High-bandwidth Digital Content Protection (HDCP) is a form of digital copy protection developed by Intel Corporation [1] to prevent copying of digital audio and video content as it travels across DisplayPort, Digital Visual Interface (DVI), High-Definition Multimedia Interface (HDMI), Gigabit Video Interface (GVIF), or Unified Display Interface (UDI) connections. HDCP does not address whether copying would be permitted by fair use laws. The specification is proprietary, and implementing HDCP requires a license.[2]
For DVI interfaces, HDCP is optional.[3][4]
HDCP is licensed by Digital Content Protection, LLC[5], a subsidiary of Intel. In addition to an annual fee, licensed adopters agree to the conditions set forth in the HDCP License Agreement.[6] For example, high-definition digital video sources must not transmit protected content to non-HDCP-compliant receivers. Additionally, DVD-Audio content is restricted to CD-audio quality or less[6] on non-HDCP-digital audio outputs (analog audio outputs have no quality limits). Licensed adopters cannot allow their devices to make copies of content, and must design their products in ways that "effectively frustrate attempts to defeat the content protection requirements."[6] The technology sometimes causes handshaking problems, especially with older high-definition displays.[7][8][9]
Contents |
HDCP's stated purpose is to protect high definition content during transmission from a source device to a display device. Three systems were developed to achieve that goal:[2]
Each HDCP-capable device has a unique set of keys; there are 40 keys, each 56 bits long. These keys are confidential and failure to keep them secret may be seen as a violation of the license agreement. For each set of values, a special public key called a KSV (Key Selection Vector) is created. Each KSV consists of 40 bits (one bit for each HDCP key), with exactly 20 bits set to 0 and 20 bits set to 1.
During the authentication process, both parties exchange their KSVs. Then each device adds (unsigned addition modulo 256) its own secret keys together according to a KSV received from another device. Depending on the order of the bits set to 1 in the KSV, a corresponding secret key is used in the addition, otherwise it is ignored. Keys and KSVs are generated in such a way that during this process both devices get the same 56-bit number as a result. That number is later used in the encryption process.
This key exchanging procedure is known as Blom's scheme.
Encryption is done by a stream cipher. Each decoded pixel is encrypted by applying an XOR operation with a 24-bit number produced by a generator. The HDCP specifications ensure constant updating of keys (after each encoded frame).
If a particular set of keys is compromised, the keys' corresponding KSV is put into a revocation list, which is written on newly-produced discs, examples of such discs include DVD and Blu-ray. Each revocation list is signed with a digital signature using the DSA; this is designed to prevent malicious users from revoking legitimate devices. During the authentication process, if the receiver's KSV is found by a transmitter in the revocation list, then the transmitter considers the receiver to be compromised and it fails to authenticate with the revoked device, and does not send protected content to the revoked device.
HDCP-protected systems may include three types of devices: sources, sinks, and repeaters. HDCP protects data as it is transmitted between each of these devices when they are connected via HDMI or other HDCP-protected digital interfaces. Each device contains one or more HDCP transmitters or receivers, or it may contain both receivers and transmitters. Sometimes HDCP and HDMI functionality are combined into a single transmitter or receiver chip.[10]
HDCP protects content using authentication and encryption. Before sending HDCP-protected data, the transmitting device initiates an authentication process to confirm that the receiver is authorized to receive the data. Once the receiver has been authenticated, the transmitter encrypts the data stream to prevent eavesdropping and sends it to the receiver.[10]
In the United States, the Federal Communications Commission approved HDCP as a "Digital Output Protection Technology" on August 4, 2004.[11] The FCC's Broadcast flag regulations, which were struck down by the United States Court of Appeals for the District of Columbia Circuit, would have required DRM technologies on all digital outputs from HDTV signal demodulators. Congress is still considering legislation that would implement something similar to the Broadcast Flag. The HDCP standard is more restrictive than the FCC's Digital Output Protection Technology requirement. HDCP bans compliant products from converting HDCP-restricted content to full-resolution analog form, presumably in an attempt to reduce the size of the analog hole.
On January 19, 2005, the European Information, Communications, and Consumer Electronics Technology Industry Associations (EICTA) announced that HDCP is a required component of the European "HD ready" label.[12]
Microsoft Windows Vista utilizes this technology in the context of computer graphics cards and monitors.[13][14]
Prior to HDCP, digital interfaces provided the same digital content without content protection between the player and display. As HDCP was introduced as a content protection standard, many non-HDCP-compliant devices were rendered unable to display HDCP-protected content unless fitted with a device to circumvent HDCP content protection, often referred to as HDCP strippers. These are devices that remove the HDCP information from the video signal, leaving the video playable on non-HDCP-compliant displays.[15]
Cryptanalysis researchers demonstrated flaws in HDCP for the first time in 2001, prior to its adoption in any commercial product. Scott Crosby of Carnegie Mellon University authored a paper with Ian Goldberg, Robert Johnson, Dawn Song, and David Wagner called "A Cryptanalysis of the High-bandwidth Digital Content Protection System". This paper was presented at ACM-CCS8 DRM Workshop on November 5, 2001.[16]
The authors conclude:
To break the Blom's scheme of HDCP, one needs a minimum of 39 device keys in order to reconstruct the secret symmetrical master matrix that has been used to compute all device keys.
Around the same time that Scott Crosby and co-authors were writing this paper, Niels Ferguson independently claimed to have broken the HDCP scheme, but he did not publish his research, citing legal concerns arising from the controversial Digital Millennium Copyright Act.[17]
The most well-known[citation needed] attack on HDCP is the conspiracy attack, where a number of devices are compromised and the information gathered is used to reproduce the private key of the central authority.
| HDCP revision | Supported interfaces |
|---|---|
| 1.0 | DVI |
| 1.1 | DVI, HDMI |
| 1.2 | DVI, HDMI |
| 1.3 | DVI, HDMI, UDI, GVIF, DP |
| 2.0 | [Interface Independent Adaptation, Any IP based interface, compressed or uncompressed] |
|
|||||||||||||||||||||||
stock | retire | vm
Why are we here?
All text is available under the terms of the GNU Free Documentation License
This page is cache of Wikipedia. History