What is DRM? Digital Rights Management is: –From Richard Stallman, President of the FSF: ”The motive for DRM schemes is to increase profits for those who impose them, but their profit is a side issue when millions of people’s freedom is at stake; desire for profit, though not wrong in itself, cannot justify denying the public control over its technology. Defending freedom means thwarting DRM.” –From Dan Glickman, MPAA: "Content owners use DRMs because it provides casual, honest users with guidelines for using and consuming content based on the usage rights that were acquired. Without the use of DRMs, honest consumers would have no guidelines and might eventually come to totally disregard copyright and therefore become a pirate, resulting in great harm to content creators," he said. DRM uses technology to force consumers to adhere to policy set forth by the MPAA or RIAA

VIDEO Interchangeability.avi

Does DRM protect against “piracy” No. –All current DRM mechanisms are simply inconvenient to very technical users. –“Rip. Mix. Burn.” Burn, Rip, Share So why have DRM at all? –The DMCA criminalizes efforts to remove or subvert copyright protection.

Examples of DRM DVD Content Scrambling System (CSS) –Remember DeCSS? Windows Vista Protected Media extensions –Protected processes, protected paths (PVP) Apple’s FairPlay Sony XCP rootkit BluRay and HD DVD uses Advanced Access Content System (AACS) Napster, “but as soon as the user misses a payment, the service renders all of the downloaded music unusable” All use very similar technology with some trade secret to make sure their software won’t work with competitors.

How DRM is Implemented Based on the same cryptography principles that keep your credit card safe, keep your files secure, and fight terrorism (and tyranny ). DRM is just a special case of encryption and key management. Apple’s FairPlay DRM

FairPlay DRM Apple iTunes Music Store iTunes User: You Auth ID: 09f d74-e35b Authorized Machines: 1 09f d74-e35b Step 1: You create an iTunes account. This adds your machine to the list of ‘Authorized Machines’ on Apple’s servers.

FairPlay DRM Apple iTunes Music Store iTunes User: You Auth ID: 09f d74-e35b Authorized Machines: 1 09f d74-e35b Step 2: You buy today’s #1 single (Kanye West – Stronger) Step 3: Apple encrypts your song with a ‘Master Key’ Step 4: Apple generates a new ‘User Key’ Step 5: The user key is used to encrypt the master key. This is then attached to the song you just bought. A copy of the user key is stored on the Apple servers and also sent to your authorized copy of iTunes Master KeyUser Key

FairPlay DRM Apple iTunes Music Store iTunes User: You Auth ID: 09f d74-e35b Authorized Machines: 1 09f d74-e35b How do you listen to your songs? iTunes takes it’s copy of the user key... Decrypts the master key found in the audio file... Decrypts the song you bought… And plays the unencrypted audio file. Master KeyUser Key

Authorized Machines: 1 09f d74-e35b 2 d841-56c c Authorized Machines: 1 09f d74-e35b 2 d841-56c c0 3 dddd-dddd-dddd-dddd 4 aaaa-aaaa-aaaa-aaaa 5 bbbb-bbbb-bbbb-bbbb FairPlay DRM Apple iTunes Music Store iTunes User: You Auth ID: 09f d74-e35b Let’s say you add another authorized machine…. This new copy of iTunes will get a copy of your authorized keys. When you reach the limit of authorized machines, you must de-authorize old ones to add new ones. Master KeyUser Key iTunes User: You Auth ID: d841-56c c0

Getting rid of FairPlay DRM QTFairUse - grabbed song data after it was unlocked and uncompressed by iTunes, and then dumped the raw stream into a large container file, requiring further processing afterward. Johansen wrote a second DRM crack for the open source VLC media player--and reused in PlayFair, Hymn, JHymn and other derivatives--intercepts unlocked but not yet uncompressed song files, creating a small, ready to play, unencrypted AAC file. Jon Johansen – DVD Jon PyMusique - a Linux client for the iTunes Store, pretends to be iTunes. It requested songs from Apple's servers and then downloaded the purchased songs without locking them, as iTunes would FairKeys - also pretends to be iTunes; it requests a user's keys from Apple's servers and then uses these keys to unlock existing purchased songs.