Decrypting HDCP-Protected Video Streams using Reconfigurable Hardware

Benno Lomb, Tim Güneysu

In­ter­na­tio­nal Con­fe­rence on Re­Con­Fi­gura­ble Com­pu­ting and FPGAs, Re­Con­Fig 2011, Can­cun, Me­xi­co, No­vem­ber 30-De­cem­ber 2, 2011, to ap­pe­ar.


Abstract

High-bandwidth Digital Content Protection (HDCP) was established in 1999 as standard to protect digital video content against unauthorized replication. In this work, we demonstrate how an attacker can efficiently implement all its cryptographic mechanisms and the required video processing in reconfigurable hardware to successfully circumvent the HDCP protection. Our demonstration set-up uses a low-cost Xilinx Spartan-6 LX45 FPGA available on Digilent’s Atlys Development Board which also provides all required connectors for video input and output. Using this set-up for less than US$ 250, we show that we can (a) successfully connect any non-compliant monitor to a HDCPprotected video source, (b) extract all secret session keys established during authentication and (c) decrypt single-link video streams with a resolution of 720p or 1080i in real-time.

tags: