HDCP 2.2规范详解与复制挑战

5星 · 超过95%的资源需积分: 38 187 浏览量更新于2024-07-26 1 收藏 1.11MB PDF 举报

"HDCP 2.2 规范文档" 标题所指的"HDCP 2.2 spec"是High-bandwidth Digital Content Protection（高带宽数字内容保护）的版本2.2规范，这是一个旨在防止未授权复制数字媒体的技术标准。HDCP主要应用于高清视频和音频信号的传输，例如在电视、蓝光播放器、游戏机和电脑显示器等设备之间的连接。描述中的“容易复制参考”可能意味着文档提供了关于如何遵循HDCP 2.2协议来确保内容安全传输的信息，同时也可能包含了可能被利用的漏洞或弱点的详细说明，供开发者和安全研究人员参考，以提高系统的安全性。标签"hdcp spec"直接指向了这个技术规范的核心内容。文档的部分内容展示了HDCP 2.2规范的发布日期（2012年10月16日）以及由Digital Content Protection LLC发布的接口独立适应性规范。它提醒读者，该文档提供“原样”服务，不包含任何明示或暗示的保修，包括但不限于对适销性、非侵权、特定用途适用性的保修。英特尔公司对其规格中的信息使用所引起的侵权责任概不负责，并且不授予任何知识产权许可。此外，文档中描述的加密功能可能受到美国、日本和其他政府的出口管制。 HDCP 2.2规范的关键改进包括增强的安全性，以应对不断发展的破解技术。它增加了新的密钥交换协议和加密算法，提高了内容的保密性。例如，HDCP 2.2引入了更复杂的密钥管理系统，允许设备之间进行更安全的身份验证，同时限制了旧版本HDCP设备的兼容性，以防止通过旧设备泄露加密内容。实施HDCP 2.2规范时，硬件和软件开发者需要考虑多个方面，如设备之间的认证流程、密钥管理、信号加密和解密机制，以及与不同类型的传输媒介（如HDMI、DisplayPort等）的接口兼容性。同时，开发者还需要遵守相关的出口法规，以确保产品在全球范围内的合法合规性。知识产权声明指出，此规范的实施可能涉及到第三方的产权，因此在开发过程中需尊重并遵守所有相关产权规定。 HDCP 2.2规范是数字媒体保护领域的重要组成部分，对于设计和实现能够安全传输高清内容的电子设备来说，理解和遵循这一规范至关重要。同时，文档的提供旨在帮助开发者了解并应对潜在的安全挑战，以创建一个更加安全的数字媒体生态系统。

HDCP Interface Independent Adaptation Specification October 16, 2012

Revision 2.2 Digital Content Protection LLC

Page 13 of 78

Figure 2.2. Authentication and Key Exchange (With Stored k

)

The HDCP Transmitter

• Initiates authentication by sending the initiation message, AKE_Init, containing a 64-bit

pseudo-random value (r

• Sends AKE_Transmitter_Info message to the HDCP Receiver before sending either

AKE_No_Stored_km or AKE_Stored_km message to the receiver.

Note: The HDCP Transmitter may use mechanisms outside the scope of the HDCP

Specification to determine whether the HDCP Receiver is an HDCP 2.0-compliant

Device. If the HDCP Transmitter determines, using mechanisms outside the scope of the

HDCP Specification, that the HDCP Receiver is an HDCP 2.0-compliant Device, it need

not send the AKE_Transmitter_Info message to the HDCP Receiver.

• Receives AKE_Send_Cert from the receiver containing REPEATER and cert

values.

REPEATER indicates whether the connected receiver is an HDCP Repeater

• Receives AKE_Receiver_Info message from the receiver if the receiver is not an HDCP

2.0-compliant Device. If AKE_Receiver_Info message is not received within 100 ms

from the transmission of AKE_Transmitter_Info message, it indicates to the HDCP

Transmitter that the attached HDCP Receiver is an HDCP 2.0-compliant Device.

• Extracts Receiver ID from cert

HDCP Interface Independent Adaptation Specification October 16, 2012

Revision 2.2 Digital Content Protection LLC

Page 14 of 78

o If the HDCP Transmitter does not have a 128-bit Master Key k

stored

corresponding to the Receiver ID (See Section 2.2.1)

 Verifies the signature on the certificate using kpub

dcp

. Failure of

signature verification constitutes an authentication failure and the

HDCP Transmitter aborts the authentication protocol.

 Generates a pseudo-random 128-bit Master Key k

. Encrypts k

with

kpub

(km)) and sends AKE_No_Stored_km message to the

receiver containing the 1024-bit E

kpub

(km). RSAES-OAEP encryption

scheme must be used as defined by PKCS #1 V2.1: RSA

Cryptography Standard. SHA-256 is the underlying hash function.

The mask generation function used is MGF1 which uses SHA-256 as

its underlying hash function.

 Verifies integrity of the System Renewability Message (SRM). It does

this by checking the signature of the SRM using kpub

dcp

. Failure of

this integrity check constitutes an authentication failure and causes the

HDCP Transmitter to abort authentication protocol.

The top-level HDCP Transmitter checks to see if the Receiver ID of

the connected device is found in the revocation list. If the Receiver ID

of the connected HDCP Device is found in the revocation list,

authentication fails and the authentication protocol is aborted. SRM

integrity check and revocation check are performed only by the top-

level HDCP Transmitter.

 Receives AKE_Send_rrx message from the receiver containing the

64-bit pseudo-random value (r

 Performs key derivation as explained in Section 2.7 to generate 256-

bit k

. k

= dkey

|| dkey

, where dkey

and dkey

are derived keys

generated when ctr = 0 and ctr = 1 respectively. dkey

and dkey

are in

big-endian order.

 Computes 256-bit H = HMAC-SHA256(r

XOR REPEATER ||

AKE_Receiver_Info.VERSION || AKE_Receiver_Info.

RECEIVER_CAPABILITY_MASK ||

AKE_Transmitter_Info.VERSION || AKE_Transmitter_Info.

TRANSMITTER_CAPABILITY_MASK, k

) if the Protocol

Descriptor field in cert

is equal to 0x1. HMAC-SHA256 is computed

over r

XOR REPEATER concatenated with

AKE_Receiver_Info.VERSION, AKE_Receiver_Info.

RECEIVER_CAPABILITY_MASK,

AKE_Transmitter_Info.VERSION and AKE_Transmitter_Info.

TRANSMITTER_CAPABILITY_MASK and the key used for

HMAC is k

. REPEATER is XORed with the least significant byte of

. All values are in big-endian order.

Computes 256-bit H = HMAC-SHA256(r

XOR REPEATER, k

) if

the Protocol Descriptor field in cert

is equal to 0x0. HMAC-SHA256

is computed over r

XOR REPEATER and the key used for HMAC is

. REPEATER is XORed with the least significant byte of r

HDCP Interface Independent Adaptation Specification October 16, 2012

Revision 2.2 Digital Content Protection LLC

Page 15 of 78

 Receives AKE_Send_H_prime message from the receiver containing

the 256-bit H’. This message must be received within one second after

sending E

kpub

(km) (AKE_No_Stored_km) to the receiver.

Authentication fails and the authentication protocol is aborted if the

message is not received within one second or there is a mismatch

between H and H’.

o If the HDCP Transmitter has a 128-bit Master Key k

stored corresponding to

the Receiver ID (See Section 2.2.1)

 Sends AKE_Stored_km message to the receiver with the 128-bit

) and the 128-bit m corresponding to the Receiver ID of the

HDCP Receiver

 Verifies integrity of the System Renewability Message (SRM). It does

this by checking the signature of the SRM using kpub

dcp

. Failure of

this integrity check constitutes an authentication failure and causes the

HDCP Transmitter to abort the authentication protocol.

The top-level HDCP Transmitter checks to see if the Receiver ID of

the connected device is found in the revocation list. If the Receiver ID

of the connected HDCP Device is found in the revocation list,

authentication fails and the authentication protocol is aborted.

 Receives AKE_Send_rrx message from the receiver containing the

64-bit pseudo-random value (r

) from the receiver.

 Performs key derivation as explained in Section 2.7 to generate 256-

bit k

. k

= dkey

|| dkey

, where dkey

and dkey

are derived keys

generated when ctr = 0 and ctr = 1 respectively. dkey

and dkey

are in

big-endian order.

 Computes 256-bit H = HMAC-SHA256(r

XOR REPEATER ||

AKE_Receiver_Info.VERSION || AKE_Receiver_Info.

RECEIVER_CAPABILITY_MASK ||

AKE_Transmitter_Info.VERSION || AKE_Transmitter_Info.

TRANSMITTER_CAPABILITY_MASK, k

) if the Protocol

Descriptor field in cert

is equal to 0x1. HMAC-SHA256 is computed

over r

XOR REPEATER concatenated with

AKE_Receiver_Info.VERSION, AKE_Receiver_Info.

RECEIVER_CAPABILITY_MASK,

AKE_Transmitter_Info.VERSION and AKE_Transmitter_Info.

TRANSMITTER_CAPABILITY_MASK and the key used for

HMAC is k

. REPEATER is XORed with the least significant byte of

. All values are in big-endian order.

Computes 256-bit H = HMAC-SHA256(r

XOR REPEATER, k

) if

the Protocol Descriptor field in cert

is equal to 0x0. HMAC-SHA256

is computed over r

XOR REPEATER and the key used for HMAC is

. REPEATER is XORed with the least significant byte of r

 Receives AKE_Send_H_prime message from the receiver containing

the 256-bit H’. This message must be received within 200 ms after

sending the AKE_Stored_km message to the receiver. Authentication

HDCP Interface Independent Adaptation Specification October 16, 2012

Revision 2.2 Digital Content Protection LLC

Page 16 of 78

fails and the authentication protocol is aborted if the message is not

received within 200 ms or there is a mismatch between H and H’.

The HDCP Receiver

• Sends AKE_Send_Cert message in response to AKE_Init

• If AKE_Transmitter_Info message is received, sends AKE_Receiver_Info message to

the transmitter after sending the AKE_Send_Cert message to the transmitter.

• Generates and sends 64-bit r

as part of the AKE_Send_rrx message immediately after

receiving either AKE_No_Stored_km or AKE_Stored_km message from the transmitter.

o If AKE_No_Stored_km is received, the HDCP Receiver

 Decrypts k

with kpriv

using RSAES-OAEP decryption scheme.

 Performs key derivation as explained in Section 2.7 to generate 256-

bit k

. k

= dkey

|| dkey

, where dkey

and dkey

are derived keys

generated when ctr = 0 and ctr = 1 respectively. dkey

and dkey

are in

big-endian order.

 Computes H’ = HMAC-SHA256(r

XOR REPEATER ||

AKE_Receiver_Info.VERSION || AKE_Receiver_Info.

RECEIVER_CAPABILITY_MASK ||

AKE_Transmitter_Info.VERSION || AKE_Transmitter_Info.

TRANSMITTER_CAPABILITY_MASK, k

) if the Protocol

Descriptor field in its public key certificate, cert

, is equal to 0x1 and

the HDCP Transmitter is not HDCP2.0-compliant and is not HDCP

2.1-compliant (i.e. AKE_Transmitter_Info.VERSION is not equal to

0x01).

Computes H’ = HMAC-SHA256(r

XOR REPEATER, k

) if the

Protocol Descriptor field in its public key certificate, cert

, is equal to

0x0 or the HDCP Transmitter is HDCP2.0-compliant or is HDCP 2.1-

compliant (i.e. AKE_ Transmitter _Info.VERSION is equal to 0x01).

The HDCP Receiver sends AKE_Send_H_prime message

immediately after computation of H’ to ensure that the message is

received by the transmitter within the specified one second timeout at

the transmitter.

o If AKE_Stored_km is received, the HDCP Receiver

 Computes 128-bit k

= SHA-256(kpriv

)[127:0]

 Decrypts E

) using AES with the received m as input and k

as key

in to the AES module as illustrated in Figure 2.3 to derive k

 Performs key derivation as explained in Section 2.7 to generate 256-

bit k

. k

= dkey

|| dkey

, where dkey

and dkey

are derived keys

generated when ctr = 0 and ctr = 1 respectively. dkey

and dkey

are in

big-endian order.

剩余77页未读，继续阅读

gumshoe621

粉丝: 0
资源: 4

HDCP 2.2规范详解与复制挑战

HDCP协议简要

HDCP 2.1 spec

HDCP认证过程.rar

hdcp1.4和2.2有什么区别

hdcp key 2.2

fpga HDMI2.0

hdcp spec pdf

hdmi对应hdcp版本

it6801 datasheet

vivado hdmi2.0

最新资源