Viewing profile — perryflynn

Well, the DCI system relies on trusted (TPM-ish) hardware. One server vendor has used insecure certificates. So if a AES key for a movie is encrypted / shipped for such insecure ce…

Yes, I added some notes/improvements while the discussion was happening here. Changelog: https://github.com/perryflynn/serverless.industries/commits/...

No. They use a unique IV for each frame: > Every Frame is using a unique IV (Initialization Vector), which ensures that the AES Block Cipher generates always different cipher texts…

One movie can be 200G to 1TB large. The chunked encryption allows it to seek the movie without decrypting from the beginning.

The frames are sent encrypted into the projector. The projector has special hardware for decrypt and decode.

It also contains watermarks. So theatres which failed to prevent recording will run into serious issues. See https://dcpomatic.com/forum/viewtopic.php?t=2372