Media Key Block

Blu-Ray or HD-DVD have as content the encrypted data (usually video), the Volume ID (VID), the Encrypted Title Key(s) and the MKB. The MKB is also found encrypted in the disc to prevent it from being extracted off the disc and being manipulated and/or reproduced by another non authorized device.

Process to obtain the Media key, from the MKB and the Device Keys

The reproduction device will have available its own keys, uniques for each model, called Device Keys. These keys are conceded by the AACS organization. In the moment of the reproduction, one of these keys will decrypt the MKB contained on the disc and as a result of this process we obtain the Media key.

The Media key is combined with the VID (Volume ID) and as a result we obtain the Volume Unique Key (${\displaystyle K_{vu}}$). With the ${\displaystyle K_{vu}}$ we are able to decrypt the Encrypted Title Key and obtain the Title keys which finally allows to decrypt the content of the disc and view it.[2]

This way the system can prevent contents from being viewed in devices that have not been authorized. Therefore, the system allows modifying the MKB in future relaunch of a determined content in order to select the devices in which this content can be viewed.

Media Key Block structure

Even though it seems a simple mechanism the MKB key which is found in the physical support of the disc follows a complex structure. The MKB is distributed in blocks that contain the version of the Media key, the list of devices that have been revoked, a field to authenticate the MKB, and other fields that specify parameters corresponding to the decrypting algorithm and define the structure of the own Media Key and also the Media key itself.

The MKB itself is found inside the field Media Key Data Record and has a variable length but it is always a multiple of 4 bytes.[3]

Many consumer associations have complained against this system since it can lead to a situation where physical devices cannot reproduce contents even though they do not infringe any intellectual property. This situation can be achieved either by trying to reproduce some content in old devices, therefore not certified by the AACS, or because the device model has been disallowed by AACS, as a result all the owners of that device model will not be able to view contents encrypted with the MKB.

This situation has become even worse with the recent publication in multiple web sites of the Media Key, that is, the key that allows decrypting the Volume ID[4] and at the same time, the encrypted content, without the need of using a certified device by the AACS or a valid MKB. This is especially critical because nowadays the Volume ID is the same in all the Blu-ray or HD-DVDs with equal content.

• AACS web page.
• Guide to understand AACS.
• Introduction and Common Cryptographic Elements. Rev. 0.91.
• AACS Technical Overview. 7/2004.