perryflynn

3 ms·

1. 1.▲
   by perryflynn 1y ago

   Well, the DCI system relies on trusted (TPM-ish) hardware. One server vendor has used insecure certificates. So if a AES key for a movie is encrypted / shipped for such insecure certificate the AES key for the movie can be decrypted ou
2. 2.▲
   by perryflynn 1y ago

   Yes, I added some notes/improvements while the discussion was happening here. Changelog: https://github.com/perryflynn/serverless.industries/commits/...
3. 3.▲
   by perryflynn 1y ago

   No. They use a unique IV for each frame: > Every Frame is using a unique IV (Initialization Vector), which ensures that the AES Block Cipher generates always different cipher texts and makes brute force harder. This works similar to a Pa
4. 4.▲
   by perryflynn 1y ago

   One movie can be 200G to 1TB large. The chunked encryption allows it to seek the movie without decrypting from the beginning.
5. 5.▲
   by perryflynn 1y ago

   The frames are sent encrypted into the projector. The projector has special hardware for decrypt and decode.
6. 6.▲
   by perryflynn 1y ago

   It also contains watermarks. So theatres which failed to prevent recording will run into serious issues. See https://dcpomatic.com/forum/viewtopic.php?t=2372
7. 7.▲
   How encryption for Cinema Movies works(serverless.industries)

   230 points by perryflynn 1y ago|120 comments
8. 8.▲
   Force Devices to use Pi-hole(serverless.industries)

   9 points by perryflynn 1y ago|1 comments