IOCTL_AACS_GENERATE_BINDING_NONCE control code

Reads the Advanced Access Content System (AACS) binding nonce starting at the specified byte offset on the disc, as part of the protocol for writing to a protected data area.

Input Parameters

The buffer at Irp->AssociatedIrp.SystemBuffer contains a structure of type AACS_READ_BINDING_NONCE that specifies the DVD_SESSION_ID, the starting logical block address and the number of sectors for which the logical unit should generate a binding nonce.

Output Parameters

The buffer at Irp->AssociatedIrp.SystemBuffer contains the value of type AACS_BINDING_NONCE that specifies the binding nonce.

I/O Status Block

The Information field is set to the number of bytes transferred. The Status field is set to STATUS_SUCCESS or possibly STATUS_INSUFFICIENT_RESOURCES.

Remarks

The IOCTL_AACS_GENERATE_BINDING_NONCE request corresponds to the part of the AACS authentication protocol that is responsible for writing to a protected data area. For a complete description of this protocol, see the Advanced Access Content System, Introduction and Common Cryptographic Elements specification that is published by Advanced Access Content System Licensing Administrator (AACS LA).

The IOCTL_AACS_GENERATE_BINDING_NONCE request requires a single available AGID during its processing, and the AGID is not automatically released after the request completes. The AGID remains valid until it is explicitly invalidated or until the drive generates a power-on reset, hard reset, or media ejection event. However, the AGID cannot be reused with other requests.

It is recommended that you wait for the completion of all other requests that use secure sessions with AGIDs before making an IOCTL_AACS_GENERATE_BINDING_NONCE request.

Clients that do not use file system support must set the Handle member of AACS_READ_BINDING_NONCE to INVALID_HANDLE_VALUE and specify explicit values for the StartLBA and NumberOfSectors members.

Requirements

Send comments about this topic to Microsoft

Build date: 5/17/2013