Attempts by MPAA and AACS-LA to prevent the distribution of a cryptographic key (09F911029D74E35BD84156C5635688C0) for content protection systems for HD-DVD and Blu-Ray
Internet users began circulating versions of this image, calling it the Free Speech Flag, in blog posts on dozens of websites and as user avatars on forums such as Digg. The first fifteen bytes of the 09 F9 key are contained in the RGB encoding of the five colors, with each color providing three bytes of the key. The byte "C0" is appended in the lower right corner.
In response to widespread Internet postings of the key, the AACS LA issued various press statements, praising those websites that complied with their requests for acting in a "responsible manner" and warning that "legal and technical tools" were adapting to the situation.
The controversy was further escalated in early May 2007, when aggregate news site Digg received a DMCA cease and desist notice and then removed numerous articles on the matter and banned users reposting the information.
This sparked what some describe as a digital revolt or "cyber-riot", in which users posted and spread the key on Digg, and throughout the Internet en masse, thereby leading to a Streisand effect. The AACS LA described this situation as an "interesting new twist".
Commercial HD DVDs and Blu-ray discs integrate copy protection technology specified by the AACS LA. There are several interlocking encryption mechanisms, such that cracking one part of the system does not necessarily crack other parts. Therefore, the "09 F9" key is only one of many parts that are needed to play a disc on an unlicensed player.
AACS can be used to revoke a key of a specific playback device, after it is known to have been compromised, as it has for WinDVD. The compromised players can still be used to view old discs, but not newer releases without encryption keys for the compromised players. If other players are then cracked, further revocation would lead to legitimate users of compromised players being forced to upgrade or replace their player software or firmware in order to view new discs. Each playback device comes with a binary tree of secret device and processing keys. The processing key in this tree, a requirement to play the AACS encrypted discs, is selected based on the device key and the information on the disc to be played. As such, a processing key such as the "09 F9" key is not revoked, but newly produced discs cause the playback devices to select a different valid processing key to decrypt the discs.
Timeline of AACS cracking
On December 26, 2006, a person using the alias muslix64 published a utility named BackupHDDVD and its source code on the DVD decryption forum at the website Doom9. BackupHDDVD can be used to decrypt AACS protected content once one knows the encryption key. muslix64 claimed to have found title and volume keys in main memory while playing HD DVDs using a software player, and that finding them is not difficult.
On January 1, 2007, muslix64 published a new version of the program, with volume key support. On January 12, 2007, other forum members detailed how to find other title and volume keys, stating they had also found the keys of several movies in RAM while running WinDVD.
On or about January 13, a title key was posted on pastebin.com in the form of a riddle, which was solved by entering terms into the Google search engine. By converting these results to hexadecimal, a correct key could be formed. Later that day, the first cracked HD DVD, Serenity, was uploaded on a private torrent tracker. The AACS LA confirmed on January 26 that the title keys on certain HD DVDs had been published without authorization.
Doom9.org forum user arnezami found and published the "09 F9" AACS processing key on February 11:
Nothing was hacked, cracked or even reverse engineered btw: I only had to watch the "show" in my own memory. No debugger was used, no binaries changed.
This key is not specific to any playback device or DVD title. Doom9.org forum user jx6bpm claimed on March 4 to have revealed CyberLink's PowerDVD's key, and that it was the key in use by AnyDVD.
The AACS LA announced on April 16 that it had revoked the decryption keys associated with certain software high-definition DVD players, which will not be able to decrypt AACS encrypted disks mastered after April 23, without an update of the software.
On May 17, one week before any discs with the updated processing key had reached retail, claims were reported of the new keys having been retrieved from a preview disc of The Matrix Trilogy. On May 23, the key 45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2 was posted on Edward Felten's Freedom to Tinker Blog and confirmed a week later by arnezami on Doom9 as the new processing key (MKB v3).
In August, two new processing keys were posted:
F1 90 A1 E8 17 8D 80 64 34 94 39 4F 80 31 D9 C8, for MKB v4, and
7A 5F 8A 09 F8 33 F7 22 1B D4 1F A6 4C 9C 79 33, which appeared to work with MKB v6, MKB v7 and MKB v8 discs.
In March, two additional processing keys were posted:
C8 72 94 CE 84 F9 CC EB 59 84 B5 47 EE C1 8D 66, for MKB v9
45 2F 6E 40 3C DF 10 71 4E 41 DF AA 25 7D 31 3F, for MKB v10
In April, MKBv12 and MKBv13 was found.
97 39 40 BB 18 0E 83 26 62 31 EE 59 6C EF 65 B2, for MKB v12 and MKB v13
In September, more processing keys were posted.
58 EB DA DF 88 DC C9 33 04 CB BE DB 9E E0 95 F6, for MKBv14-MKBv16
46 5F A8 BE 82 85 09 01 4D 05 D2 FC CE FF 35 D2, for MKBv17
AD 5E 54 6C 46 D7 2D C0 83 AE B5 68 69 24 E1 B3, for MKBv18-MKBv19
53 FC E7 8E CD 35 2D A5 0D 52 6B 5E E3 D3 D9 6B, for MKBv20-MKBv21
Screenshot of the Digg front page during the user revolt; all stories are related to the HD DVD key.
As early as April 17, 2007, AACS LA had issued DMCA violation notices, sent by Charles S. Sims of Proskauer Rose. Following this, dozens of notices were sent to various websites hosted in the United States.
On May 1, 2007, in response to a DMCA demand letter, technology news site Digg began closing accounts and removing posts containing or alluding to the key. The Digg community reacted by creating a flood of posts containing the key, many using creative ways of disguising the key, by semi-directly or indirectly inserting the number, such as in song or images (either representing the digits pictorially or directly representing bytes from the key as colors) or on merchandise. At one point, Digg's "entire homepage was covered with links to the HD-DVD code or anti-Digg references." Eventually the Digg administrators reversed their position, with founder Kevin Rose stating:
But now, after seeing hundreds of stories and reading thousands of comments, you've made it clear. You'd rather see Digg go down fighting than bow down to a bigger company. We hear you, and effective immediately we won't delete stories or comments containing the code and will deal with whatever the consequences might be.
Lawyers and other representatives of the entertainment industry, including Michael Ayers, an attorney for Toshiba Corporation, expressed surprise at Digg's decision, but suggested that a suit aimed at Digg might merely spread the information more widely.
If you try to stick up for what you have a legal right to do, and you're somewhat worse off because of it, that's an interesting concept.
In a response to the events occurring on Digg and the call to "Spread this number", the key was rapidly posted to thousands of pages, blogs and wikis across the Internet. The reaction was an example of the Streisand effect.
Intellectual property lawyer Douglas J. Sorocco noted, "People are getting creative. It shows the futility of trying to stop this. Once the information is out there, cease-and-desist letters are going to infuriate this community more." Outside the Internet and the mass media, the key has appeared in or on T-shirts, poetry, songs and music videos, illustrations and other graphic artworks, tattoos and body art, and comic strips.
On Tuesday afternoon, May 1, 2007, a Google search for the key returned 9,410 results, while the same search the next morning returned nearly 300,000 results. On Friday, the BBC reported that a search on Google shows almost 700,000 pages have published the key, despite the fact that on April 17, the AACS LA sent a DMCA notice to Google, demanding that Google stop returning any results for searches for the key.
Widespread news coverage included speculation on the development of user-driven websites, the legal liability of running a user-driven website, the perception of acceptance of DRM, the failure as a business model of "secrecy based businesses ... in every aspect" in the Internet era, and the harm an industry can cause itself with harshly-perceived legal action.
Until the Digg community shows as much fervor in attacking intellectual piracy as attacking the companies that are legitimately defending their property, well, we do not want to be promoting the site by using the "Digg It" feature.
Media coverage initially avoided quoting the key itself. However, several US-based news sources have run stories containing the key, quoting its use on Digg,
though none are known to have received DMCA notices as a result. Later reports have discussed this, quoting the key.Current TV broadcast the key during a Google Current story on the Digg incident on May 3, 2007, displaying it in full on screen for several seconds and placing the story on the station website.
Wikipedia, on May 1, 2007, locked out the page named for the number "to prevent the former secret from being posted again. The page on HD DVD was locked, too, to keep out The Number." This action was later reversed. No one has been arrested or charged for finding or publishing the original key.
AACS LA reaction
On May 7, 2007, the AACS LA announced on its website that it had "requested the removal solely of illegal circumvention tools, including encryption keys, from a number of web sites", and that it had "not requested the removal or deletion of any ... discussion or commentary". The statement continued, "AACS LA is encouraged by the cooperation it has received thus far from the numerous web sites that have chosen to address their legal obligations in a responsible manner."BBC News had earlier quoted an AACS executive saying that bloggers "crossed the line", that AACS was looking at "legal and technical tools" to confront those who published the key, and that the events involving Digg were an "interesting new twist".
^Thompson, Jeff (August 13, 2011). "AACS encryption key". Jeff Thompson. Archived from the original on September 24, 2015. Retrieved September 24, 2015. An example of this is the so-called 'Free Speech Flag', seen above.
^Read as: "thirteen undecillion, two hundred and fifty-six decillion, two hundred and seventy-eight nonillion, eight hundred and eighty-seven octillion, nine hundred and eighty-nine septillion, four hundred and fifty-seven sextillion, six hundred and fifty-one quintillion, eighteen quadrillion, eight hundred and sixty-five trillion, nine-hundred and one billion, four hundred and one million, seven hundred and four thousand, six hundred and forty"