ID
VAR-200111-0010
CVE
CVE-2001-0903
TITLE
Intel HDCP Authentication Key Linear Correlation Vulnerability
Trust: 0.6
DESCRIPTION
Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication. Intel's High-bandwidth Digital Content Protection (HDCP) is a specification for authentication and encryption of multimedia streams. Content encryption and authentication of a playback device are based on a public/private key pair. Authentication is accomplished by a linear combination of private key values, based on the public key. As a direct result, being able to express an arbitrary public key as a linear combination of known public/private key pairs allows an attacker to authenticate as the arbitrary device. This results in a large number of possible exploits, with varying degrees of computation required. As an example, an attacker able to eavesdrop on an encrypted stream may compute the shared secret, and view the decrypted content. Although a computationally efficient algorithm has not yet been published, it may also be possible to create new, valid keys that are a linear combination of known values. Currently this may be done by enumerating all possible well formed public keys, and testing for validity
Trust: 1.26
AFFECTED PRODUCTS
| vendor: | intel | model: | high-bandwidth digital content protection | scope: | eq | version: | 1.0 | Trust: 1.9 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | NVD-CWE-Other | Trust: 1.0 |
THREAT TYPE
remote
Trust: 0.6
TYPE
Design Error
Trust: 0.9
EXTERNAL IDS
| db: | BID | id: | 3558 | Trust: 2.0 |
| db: | NVD | id: | CVE-2001-0903 | Trust: 1.7 |
| db: | CNNVD | id: | CNNVD-200111-020 | Trust: 0.7 |
| db: | BUGTRAQ | id: | 20011120 A CRYPTANALYSIS OF THE HIGH-BANDWIDTH DIGITAL CONTENT PROTECTION SYSTEM | Trust: 0.6 |
| db: | XF | id: | 7612 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-3710 | Trust: 0.1 |
REFERENCES
| url: | http://www.securityfocus.com/bid/3558 | Trust: 1.7 |
| url: | http://www.iss.net/security_center/static/7612.php | Trust: 1.7 |
| url: | http://nunce.org/hdcp/hdcp111901.htm | Trust: 1.4 |
| url: | http://marc.info/?l=bugtraq&m=100626641009560&w=2 | Trust: 1.0 |
| url: | http://marc.theaimsgroup.com/?l=bugtraq&m=100626641009560&w=2 | Trust: 0.6 |
| url: | http://www.cryptome.org/hdcp-weakness.htm | Trust: 0.3 |
| url: | http://www.digital-cp.com/ | Trust: 0.3 |
| url: | http://marc.info/?l=bugtraq&m=100626641009560&w=2 | Trust: 0.1 |
CREDITS
Discovered independantly by Scott Crosby, Ian Goldberg, Robert Johnson, Dawn Song and David Wagner and presented at the ACM-CCS8 DRM workshop on November 5, 2001.
Trust: 0.9
SOURCES
| db: | VULHUB | id: | VHN-3710 |
| db: | BID | id: | 3558 |
| db: | CNNVD | id: | CNNVD-200111-020 |
| db: | NVD | id: | CVE-2001-0903 |
LAST UPDATE DATE
2025-04-03T22:40:46.079000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-3710 | date: | 2016-10-18T00:00:00 |
| db: | BID | id: | 3558 | date: | 2001-11-05T00:00:00 |
| db: | CNNVD | id: | CNNVD-200111-020 | date: | 2006-08-09T00:00:00 |
| db: | NVD | id: | CVE-2001-0903 | date: | 2025-04-03T01:03:51.193 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-3710 | date: | 2001-11-20T00:00:00 |
| db: | BID | id: | 3558 | date: | 2001-11-05T00:00:00 |
| db: | CNNVD | id: | CNNVD-200111-020 | date: | 2001-11-20T00:00:00 |
| db: | NVD | id: | CVE-2001-0903 | date: | 2001-11-20T05:00:00 |