I want to create a bit-by-bit backup of my DVD and a Blu-ray disc without removing its encryption. Is dd be the best method, and if so, what flags or settings should I use? Also, is comparing the SHA-256 hash of the generated ISO file with the hash of the original disc’s raw data (read from /dev/sr0) the best method for verifying the backup’s integrity?


Creating a (usable) backup of a soon failing data carrier should be legal either way. Yeah, a lot of countries have stupid laws there, but as long as you don’t share the data on the internet, you should be fine.
Also to note: to legally watch a DVD, you require either Windows or MacOS, with a supported (proprietary) player software, in most jurisdictions. So, there, no legal DVD for Linux, laws are stupid. And instead of cracking it on each watch, better to just do it once.