Blu-ray

Blu-ray on PC: Play, Rip, Concerns, and LibreDrive

🚨 Caution
Attempting to open or decrypt a new Blu-ray disc can permanently impair the ability of the disc drive to play Blu-ray discs, including those that have previously worked with the drive, and this process is irreversible even by reflashing the firmware. Only proceed when you know what you’re doing, and you’re strongly recommended to read the Concerns and LibreDrive sections first.

Play with VLC

Install VLC along with the VLC Blu-ray plugin. For instance, on Arch Linux, install with:

sudo pacman -Syu vlc clv-plugin-bluray

On an existing installation of VLC, verify that the plugin is installed by going to Tools > Plugins and extensions > Plugins and searching for “bluray”.

Download the latest key database from http://fvonline-db.bplaced.net/

For Linux, place it in ~/.config/aacs/
For MacOS, place it in ~/Library/Preferences/aacs/
For Windows, place it in C:\ProgramData\aacs\

Download the AACS dynamic library corresponding to the OS from https://vlc-bluray.whoknowsmy.name/ or follow the guide at https://www.winxdvd.com/dvd-ripper/vlc-blu-ray.htm$^{\text{[unverified]}}$

For Linux, install libaacs using the package manager instead (e.g., sudo pacman -Syu libaacs)
For MaxOS, place it in /usr/local/lib/
For Windows, place it in the VLC installation directory (e.g., C:\Program Files\VideoLAN\VLC\)

Insert the Blu-ray disc into the disc drive. In VLC, go to Media > Open disc… > Disc. Under “Disc Selection”, choose “Blu-ray” and select the inserted disc under “Disc device”.

Change the region code by going to Tools > Preferences. Switch to “All” under Show settings. The option can be found at Input / Codecs > Access modules > Blu-ray > Region code.

MakeMKV can also act as a decryption engine and LibreDrive functionalities as a VLC integration, accessible at View > Preferences > Integration > VLC in MakeMKV. Refer to Rip with MakeMKV and LibreDrive for more information.

Rip with MakeMKV

MakeMKV is a commercial closed-source software that can convert the contents of Blu-ray discs into Matroska (.mkv) files. Download MakeMKV at https://www.makemkv.com/download/

MakeMKV is currently in beta. A free, rotating beta key can be obtained at https://forum.makemkv.com/forum/viewtopic.php?f=5&t=1053

To purchase a license, go to https://www.makemkv.com/buy/

Concerns

As mentioned at the very beginning, attempting to open or decrypt a new disc may make a disc drive unable to play any Blu-ray discs. That is the case for AACS-protected discs, and if the Media Key Block (MKB) of the new disc is of a version newer than the Host key/certificate (HC) or both the Device Keys (DK) and the Processing Keys (PK) in the key database downloaded in Play with VLC. The following is an oversimplified explanation of the process.

MKB     MKB
   \       \
DK -+-> PK -+-> MK
                  \
        HC -> VID -+-> VUK -> TK

Abbreviation	Description
MKB	Media Key Block (of the disc)
DK	Device Keys (of the player)
PK	Processing Keys
MK	Media Key
HC	Host key/certificate (of the player)
VID	Volume ID (of the disc)
VUK	Volume Unique Key (title specific)
TK	Title Key

The Title Key (TK) obtained at the end of this process is what’s needed to decrypt the actual media content. To implicitly disallow a compromised DK, a newly released disc can choose a PK that can’t be derived using the DK. Since DK are, to a large extent, not changing. Along with the fact that many discs share the same MKB, knowing a still-working PK can skip the DK part.

The more concerning part would be the HC: The disc drive contains a list of revoked HC. When a new disc with an MKB of version higher than all previously played disc is attempted to play or decrypt, this list on the drive gets updated. Any compromised HC, especially those available in public databases like the ones above, will likely be revoked and will no longer work on the specific drive. This process is not reversible, not even with reflashing the firmware. Until a still-working HC is made public, the drive is essentially blocked from accessing AACS-protected discs, with a few exceptions. For example, if the VUK of the disc is known, or if the disc drive can be run as a LibreDrive.

Knowing the VUK alone is enough for decrypting the media content. It cannot be revoked, and will work even when all known DK/PK/HC are disallowed/revoked. However, since the VUK is title-specific, a large database of VUK that includes the title you’re trying to watch is required, hence the large number of entries in the key database.

LibreDrive

LibreDrive is a mode of operation of a disc drive developed by MakeMKV, enabling compatible drives with compatible firmware versions to read raw data from the disc, hence ignoring AACS limitations. It works by updating the microcode in the volatile memory of the drive, hence will reset when the drive is turned off. This allows MakeMKV to rip new discs and possibly allow for playback with the MakeMKV integrations.

LibreDrive introduction: https://forum.makemkv.com/forum/viewtopic.php?t=18856

⚠️ Warning
As usual, firmware flashing comes with the risk of voiding the warranty and bricking the device.

Disc drives flashing guide: https://forum.makemkv.com/forum/viewtopic.php?f=16&t=19634

Flashing tool: https://forum.makemkv.com/forum/viewtopic.php?f=16&t=22896

Custom firmware pack with LibreDrive patches: https://forum.makemkv.com/forum/viewtopic.php?f=19&t=19113

It’s worth noting, however, LibreDrive does not touch the AACS code of the firmware, so it won’t prevent the drive from self-revoking HC.

References

https://wiki.archlinux.org/title/Blu-ray

https://www.reddit.com/r/makemkv/comments/1dleklc/cant_play_4k_uhd_in_vlc_media_player/

https://xreveal.com/AACS.html

https://blog.citp.princeton.edu/2007/02/15/aacs-tale-three-keys/

https://en.wikipedia.org/wiki/Advanced_Access_Content_System#

https://forum.doom9.org/showthread.php?t=122363

https://www.dvdfab.cn/4k-uhd-drives.htm