Decrypted Title Keys and Volume Unique Key for BackupHDDVD to Bypass HD-DVD AACS DRM解密标题键和货量的独特的关键backuphddvd绕过HD - DVD的气冷式的DRM

Hackers in doom9.org has managed to find a way to decrypt, extract and retrieve the HD-DVD disc encrypted volume unique key that can be used to decode the title keys for the high definition video contents, and also the title keys which each video title will has one and been used to decode the matching encrypted HD video files EVOB (Enhanced Video Object) stored on the disk.黑客在doom9.org已设法找到一种方法，解密，提取和检索的HD - DVD光盘加密货量独特的关键，可用于解码的标题键为高清晰度视频内容，也标题键，其中每部影片标题将会有一个和被用来解码匹配加密的高清视频文件evob （增强的视频对象）存储在磁盘上。 The volume unique key (VUK) and title keys (TK, normally same for all ) are the important missing element that enable货量独特的关键（ vuk ）和标题密钥（传统知识，通常同时针对所有语言）是重要的失踪元素，使 BackupHDDVD backuphddvd to work properly, and fill in the final piece for the proper way to break, crack, decrypt and copy or backup to other media or storage medium a copy-protected commercial HD DVD disks.正常工作，并填写在最后的一块为适当的方式打破，裂纹，解密和复制或备份到其他媒体或存储介质复制受保护的商业HD DVD光碟上。

Apparently to extract the decrypted volume key and title keys, you have to use显然提取解密的音量键和标题钥匙，你必须使用 InterVideo WinDVD 8的InterVideo WinDVD 8 , and not ，而不是 CyberLink PowerDVD讯powerdvd as previously believed which used by the original author Muslix64 in his正如先前认为，其中所使用的原始作者muslix64在他的 video demo视频演示 of ripping and copying of AACS DRM-protected HD video contents on HD-DVD disc, due to the fact that WinDVD cannot play .EVO file.对存和复印气冷式DRM保护的高清视频内容，高清DVD光盘，由于事实上的WinDVD无法发挥。 evo档案。 By dumping WinDVD’s memory and tracing WinDVD’s code, you can find the title keys for each video title or track found on the HD-DVD together with the unique volume key for the particular batch of disks.倾倒的WinDVD的记忆和追查的WinDVD的代码，您可以找到标题为每个键的视频标题或轨道上发现的HD - DVD加上独特的音量键为，特别是一批磁盘。 The keys can then be populate and enter into BackupHDDVD KEYDB.cfg (previously known as TKDB.cfg) to rip the HD movie EVO to hard disk.按键便可以填充和进入backuphddvd keydb.cfg （以前称为tkdb.cfg ）撷取房署电影evo到硬盘。

Currently only Japanese version of InterVideo WinDVD 8 can play HD-DVD high definition video or movie contents.目前只有日文版的InterVideo WinDVD 8可以发挥HD - DVD的高清晰度视频或电影的内容。 If you own an English version of InterVideo WinDVD 8 Gold or Platinum, you need to purchase an upgrade costs $26 for HD DVD and Blu-ray playback support.如果您拥有的英语版的InterVideo WinDVD 8黄金或白金，你需要购买升级费用26元，为HD DVD和蓝光播放的支持。 However, with this upgrade HD pack, it’s unsure of whether the vulnerability that allows users to hack the keys from memory has been patched or continue to left open and exist.然而，与此升级房署包，它的不确定是否有漏洞，允许用户哈克的钥匙从内存中已修补或继续留下开放和存在的。

To crack the volume key and title keys yourself, you will also need打击的音量键和标题钥匙自己，您还需要 WinHex winhex . 。 With WinHex, dump the memory of the WinDVD while playing the HD-DVD, and search for VPLST000.XPL in WinDVD’s memory (4th occurrence) and from that offset:与winhex ，转储记忆的的WinDVD播放的HD - DVD ，并搜索vplst000.xpl在的WinDVD的记忆体（第四发生）和抵消：

+0×0181 is the Decrypted Title Keys table ○ × 0181 ，是解密的标题Keys表
+0×1571 is the Volume Unique Key ○ × 1571是货量独特的关键

or或

+0×13C0 is the Volume Unique keys after the location of the 2nd Title Key 0 × 13c0是货量独特的钥匙后的位置对第二标题的关键

The offsets may vary from system to system and disc to disc, or even video to video.偏移可能会有所不同，从制度，体制和光盘，光盘，甚至是视频录像。 In case you’re having trouble finding the keys, search for the second occurrence of the following text:在情况下，您遇到困难，找到了钥匙，搜索，为第二次发生的下列文字：

file:///required/文件： / / /需要/

Then scroll down until you a lot of paired 00 digits, which represents the TK (Title Keys) block.然后向下滚动，直到您了很多成对00位数字，代表传统知识（职称键）座。 Further down will be the VK (Volume Key).进一步下降将成为VK的（音量键） 。

Or search for “00 20 00 00 00 3F 00 00 00 80 00 00 00″ with the key after it.或寻找在“ ○○二○ ○○ ○○ ○○ 3楼○○ ○○ ○○八○ ○○ ○○ ○○ ”的关键后。

Once you manage to get the VK or TK, input the value into KEYDB.cfg (previously TKDB.cfg) file.一旦你设法获得VK的或传统知识，投入的价值，到keydb.cfg （以前tkdb.cfg ）文件。 To recap, KEYDB.cfg has the following format:要回顾一下， keydb.cfg具有以下格式：

0000000000000000000000000000000000000000=My movie 2 |T|00/00/00| 0000000000000000000000000000000000000000 =我的电影2 |吨| 00/00/00 |
14-00000000000000000000000000000000| 2-00000000000000000000000000000000 14-00000000000000000000000000000000 | 2-00000000000000000000000000000000

Note: Suppose to be in one line, wrapped to maintain readability. 注意：假设要在同一行，包裹，以维持可读性。

Field 1 is the SHA1 Hash value of the VTKF000.AACS file on your HDDVD disk.字段1是sha1哈希值的vtkf000.aacs文件在您的hddvd磁盘。 To get the hash value or checksum of VTKF0000.AACS file, use any of the hash calculator listed in this得到的哈希值或校验和vtkf0000.aacs文件，使用任何哈希计算器列在此 calculate hash tutorial计算哈希补习 . 。

After field 1, the string is followed by a “=” sign.后场的一，字符串，然后由“ = ”的迹象。 Then followed by field 2, which is the Movie Title.随后字段2 ，这是电影片名。

After field 2, the line is tabbed to the right, and followed by a pipe “|” delimiter.后场二，线带标签，以正确的，其次是管道“ | ”分隔符号。 Then it’s field 3 which specifies the key type where V is for Volume Unique Key and T is for Title Key.然后它的外地三，订明主要类型如V是为货量独特的关键和T是为标题的关键。 Another pipe “|” delimiter after this.另一管道“ | ”分隔符后。 The VK or VUK feature is only available from BackupHDDVD v1.00 onwards.该VK的或vuk的特点是仅适用于从backuphddvd v1.00起。

Field 4 is the file creation date.外地四是文件的创建日期。 This field is informational only, and is ignored by the program.这一领域是仅具参考作用，是忽视了该计划。 It should be the creation date of the media file on the disk.这应成为创建日期的媒体文件在磁盘上。 Seperated to the last field again with a pipe.分离到最后场再次与管道。

In field 5, it’s where you enter the volume key or the title keys that are cracked and decoded from the memory leak.在五场，这是您输入的音量键或键的标题是破获和解码从内存泄漏。 You can input a variable number of Title Keys, each separated by a pipe “|” delimiter or just a single volume key.您可以输入一个变量的数目标题键，每个分隔的管道“ | ”分隔符，或只是一个单一的音量键。 Since version 1.00, you can use either title or volume keys, depending on what value you defined in field 3 in the KEYDB.cfg file.自版本1.00 ，您可以使用标题或量的关键，取决于什么价值，您所定义的在外地3个在keydb.cfg档案。

If you’re using the title keys, the syntax format of field 5 will like what shown above, where it’sa key number followed by the key value such as below:如果您使用的标题键，语法格式领域的5会喜欢什么如上所示，这是关键的数目，其次是核心价值，例如如下：

12-08A3DC61910280F2… 12 08a3dc61910280f2 …

If you’re using volume key or VLU, there is no key number and the dash (-) in front.如果您使用的音量键或vlu ，是没有关键的数目和破折号（ -）在前线。 BackupHDDVD comes with a sample KEYDB.cfg that contains some entries for your reference. backuphddvd附带抽样keydb.cfg包含一些参赛作品，供您参考。 Key values are 128 bits long, so it will be 16 bytes, or 32 hexadecimal characters long.关键值是128位长，所以将16个字节，或32个十六进制字符长。

If you are too lazy to decrypt and hack the HD-DVD title keys or volume license key yourself, or still has no idea on how to do it, some Samaritans have done the dirty job.如果你是懒得解密和哈克的HD - DVD标题键或批量许可证密钥自己，或仍然不知道怎样做，一些撒玛利亚会也做了肮脏的工作。 Here are some of the Volume Unique Keys of the HD-DVD movies released in USA这里是一些货量独特的钥匙的HD - DVD电影发表在美国 (removed due to DMCA complain): （被剔除由于DMCA的抱怨） ：

12 Monkeys, 16 Blocks, Aeon Flux, Apollo 13, Apollo 13 (EUR), Batman Begins, Casablanca, Casino, Charlie And The Chocolate Factory, Chronicles of Riddick, Constantine, CSI NY (GER), Dune, Enter the Dragon, Equilibrium (Jap), Excalibur, Fear & Loathing Las Vegas, Friday Night Lights, Full Metal Jacket, GoodFellas, GrandPrix, Happy Gilmore, Harry Potter GOF (UK), Hulk, Jarhead, Jarhead (EUR), Jet Li’s Fearless, King Kong, King Kong (EUR), Kiss Kiss Bang Bang, Kiss Kiss Bang Bang (EUR), Lady in the Water, Last Samurai, Lethal Weapon, Lucky Number Slevin, Miami Vice, Mission: Impossible, Mission: Impossible (EUR), Mission: Impossible 2, Mission: Impossible 2 (EUR), Mission: Impossible 3 (Disc 1), Mission: Impossible 3 (Disc 1) (EUR), Mission: Impossible 3 (Disc 2), Mission: Impossible 3 (Disc 2) (EUR), Nacho Libre, Phantom of the Opera, Pitch Black, Poseidon, Ray, Red Dragon, Sahara, Scorpion King, Serenity, Serenity (EUR), Sky Captain and the World of Tomorrow, Sleepy Hollow, Slither, Spy Game, Superman: The Movie, Superman II: Donner Cut, SuperMan Returns, Swordfish, Syriana, Syriana (EUR), Terminator 3, The Adventures of Robin Hood, The Deer Hunter, The Fugutive, The Interpreter, The Italian Job, The Lake House, The Matador, The Mummy, The Mummy Returns, The Perfect Storm, The Pianist (uk), The Polar Express (EUR), The Thing, Total Recall (fr), TrainingDay, Troy, U-571, Unforgiven, Unleashed (USA), V for Vendetta, V For Vendetta (EUR), Van Helsing, WaterWorld, We Were Soldiers, World Trade Center 12只猴子， 16座，永旺通量，阿波罗13号，阿波罗13号（欧元） ，蝙蝠侠，卡萨布兰卡，赌场，查理和巧克力工厂，方志的里迪克，君士坦丁，倡议纽约州（德国） ，沙丘，进入龙，平衡（ jap ） ，剑，恐惧与厌恶，拉斯维加斯，周五晚灯，充分金属外套，盗亦有道， grandprix ，高兴吉尔摩，哈利波特gof （英国） ，绿巨人，锅盖头，锅盖头（欧元） ，李连杰的无畏无惧，景香港，金刚（欧元） ，吻吻嘭嘭，吻吻嘭嘭（欧元） ，夫人在水中，最后的武士，致命武器，幸运号码slevin ，迈阿密风云，使命：不可能，使命：不可能（欧元） ，使命：不可能的二，使命：不可能2 （欧元） ，使命：不可能3 （光盘1 ） ，使命：不可能3 （光盘1 ） （单位：欧元） ，使命：不可能3 （光盘2 ） ，使命：不可能3 （光盘2 ） （欧元） ， nacho libre ，歌声魅影，音高黑色，波塞冬，射线，红龙，西撒哈拉，毒蝎王，宁静，宁静（欧元） ，天空上尉和明日世界，沉睡的空心， slither ，间谍游戏，超人：电影，超人二：唐纳削减，超人的回报，旗鱼，辛瑞纳，辛瑞纳（欧元） ，终结者3 ，冒险罗宾汉，鹿猎人， fugutive ，口译，意大利的就业，湖内务，斗牛士，木乃伊，木乃伊的回报，完美风暴，钢琴家（英国） ，极地特快（欧元） ，这件事，总记得（法语区） ， trainingday ，特洛伊， U型571 ， unforgiven ，发动（美国） ， V怪客， V怪客（欧元） ，范海辛，水上，我们的士兵，世界贸易中心

The list of the decrypted and decoded volume keys are increasing everyday, visit名单解密和解码钥匙货量增加，每天的访问 Doom9.org thread doom9.org线程 for the latest update and volume key of the new titles.有关最新的更新和音量键的新冠军。 You can simply copy and paste all the movie titles VUK or VK and put them into KEYDB.cfg, and you can now use BackupHDDVD to rip or back up your HD movie to your hard disk.您可以简单地复制和粘贴的所有电影片名vuk或VK的，把他们纳入keydb.cfg ，现在您可以使用backuphddvd撷取或备份您的高清晰电影，到您的硬盘。 But one word of caution, the backup EVOB generated will take up tens of GBs of your hard disk space.但一个字谨慎，备份evob产生将采取了数以万计的GBS的您的硬盘空间。

The only consent now is the唯一的同意，现在是 ACCS LA空运货物清关系统香格里拉 authority may ignite the content revocation, although they can only revoke physical optical drives, software player hosts on the PC and HD-DVD content, but unable to revoke volume or title keys.管理局可点燃的内容撤销，虽然他们只可以撤销物理光学驱动器，软件播放器的主机PC和HD - DVD的内容，但无法撤销的数量或标题键。 Revocation info (Host Revocation List HRL and Drive Revocation List DRL) from the Media Key Block (MKB) stored on the disc, stamped with a version number.撤销信息（主持人撤销清单hrl和驱动器撤销清单迪士尼线）从媒体的关键块（ mkb ）存储在光盘上，加盖的版本号码。 Before any HD EVO file is played back the revocation lists that are stored on the HDDVD drive flash ROM or NVRAM and your PC are checked and updated with the information from the HD-DVD disc if it has a later version.之前，任何房屋署evo文件是发挥回撤销清单是储存在该hddvd驱动器的Flash ROM或NVRAM中和您的电脑进行检查和更新的资料由高清DVD光盘，如果它有一个更新的版本。 If it’s content revocation, then it’s listed on CONTENT_REVOCATION_LIST.AACS file on the disc.如果它的内容撤销，那么它的上市对content_revocation_list.aacs文件的光盘。

This means that if you insert a AACS DRM copy protected HD-DVD or even Blu-Ray disc (likely to be new or future release) with updated revocation information that revokes your drive or your player, it will not play certified content (HDDVDs) anymore.这意味着如果您插入一个气冷式的DRM复制保护的HD - DVD或什至蓝光碟片（可能是新的或未来的版本）的最新资料，撤销撤销您的驱动器或您的播放器，它不会发挥认证的内容（ hddvds ）了。 The only workaround to play HD-DVDs again is to upgrade and update the product to higher and more secure version, which is re-certified by AACS with new Host Certificate and Host ID.唯一的可行方案，以发挥HD - DVD光盘再次是要升级换代产品，以更高的和更安全的版本，这是重新认证气冷式与新的主机证书和主机ID 。 However, in this case, you may not be able to get title and volume decryption keys anymore.然而，在这种情况下，您可能无法获得所有权和数量解密钥匙了。

Note: Links to注：链接 download BackupHDDVD here下载backuphddvd在这里 . 。

As BackupHDDVD is based on Java, you may face the following problem:作为backuphddvd是基于Java的，您可能会遇到下列问题：

An unexpected error has been detected by HotSpot Virtual Machine:一个意外的错误已发现的热点，虚拟机：
# Internal Error (4E41544956452C4F4F4B55500E43505000D5), pid=3704, tid=3304 ＃内部错误（ 4e41544956452c4f4f4b55500e43505000d5 ） ， PID控制= 3704 ，工贸署= 3304
# Java VM: Java HotSpot(TM) Server VM (1.5.0_10-b03 mixed mode) ＃ Java虚拟机： Java的热点（技术备忘录）服务器的越南船民（ 1.5.0_10 - b03混合模式）

In this case, try to uninstall all Java editions and version from your computer, download the Java Runtime Environment version 5 from在这种情况下，尝试卸载所有的Java版本和版本从您的电脑，下载Java运行环境，从第5版 http://www.java.com/en/ . 。 If you download JDK 6.0 from如果您下载的JDK 6.0 http://java.sun.com/javase/downloads/index.jsp , you need to rename the folder name after installation of Java JDK. ，您需要重新命名的文件夹名称，安装后的Java的JDK 。

Original path and folder name:原来的路径和文件夹名称：

C:\Program Files\Java\jdk1.6.0\jre\bin\server为C ： \程序文件\华\ jdk1.6.0 \ JRE的\斌\服务器

Rename or copy to the following path and folder name:重新命名或复制到以下路径和文件夹名称：

C:\Program Files\Java\jre1.6.0\bin\server为C ： \程序文件\华\ jre1.6.0 \斌\服务器

IMPORTANT : This is a machine translated page which is provided "as is" without warranty. 重要说明 ：这是一个机器翻译网页是“按原样”提供的担保。 Machine translation may be difficult to understand.机器翻译可能很难理解。 Please refer to请参阅 original English article英文原版的文章 whenever possible.只要有可能。

Share and contribute or get technical support and help at分享和贡献，或取得技术的支持和帮助，在 My Digital Life Forums 我的数字生活论坛 . 。

Related Articles相关文章

• Easy Way to Remember Master Processing Key to Crack HD-DVD and Blu-Ray DRM简单的方法来记住掌握处理的关键打击HD - DVD和蓝光的DRM
• Crack, Decrypt and Copy HD DVD AACS DRM Protected Movies with BackupHDDVD裂纹，解密和复制HD DVD的气冷式DRM保护电影backuphddvd
• Reset DRM Licenses Settings in Windows Media Player重置的DRM许可设置在Windows Media Player
• Windows Vista Volume Activation 2.0 Guide, Faq & Technical Guidance Free Download Windows Vista批量激活2.0指南，常见问题解答＆技术指导，免费下载
• ORA-02449 Oracle Drop Table Error库存- 02449甲骨文下拉表错误
• Users Self-Leak Windows Vista Home Premium and Ultimate OEM Product Key用户自我泄漏Windows Vista家庭高级版和终极的OEM产品的关键
• Cool USB Multimedia Remote Control凉爽的USB多媒体远程控制
• How to Copy Encrypted or Copy-Protected DVD如何复制加密或版权保护的DVD
• Trick to Play WiFi Shared Tracks and Songs Unlimited Times Bypass DRM Limit in Zune伎俩发挥的WiFi共享路轨和歌曲无限次绕道的DRM限制，在发行日期
• Unable to Activate Windows XP and Vista with COA OEM Key Online Without Phone Activation无法激活Windows XP和Vista与农委会的OEM关键线上没有电话激活

This entry was posted on Monday, January 15th, 2007 at 1:32 am and is filed under 此项目被张贴在周一， 2007年1月15日在上午01时32分，并提交下 Audio & Video 音像 . 。 You can follow any responses to this entry through the 您可以按照任何的反应，此项目通过 RSS 2.0 2.0 feed. 喂养。 You can 您可以 leave a response 留下的回应 , or ，或 trackback Trackback跟踪 from your own site. 从你自己的网站。