I had friends running timing attacks against the Xbox 360 encryption key around that time, they never publicly disclosed their work but I saw them playing games on a hacked firmware around mid 2000s. No reason to think this wouldn't be the same for the CSS encryption key.