Why Audio Packets Are Unencrypted in VOB Files

In the DVD-Video specification, Video Object (VOB) containers rely on the Content Scramble System (CSS) to protect commercial content from unauthorized copying. However, while MPEG-2 video streams within these VOB files are heavily scrambled, the accompanying audio packets—such as Dolby Digital (AC-3), DTS, or LPCM—are almost universally left completely unencrypted or protected with negligible safeguards. This design choice was not an oversight, but a deliberate compromise dictated by hardware processing limitations of the late 1990s, external audio receiver architecture, and the specific threat models recognized by Hollywood studios at the time.

Hardware Limitations of Early Decoders

When the DVD-Video format was standardized in the mid-1990s, silicon real estate was expensive. Consumer standalone DVD players had to hit mass-market price points quickly, requiring specialized, low-cost Application-Specific Integrated Circuits (ASICs) to handle playback.

Decrypting the high-bitrate MPEG-2 video stream in real-time pushed these early decoding chips to their computational limits. Encrypting the audio streams would have required additional decryption pipelines and cryptographic key-handling hardware on the board. Leaving audio streams in the clear drastically reduced circuit complexity, silicon costs, and thermal output in early player hardware.

Digital Audio Passthrough and S/PDIF

A core feature of the DVD standard was high-fidelity multi-channel surround sound routed to external Audio/Video (AV) receivers. The primary digital transport mechanism for this setup was S/PDIF (Sony/Philips Digital Interface), carried over coaxial or optical TOSLINK cables.

Unlike modern interfaces such as HDMI, S/PDIF is a unidirectional protocol with no handshake mechanisms, no copy-protection protocols, and no support for encryption handoffs like HDCP (High-bandwidth Digital Content Protection). If audio packets were stored encrypted on the disc:

  1. The DVD player would need to decrypt the audio before passing the raw bitstream across S/PDIF, creating an unprotected digital intercept point regardless.
  2. If kept encrypted across the cable, every third-party AV receiver, soundbar, and audio processor would have required an official CSS decryption license and proprietary silicon.

Requiring the entire audio electronics industry to license and integrate DVD-specific CSS technology would have crippled format adoption. Keeping the audio unencrypted allowed the player to extract AC-3 or DTS packets directly from the VOB and pass them untouched over S/PDIF to any standard external DAC or receiver.

Multiplexing Architecture in MPEG-2 Program Streams

VOB files are based on the MPEG-2 Program Stream format, which multiplexes video, audio, and sub-pictures into individual 2,048-byte sectors. Each sector possesses a header indicating the payload type:

The playback hardware's demultiplexer reads these header flags and routes the payloads accordingly. Video packets are diverted into the hardware CSS decryption core before entering the MPEG-2 video decoder. Audio packets bypass the CSS block entirely and route directly to the audio processing unit or digital output ports.

The Piracy Threat Model

The Motion Picture Association of America (MPAA) and consumer electronics manufacturers framed CSS around a specific threat: the digital duplication of full-motion movies.

In the late 1990s, hard drives were measured in gigabytes, consumer broadband was scarce, and standalone media was the primary distribution channel. Studio security models operated on the principle that the commercial value of a film was tied inextricably to the complete video-and-audio experience. Audio stripped from a film had minimal commercial piracy value on its own, and unencrypted CD-DA audio was already widely accessible on consumer PCs. Protecting the video stream was considered sufficient to safeguard the commercial value of the disc.