09 Decrypting VTS_01_3.VOB... (LBA: 1048601 - 1572734) - KEY: DC 23 59 B3 11
I 21:04:09 Decrypting VTS_01_4.VOB... (LBA: 1572735 - 2096884) - KEY: DC 23 59 B3 11
I 21:05:01 Decrypting VTS_01_5.VOB... (LBA: 2096885 - 2109425) - KEY: DC 23 59 B3 11
I 21:05:02 Copying VTS_01_0.BUP... (LBA: 2109490 - 2109512) - KEY: N/A
I 21:05:02 Operation Successfully Completed! - Duration: 00:04:39
I 21:05:02 Average Read Rate: 15 119 KB/s (10.9x) - Maximum Read Rate: 22 325 KB/s (16.1x)

Btw, it also checks for IFO and BUP keys, so, don't know again, maybe that is needed, afterall?

Also tried to dump it with the "/c" key, tired to wait after 1.5 hours and stopped, but you can check the log, if interested.

A question about the last CSS.exe:

LBA:     261, Filename: VIDEO_TS, No TitleKey
LBA:     324, Filename: VTS_01_1.VOB, TitleKey: DC 23 59 B3 11
LBA:  524451, Filename: VTS_01_2.VOB, TitleKey: DC 23 59 B3 11
LBA: 1048601, Filename: VTS_01_3.VOB, TitleKey: DC 23 59 B3 11
LBA: 1572735, Filename: VTS_01_4.VOB, TitleKey: DC 23 59 B3 11
LBA: 2096885, Filename: VTS_01_5.VOB, TitleKey: DC 23 59 B3 11

Why does it check for the VIDEO_TS directory key? Can the directory itself be encrypted? I think it looks quite weird.

Post's attachments

dump_disc.rar 838.64 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

1,920

sarami do you still have the build you posted on the 12th of may or so, with the removed hashing updates to console.

Plextor PX-760A 1.07 (+30) : Plextor PX-716SA 1.11 (+30) : Plextor PX-W5224A 1.04 (+30) : Plextor PX-W4824 1.07 (+30) : Plextor PX-W4012TA 1.07 (+98) : Plextor PX-W1610TA (+99) : Plextor PX-W1210TA 1.10 (+99) : Lite-On LTR-48246S (+6) : Lite-On LTR-52246S (+6) : Lite-On LH-20A1H LL0DN (+6) : BenQ DW1655 BCIB (+618) : ASUS DRW-2014L1 1.02 (+6) : Yamaha CRW-F1 (+733) : Optiarc SA-7290H5 1H44 (+48) : ASUS BW-16D1HT 3.02 (+6)

1,921

F1ReB4LL wrote:

Regarding CSS:

- Isn't the Player Key stored in the player, not on the disc? Do we need to add it into the disc entries?
- Is it possible to read not only the 409 Disc Keys, but also the Authentication Key?
- PlayerKey[1], DecryptedDiscKey[020] - what do "1" and "020" mean? Can these numbers differ?

Also, have you checked the DVDs without CSS but with modified structure, hacked TOC, etc? Does DIC read them fine?

- Player Key stores in the player. But some keys are already known. we need not to add it into the disc entries, I think.

extern const unsigned char g_PlayerKeys[][6] = {
    // from mplayer:
    {0x01, 0xaf, 0xe3, 0x12, 0x80},
    {0x12, 0x11, 0xca, 0x04, 0x3b},
    {0x14, 0x0c, 0x9e, 0xd0, 0x09},
         :

- There is not Authentication Key. I found an understandable article about CSS https://www.extremetech.com/computing/5 … part-iii/3

- PlayerKey[1] is g_PlayerKeys[1][6]. g_PlayerKeys[1][6] is 0x01, 0xaf, 0xe3, 0x12, 0x80.
  DecryptedDiscKey[020] is the 20th key of AllDiscKey decrypted by the "PlayerKey".

And I've not checked yet the DVDs without CSS etc, but DIC executes CSS.exe only when the disc has "CopyrightProtectionType: CSS/CPPM".

F1ReB4LL wrote:

Btw, it also checks for IFO and BUP keys, so, don't know again, maybe that is needed, afterall?

I don't know it, too. But perhaps IFO and BUP don't have keys.

F1ReB4LL wrote:

Why does it check for the VIDEO_TS directory key? Can the directory itself be encrypted? I think it looks quite weird.

Because AnyDVD report the key of VIDEO_TS. I wanted to deny that VIDEO_TS dir have a key. I remove this checking in the next uploading.

Nexy wrote:

sarami do you still have the build you posted on the 12th of may or so, with the removed hashing updates to console.

I don't have it anymore.

1,922

OK, please disregard the weak sector comments about SafeDISC for now. I had these 2 discs buffed and they now read correctly despite not having any visual defects before hand. So could you revert what you did there, and also restore the hashing until a command line version of RapidCRC is made by someone. Thank you.

Plextor PX-760A 1.07 (+30) : Plextor PX-716SA 1.11 (+30) : Plextor PX-W5224A 1.04 (+30) : Plextor PX-W4824 1.07 (+30) : Plextor PX-W4012TA 1.07 (+98) : Plextor PX-W1610TA (+99) : Plextor PX-W1210TA 1.10 (+99) : Lite-On LTR-48246S (+6) : Lite-On LTR-52246S (+6) : Lite-On LH-20A1H LL0DN (+6) : BenQ DW1655 BCIB (+618) : ASUS DRW-2014L1 1.02 (+6) : Yamaha CRW-F1 (+733) : Optiarc SA-7290H5 1H44 (+48) : ASUS BW-16D1HT 3.02 (+6)

1,923

sarami wrote:

- There is not Authentication Key. I found an understandable article about CSS https://www.extremetech.com/computing/5 … part-iii/3

There are three keys on the disc: the authentication key and the disc key, which are located in the lead in, and the title key, which is located in the sector header.

https://cs.stanford.edu/people/eroberts … ss/css.htm

Also, the Russian wiki claims the authentification key is the "disk key encrypted by itself", but this article claims these are different:

The Disk-Key. This key is used to encrypt the title key, and is itself decrypted by using the
playerkey. A table of the disk key encrypted under all the 409 playerkeys is stored on a hidden
sector of the DVD. In that sector, the disk key encrypted under the disk key is also stored. The
reason to do this, is so the player can verify, that it got the right disk key.
...
The Authentication key, which is used as the “secret” key for the mutual authentication process

http://www.daimi.au.dk/ivan/reports2009/DVDEncr.pdf

Authentication Key: This is a ‘secret’ string of characters that is used in the mutual authentication process. This lets the player know it is permitted to decrypt the content.

http://www.hometheaterinfo.com/css_encryption.htm

Still not very clear to me smile

1,924

Nexy wrote:

and also restore the hashing until a command line version of RapidCRC is made by someone.

OK, it was comment out now. And CSS.exe was updated. http://www.mediafire.com/file/eq80y20l9 … st.7z/file


CSS Authentication function

bool CDVDSession::Authenticate()
{
    if (m_session == DVD_END_ALL_SESSIONS) {
        return false;
    }

    BYTE Challenge[10], Key[10];

    for (BYTE i = 0; i < 10; i++) {
        Challenge[i] = i;
    }

    if (!SendKey(DvdChallengeKey, Challenge)) {
        return false;
    }

    if (!ReadKey(DvdBusKey1, Key)) {
        return false;
    }

    int varient = -1;

    for (int i = 31; i >= 0; i--) {
        BYTE KeyCheck[5];
        CSSkey1(i, Challenge, KeyCheck);
        if (!memcmp(KeyCheck, Key, 5)) {
            varient = i;
        }
    }

    if (!ReadKey(DvdChallengeKey, Challenge)) {
        return false;
    }

    CSSkey2(varient, Challenge, &Key[5]);

    if (!SendKey(DvdBusKey2, &Key[5])) {
        return false;
    }

    CSSbuskey(varient, Key, m_SessionKey);

    return true;
}

There isn't "Authenticate" in the word except fuction name. ChallengeKey, BusKey1, BusKey2 and SessionKey are all ramdom as extremetech.com says. Even if "Authentication key" exists, I don't know how to get it now.

1,925

http://forum.redump.org/topic/22567/ss- … gether-us/ -- this disc has a confirmed sub desync, but the recent DIC doesn't create the 'subs indexes' set of files (actually, the tracks are the same for both TOC and sub indexes, but the gaps in cue differ).