Tuesday, 10 July 2007

How secrecy fails.

09 F9 11 02
9D 74 E3 5B
D8 41 56 C5
63 56 88 C0

Let's pause to consider how the security model for HD-DVD failed. It failed because (as per Kerchoff's Principle), it was only as secure as the key embedded in every HD-DVD player. That key (which might coincidentally resemble the hexidecimal number I have randomly typed above), once discovered, was distributed ... widely. The structure of secrecy on the modern internet is such that if real demand exists for a secret, and it's as trvially easy to copy as this, then there simply isn't a secret any more. The fact that the demand was created in this case as part of a global, distributed effort to give the AACS-LA the finger after they acted like nimrods only makes it more interesting.

1 comment:

Michael said...

Meanwhile, via BoingBoing:

"Richard Doherty, well-known CE industry analyst, declared to a trade magazine that the BD+ DRM system about to be rolled out on all Blu Ray discs would not be hacked for 'likely 10 years.'"

Yup. Something like that.