The Network Security. Org

I wrote yesterday about the HDCP/HDMI technology that Hollywood wants to use to restrict the availability of very high-def TV content. Today I want to go under the hood, explaining how the key part of HDCP, the handshake, works. I’ll leave out some mathematical niceties to simplify the explanation; full details are in a 2001 paper by Crosby et al.Suppose you connect an HDMI-compliant next-gen DVD player to an HDMI-compliant TV, and you try to play a disc. Before sending its highest-res digital video to the TV, the player will insist on doing an HDCP handshake. The purpose of the handshake is for the two devices to authenticate each other, that is, to verify that the other device is an authorized HDCP device, and to compute a secret key, known to both devices, that can be used to encrypt the video as it is passed across the HDMI cable.

Every new HDCP device is given two things: a secret vector, and an addition rule. The secret vector is a sequence of 40 secret numbers that the device is not supposed to reveal to anybody. The addition rule, which is not a secret, describes a way of adding up numbers selected from a vector. Both the secret vector and the addition rule are assigned by HDCP’s central authority. (I like to imagine that the central authority occupies an undersea command center worthy of Doctor Evil, but it’s probably just a nondescript office suite in Burbank.) Freedom to Tinker » Blog Archive » Making and Breaking HDCP Handshakes

From around the Web

• Gmail to drop IE6 support this year
• Older IE Versions Maintain Sizable Market Share Despite Security Concerns
• Google Chrome 4 Bolsters Browser Security with New Features
• 10 Reasons Why Microsoft Should Have Discussed Security At CES
• How three vendors screwed up USB stick security
• 94 more secret Windows shortcuts
• Facebook CEO: Privacy Not the Social Norm
• More flash drive firms warn of security flaw; NIST investigates
• The ultimate God Mode list: 39 secret Windows 7 shortcuts
• Microsoft, Adobe prep critical security patches
• Mozilla fixes upgrade flaw in Firefox
• Chrome grabs market share from IE and Firefox, passes Safari
• Facebook enhances privacy settings
• Windows 7 tricks: 20 top tips and tweaks
• The ABCs of securing your Windows netbook