Security is either a horror story or it isn't, depending on who you talk to, the length of the view they are taking and if they have skin in the game.

The theory is that 256 bit AES encryption is currently invulnerable. Brute force attacks might take a trillion iterations for success. A trillion iterations at 1,000 attempts/second means over 30 years to crack the private keys.

The reality is that each DCinema network is an extremely sophisticated set of transport and store vehicles, each subject to potential hazard, each typically in the hands of professionals...but professionals in a different field than IT Security.

Every encryption system eventually gets broken. So a movie stolen today may not be cracked, but even sitting in a library of a “bad guy” uncracked is a potential liability in an age when libraries are so valuable.

Currently, a dcinema system can be secure with a combination of:

• Certified dcinema equipment, without additions,
• Good communication with a good NOC,
• Working detectors that let the NOC sniff out trouble,
• A secure physical environment to keep fraudulent users off systems,
• A knowledgeable and vigilant staff.

Given all these aspects, reality can be the same as theory–brute force and side channel attacks of the strong 256-bit encryption won't happen.

A lot of “ifs”, of course.

What did that unknown installer do? Was it malice or incompetence that left that ethernet cable hanging out there?

We recommend an independent check just before the system is handed over to the NOC. Then implement systems to keep it secure.