Editing DeCSS

{{short description|Free open-source program to decode DVDs with encryption}}
{{Use dmy dates|date=August 2020}}
[[Image:DeCSS.svg|right|thumb|A fragment of the DeCSS code, which can be used by a computer to circumvent a DVD's [[copy protection]].]]

'''DeCSS''' is one of the first free [[computer programs]] capable of decrypting content on a commercially produced [[DVD]] video disc. Before the release of DeCSS, [[Free software|free]] and [[Open-source software|open source]] operating systems (such as [[Berkeley Software Distribution|BSD]] and [[Linux]]) could not play encrypted video DVDs.

DeCSS's development was done without a license from the [[DVD Copy Control Association]] (CCA), the organization responsible for DVD [[copy protection]]—namely, the [[Content Scramble System]] (CSS) used by commercial DVD publishers.  The release of DeCSS resulted in a Norwegian criminal trial and subsequent [[acquittal]] of one of the authors of DeCSS. The DVD CCA launched numerous lawsuits in the United States in an effort to stop the distribution of the software.

== Origins and history ==

DeCSS was devised by three people, two of whom remain anonymous. It was on the [[Internet]] mailing list [[LiViD]] in October 1999. The one known author of the trio is [[Norway|Norwegian]] programmer [[Jon Lech Johansen]], whose home was raided in 2000 by Norwegian police. Still a teenager at the time, he was put on trial in a Norwegian court for violating Norwegian Criminal Code section 145,<ref>{{cite web | title=Norwegian Criminal Code section 135-147 | url=http://www.lovdata.no/all/tl-19020522-010-017.html | access-date=31 July 2008 | archive-date=10 February 2015 | archive-url=https://web.archive.org/web/20150210214618/https://lovdata.no/all/tl-19020522-010-017.html | url-status=live }}</ref> and faced a possible jail sentence of two years and large fines, but was acquitted of all charges in early 2003. On 5 March 2003, a Norwegian appeals court ruled that Johansen would have to be retried. The court said that arguments filed by the prosecutor and additional evidence merited another trial. On 22 December 2003, the appeals court agreed with the acquittal, and on 5 January 2004, Norway's [[Økokrim]] (Economic Crime Unit) decided not to pursue the case further.

The program was first released on 6 October 1999 when Johansen posted an announcement of DeCSS 1.1b, a [[Proprietary software|closed source]] [[Microsoft Windows|Windows]]-only application for DVD [[ripping]], on the livid-dev mailing list. The [[source code]] was leaked before the end of the month. The first release of DeCSS was preceded by a few weeks by a program called DoD DVD Speed Ripper<ref name="The Truth about DVD CSS cracking">{{cite web |title=The Truth about DVD CSS cracking |author=MoRE and [dEZZY/DoD] |date=4 November 1999 |url=http://www.lemuria.org/DeCSS/dvdtruth.txt |access-date=4 January 2007 |archive-date=29 August 2013 |archive-url=https://web.archive.org/web/20130829013825/http://www.lemuria.org/DeCSS/dvdtruth.txt |url-status=dead }}</ref> from a group called [[DrinkOrDie]], which didn't include source code and which apparently did not work with all DVDs. DrinkOrDie reportedly [[disassembler|disassembled]] the [[object code]] of the [[Xing Technology|Xing]] DVD player to obtain a player key. The group that wrote DeCSS, including Johansen, came to call themselves Masters of Reverse Engineering and may have obtained information from DrinkOrDie.<ref name="The Truth about DVD CSS cracking"/>

The CSS decryption source code used in DeCSS was mailed to Derek Fawcus before DeCSS was released. When the DeCSS source code was leaked, Fawcus noticed that DeCSS included his css-auth code in violation of the [[GNU General Public License|GNU GPL]]. When Johansen was made aware of this, he contacted Fawcus to solve the issue and was granted a license to use the code in DeCSS under non-GPL terms.<ref>{{cite web | title=Derek Fawcus ending livid-dev flamewar by confirming Johansen's side of the story | url=http://livid.on.openprojects.net/pipermail/livid-dev/1999-October/000548.html| archive-url=https://web.archive.org/web/20001202051300/http://livid.on.openprojects.net/pipermail/livid-dev/1999-October/000548.html | archive-date=2 December 2000}}</ref>

On 22 January 2004, the [[DVD Copy Control Association|DVD CCA]] dropped the case against Jon Johansen.<ref>{{cite web |title=EFF: DVD Descrambling Code Not a Trade Secret |url=http://w2.eff.org/IP/Video/DVDCCA_case/20040122_eff_pr.php |date=22 January 2004 |work=[[Electronic Frontier Foundation]] |access-date=5 December 2005 |archive-url=https://web.archive.org/web/20071014063720/http://w2.eff.org/IP/Video/DVDCCA_case/20040122_eff_pr.php |archive-date=14 October 2007 |url-status=dead }}</ref>

===Jon Lech Johansen's involvement===
The DeCSS program was a collaborative project, in which Johansen wrote the [[graphical user interface]]. The transcripts from the [[Borgarting Court of Appeal]], published in the Norwegian newspaper ''[[Verdens Gang]]'', contain the following description of the process which led to the release of DeCSS:<ref>{{cite web |url=http://www.vg.no/pub/vgart.hbs?artid=206926 |title=Hele DVD-dommen |trans-title=The entire DVD verdict |work=[[Verdens Gang]] |date=22 December 2003 |access-date=25 February 2012 |archive-date=12 December 2008 |archive-url=https://web.archive.org/web/20081212230949/http://www.vg.no/pub/vgart.hbs?artid=206926 |url-status=live }}</ref>

<blockquote>Through Internet Relay Chat (henceforth IRC), [Jon Lech Johansen] made contact with like-minded [people seeking to develop a DVD-player under the [[Linux]] operating system]. 11 September 1999, he had a conversation with "mdx" about how the encryption algorithm in CSS could be found, by using a poorly secured software-based DVD-player. In a conversation [between Jon Lech Johansen and "mdx"] 22 September, "mdx" informs that "the nomad" had found the code for CSS decryption, and that "mdx" now would send this [code] to Jon Lech Johansen. "The nomad" allegedly found this decryption algorithm through so-called [[reverse engineering]] of a Xing DVD-player, where the [decryption] keys were more or less openly accessible. Through this, information that made it possible [for "mdx"] to create the code CSS_scramble.cpp was retrieved. From chat logs dated 4 November 1999 and 25 November 1999, it appears that "the nomad" carried through the reverse engineering process on a Xing player, which he characterized as illegal. As the case is presented for the High Court, this was not known by Jon Lech Johansen before 4 November [1999].<br /><br />

Regarding the authentication code, the High Court takes for its basis that "the nomad" obtained this code through the electronic mailing list LiVid (Linux Video) on the Internet, and that it was created by Derek Fawcus. It appears through a LiVid posting dated 6 October 1999 that Derek Fawcus on this date read through the DeCSS source code and compared it with his own. Further, it appears that "the creators [of DeCSS] have taken [Derek Fawcus' code] almost verbatim - the only alteration was the removal of [Derek Fawcus'] copyright header and a paragraph containing commentaries, and a change of the function names." The name [of the code] was CSS_auth.cpp.

The High Court takes for its basis that the program Jon Lech Johansen later programmed, the graphical user interface, consisted of "the nomad's" decryption algorithm and Derek Fawcus' authentication package. The creation of a graphical user interface made the program accessible, also for users without special knowledge in programming. The program was published on the Internet for the first time 6 October 1999, after Jon Lech Johansen had tested it on the movie "The Matrix." In this, he downloaded approximately 2.5%. 200 megabytes, of the movie to the hard drive on his computer. This file is the only film fragment Jon Lech Johansen has saved on his computer.</blockquote>

== Technology and derived works ==
{{See also|libdvdcss}}
When the release of the DeCSS source code made the CSS algorithm available for public scrutiny, it was soon found to be susceptible to a [[brute-force attack]] quite different from DeCSS. The encryption is only [[40-bit encryption|40-bit]], and does not use all keys; a high-end home computer in 1999 running optimized code could brute-force it within 24 hours, and modern computers can brute-force it in a few seconds or less.<ref>{{Cite web|url=https://www.cs.cmu.edu/~dst/DeCSS/Kesden/index.html|title=Content Scrambling System (CSS): Introduction|website=www.cs.cmu.edu|access-date=29 August 2019|archive-date=1 July 2024|archive-url=https://web.archive.org/web/20240701185436/https://www.cs.cmu.edu/~dst/DeCSS/Kesden/index.html|url-status=live}}</ref>

Programmers around the world created hundreds of programs equivalent to DeCSS, some merely to demonstrate the trivial ease with which the system could be bypassed, and others to add DVD support to [[Open-source license|open source]] movie players. The licensing restrictions on CSS make it impossible to create an open source implementation through official channels, and closed source drivers are unavailable for some operating systems, so some users need DeCSS or a similar tool to watch even legally obtained movies.

== Legal response ==

The first legal threats against sites hosting DeCSS, and the beginning of the DeCSS mirroring campaign, began in early November 1999 (''[[Universal v. Reimerdes]]''). The preliminary injunction in ''[[DVD Copy Control Association, Inc. v. Bunner]]'' followed soon after, in January 2000. As a response to these threats a program also called DeCSS but with an unrelated function was developed. This program can be used to strip [[Cascading Style Sheets]] tags from [[HTML]] pages. In one case, a school{{which|date=July 2021}} removed a student's webpage that included a copy of this program, mistaking it for the original DeCSS program, and received a great deal of negative media attention.<!--ref name-"pigdog"; read sources before stamping--> The CSS stripping program had been specifically created to bait the [[Motion Picture Association of America|MPAA]] in this manner.<ref name="pigdog">{{cite web | title=Pigdog Journal - DeCSS Distribution Center | url=http://www.pigdog.org/decss/ | access-date=28 May 2007 | archive-date=7 August 2018 | archive-url=https://web.archive.org/web/20180807125250/http://www.pigdog.org/decss/ | url-status=live }}</ref>

In protest against legislation that prohibits publication of copy protection circumvention code in countries that implement the [[WIPO Copyright Treaty]] (such as the [[United States]]' [[Digital Millennium Copyright Act]]), some have devised clever ways of distributing descriptions of the DeCSS algorithm, such as through [[steganography]], through various Internet protocols, on T-shirts and in dramatic readings, as [[MIDI]] files, as a [[haiku]] poem ([[DeCSS haiku]]),<ref>{{cite web |title=How to decrypt a DVD - in Haiku form |first=Seth |last=Schoen |url=http://www-2.cs.cmu.edu/~dst/DeCSS/Gallery/decss-haiku.txt |access-date=5 December 2005 |archive-date=20 June 2005 |archive-url=https://web.archive.org/web/20050620081718/http://www-2.cs.cmu.edu/~dst/DeCSS/Gallery/decss-haiku.txt |url-status=live }}</ref><ref>{{cite web |title=The history of the DeCSS Haiku |first=Seth |last=Schoen |url=http://www.loyalty.org/~schoen/haiku.html |access-date=25 February 2012 |archive-date=28 June 2018 |archive-url=https://web.archive.org/web/20180628105651/http://www.loyalty.org/~schoen/haiku.html |url-status=live }}</ref> and even as a so-called [[illegal prime|illegal prime number]].<ref>{{cite web |title=Gallery of CSS Descramblers |first=David S. |last=Touretzky |author-link=David S. Touretzky |url=https://www.cs.cmu.edu/~dst/DeCSS/Gallery |access-date=25 February 2012}}</ref>

==See also==

* [[DVD Copy Control Association]]
* [[qrpff]]
* [[AACS encryption key controversy]]
* [[Illegal prime]]
* [[youtube-dl]]

==References==
<references />

== Further reading ==
Lawrence Lessig, ''[[The Future of Ideas]]'', 2001, pp.&nbsp;187–190, freely available [http://www.the-future-of-ideas.com/index.shtml here] {{Webarchive|url=https://web.archive.org/web/20100822074426/http://the-future-of-ideas.com/index.shtml |date=22 August 2010 }}.

==External links ==
* [https://web.archive.org/web/20210326113756/http://www.lemuria.org/DeCSS/ DeCSS Central] - Information about DVD, CSS, DeCSS, LiVid, the DVD CCA and MPAA and the various lawsuits surrounding DeCSS.
* [https://web.archive.org/web/20090725230002/http://w2.eff.org/IP/Video/DVDCCA_case/ EFF archive of information on the Bunner and Pavlovich DVD-CAA lawsuits]
* [https://web.archive.org/web/20050207002843/http://www.2600.com/news/view/article/19 ''2600'' News: DVD Industry Takes ''2600'' to Court]
* [https://web.archive.org/web/20050217045554/http://www.aftenposten.no/english/local/article702236.ece Aftenposten: Prosecutors let DVD-Jon's victory stand]
* [http://cyber.law.harvard.edu/openlaw/DVD/dvd-discuss-faq.html The Openlaw DVD/DeCSS Forum Frequently Asked Questions (FAQ) List]
* [http://decss.zoy.org/ 42 ways to distribute DeCSS]
* [http://dvd-copy.blogspot.com/2005/08/dvd-content-scrambling-system.html DeCSS Explained] - A technical overview of the CSS decryption algorithm.
* [http://decss.zoy.org/decss.c DeCSS.c], The DeCSS source code

{{DEFAULTSORT:Decss}}
[[Category:1999 software]]
[[Category:Cryptanalytic software]]
[[Category:Cryptography law]]
[[Category:Digital rights management circumvention software]]
[[Category:Compact Disc and DVD copy protection]]