<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: Media binding techniques</title>
	<atom:link href="http://rdist.root.org/2007/03/22/media-binding-techniques/feed/" rel="self" type="application/rss+xml" />
	<link>http://rdist.root.org/2007/03/22/media-binding-techniques/</link>
	<description>Embedded security, crypto, software protection</description>
	<lastBuildDate>Mon, 08 Mar 2010 21:19:29 +0000</lastBuildDate>
	<generator>http://wordpress.com/</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: S Moskowitz</title>
		<link>http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3619</link>
		<dc:creator>S Moskowitz</dc:creator>
		<pubDate>Wed, 14 Nov 2007 01:24:28 +0000</pubDate>
		<guid isPermaLink="false">http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3619</guid>
		<description>actually, i am using the notion of a watermark key which instead of embedding some other indepedent data into a signal instead manipulates the bits of the signal at the granularity of the signal characteristics -- where the key is the complexity between how the signal is manipulated and how it is intended to be rendered. 

call it a media key ... it differs from encryption as the index of functions to be determined (for a given application of media binding depending for instance on use, bandwidth, type of signal, frame setting, other schemes to be integrated, etc.) is not directed at the signal in the sense of an encryption ...

if you know that the signal will have to be rendered in the clear (phish :: all that i see cant be taken from me) wasting computation on access restriction instead of units of complexity enables you to maintain legacy versions of the content ... at lower computational cost ... the physical media or network settings can provide embedded or meta-data to affect other aspects of the system.

it&#039;s gotta be my shoes ... sorry to be tongue tied on this one</description>
		<content:encoded><![CDATA[<p>actually, i am using the notion of a watermark key which instead of embedding some other indepedent data into a signal instead manipulates the bits of the signal at the granularity of the signal characteristics &#8212; where the key is the complexity between how the signal is manipulated and how it is intended to be rendered. </p>
<p>call it a media key &#8230; it differs from encryption as the index of functions to be determined (for a given application of media binding depending for instance on use, bandwidth, type of signal, frame setting, other schemes to be integrated, etc.) is not directed at the signal in the sense of an encryption &#8230;</p>
<p>if you know that the signal will have to be rendered in the clear (phish :: all that i see cant be taken from me) wasting computation on access restriction instead of units of complexity enables you to maintain legacy versions of the content &#8230; at lower computational cost &#8230; the physical media or network settings can provide embedded or meta-data to affect other aspects of the system.</p>
<p>it&#8217;s gotta be my shoes &#8230; sorry to be tongue tied on this one</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nate Lawson</title>
		<link>http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3534</link>
		<dc:creator>Nate Lawson</dc:creator>
		<pubDate>Tue, 06 Nov 2007 16:36:32 +0000</pubDate>
		<guid isPermaLink="false">http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3534</guid>
		<description>If you&#039;re working purely in the digital domain (preventing a set of bits from being moved off the original media), the characteristics of the media itself are your foundation.  It sounds like you&#039;re talking more from a background of watermarking, where copying involves a decoding transformation.

While watermarking can provide a social deterrent to copying, it doesn&#039;t prevent the act itself.  As part of an overall software protection scheme, I do think marking has its own place.</description>
		<content:encoded><![CDATA[<p>If you&#8217;re working purely in the digital domain (preventing a set of bits from being moved off the original media), the characteristics of the media itself are your foundation.  It sounds like you&#8217;re talking more from a background of watermarking, where copying involves a decoding transformation.</p>
<p>While watermarking can provide a social deterrent to copying, it doesn&#8217;t prevent the act itself.  As part of an overall software protection scheme, I do think marking has its own place.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: S Moskowitz</title>
		<link>http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3485</link>
		<dc:creator>S Moskowitz</dc:creator>
		<pubDate>Fri, 02 Nov 2007 17:06:49 +0000</pubDate>
		<guid isPermaLink="false">http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3485</guid>
		<description>another pass ...

bind key material which is signal-specific, to any level of granularity of the content itself. the constraint access-restriction inherent to *any* crypto cipher (the ciphertext does not reveal or leak information concerning the plaintext - security held &quot;only&quot; in the key) can be relaxed ... plainly: if the basic structure of the data is a bit, then we are binding more than a bit up to a level of granularity that is consistent with the processing of the media to be &quot;protected&quot; ... speed bump the process ... do not completely access restrict the data -- that is wasted computation (an opinion).

this could be the frames of AAC or MPEG or some other &quot;formatting&quot; but it is simplistic enough to generate and replace keys (a la itunes), by focusing on the encoding itself and relaxing the crypto cipher constraint ... this has overlap with winnowing and chaffing and was developed earlier than that work.

another explanation to the very specific goal you are discussing ...

if a digital watermark is encoded with key material eg you can differentiate between 2 copies with knowledge of the key material but otherwise the content is perceptually the same ... there needs to be at least one bit of difference between the original unmarked content and the marked content ... 

now, instead of a a watermark key which for purposes of discussion describes how the watermark is encoded into the content you have a key which describes the encoding or binding of the media -- it is not as secure as crypto keys in the traditional sense but secure enough to enable upgrades with smaller computational overhead ...

we do this at minimal overhead and are able to match a specific piece of content with a specific key -- the key is the binding between analog/dsp I/O and &quot;level of complexity&quot; to discourage piracy using devices or software which render the content ... the key and content are specific to each other and relate input to output with a measurable amount of complexity ... 

this is the narrow goal, achieved...</description>
		<content:encoded><![CDATA[<p>another pass &#8230;</p>
<p>bind key material which is signal-specific, to any level of granularity of the content itself. the constraint access-restriction inherent to *any* crypto cipher (the ciphertext does not reveal or leak information concerning the plaintext &#8211; security held &#8220;only&#8221; in the key) can be relaxed &#8230; plainly: if the basic structure of the data is a bit, then we are binding more than a bit up to a level of granularity that is consistent with the processing of the media to be &#8220;protected&#8221; &#8230; speed bump the process &#8230; do not completely access restrict the data &#8212; that is wasted computation (an opinion).</p>
<p>this could be the frames of AAC or MPEG or some other &#8220;formatting&#8221; but it is simplistic enough to generate and replace keys (a la itunes), by focusing on the encoding itself and relaxing the crypto cipher constraint &#8230; this has overlap with winnowing and chaffing and was developed earlier than that work.</p>
<p>another explanation to the very specific goal you are discussing &#8230;</p>
<p>if a digital watermark is encoded with key material eg you can differentiate between 2 copies with knowledge of the key material but otherwise the content is perceptually the same &#8230; there needs to be at least one bit of difference between the original unmarked content and the marked content &#8230; </p>
<p>now, instead of a a watermark key which for purposes of discussion describes how the watermark is encoded into the content you have a key which describes the encoding or binding of the media &#8212; it is not as secure as crypto keys in the traditional sense but secure enough to enable upgrades with smaller computational overhead &#8230;</p>
<p>we do this at minimal overhead and are able to match a specific piece of content with a specific key &#8212; the key is the binding between analog/dsp I/O and &#8220;level of complexity&#8221; to discourage piracy using devices or software which render the content &#8230; the key and content are specific to each other and relate input to output with a measurable amount of complexity &#8230; </p>
<p>this is the narrow goal, achieved&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nate Lawson</title>
		<link>http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3478</link>
		<dc:creator>Nate Lawson</dc:creator>
		<pubDate>Thu, 01 Nov 2007 23:03:30 +0000</pubDate>
		<guid isPermaLink="false">http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3478</guid>
		<description>I don&#039;t understand what you mean.  It sounds like you are talking about software protection in general.  Can you summarize?

This post was about one very specific security goal -- tie some set of bits to its original media.  Even with a system like AACS that uses cryptography (NNL key tree), preventing bit-for-bit copying of the disc comes to inserting some piece of data (i.e., 128-bit Volume ID) in a location that can&#039;t be written on recordable media.  DVD-Rs that come with the CSS key block area already overwritten with zeros use a similar approach.

So in this very narrow goal (tying bits to their original media), encryption does not get you anything.  It ultimately comes down to one of the three categories of media binding I discuss in the article.</description>
		<content:encoded><![CDATA[<p>I don&#8217;t understand what you mean.  It sounds like you are talking about software protection in general.  Can you summarize?</p>
<p>This post was about one very specific security goal &#8212; tie some set of bits to its original media.  Even with a system like AACS that uses cryptography (NNL key tree), preventing bit-for-bit copying of the disc comes to inserting some piece of data (i.e., 128-bit Volume ID) in a location that can&#8217;t be written on recordable media.  DVD-Rs that come with the CSS key block area already overwritten with zeros use a similar approach.</p>
<p>So in this very narrow goal (tying bits to their original media), encryption does not get you anything.  It ultimately comes down to one of the three categories of media binding I discuss in the article.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: S Moskowitz</title>
		<link>http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3468</link>
		<dc:creator>S Moskowitz</dc:creator>
		<pubDate>Thu, 01 Nov 2007 05:49:54 +0000</pubDate>
		<guid isPermaLink="false">http://rdist.root.org/2007/03/22/media-binding-techniques/#comment-3468</guid>
		<description>not to criticize the approaches you propose ... a few comments

for example, 

let&#039;s call encryption coding requiring a secret such that the encrypted information can be extracted by those with the secret. 
the secret is a key which is a family or functions or index of functions.

the primitives for crypography are based on the computational difficulty of cracking the key. it is a yeah or nay on access to extract the plaintext. but, in an age when such computational complexity would appear to limit enabling a market for content or information that may be subject to the digital copy problem. this is not to say conditional access, white box drm, etc. are not useful.it is to say the competition is for time and attention and may best be served by relaxing primitive to include information that requires access to enable fair pricing (who says what is fair?)

but, a simpler way to do security, in the sense that keys are easy to change and not based on a strict access vis-a-vis encryption but a nuanced use of a key to alter the associated signal in a manner that makes measurement of the complexity or quanta of &quot;security&quot; applied. additionally functions as part of the key may include specific information which may increase or decrease the computational requirements for rendering the content. no new players just key readers ... (call em predetermined or media or content keys, whatever)

i think a fair way to observe security options are: proprietary coding (though the perceptual model is easy to replicate as it is based on human observation) - encryption is transport layer only and does not reveal anything about the plaintext -- ideally; content extensions or wrapping which are active controls but not integral with the content - they aren&#039;t digital signatures that survive transform conversions; watermarking for plausible deniability/traceability and integrity; format manipulation relies on a key describing how the encoding has been manipulated...

the manipulation can be a measure of security or simply a way to measure how to split the money from transactions.

code protection, by the way, is related in the sense that the code level is interoperating with digitized signals and vice-a-versa. the index of functions relates inputs to outputs in way that can be manipulated for any number of threat scenarios.

hope i am not rambling ... would like to hear some thoughts ...</description>
		<content:encoded><![CDATA[<p>not to criticize the approaches you propose &#8230; a few comments</p>
<p>for example, </p>
<p>let&#8217;s call encryption coding requiring a secret such that the encrypted information can be extracted by those with the secret.<br />
the secret is a key which is a family or functions or index of functions.</p>
<p>the primitives for crypography are based on the computational difficulty of cracking the key. it is a yeah or nay on access to extract the plaintext. but, in an age when such computational complexity would appear to limit enabling a market for content or information that may be subject to the digital copy problem. this is not to say conditional access, white box drm, etc. are not useful.it is to say the competition is for time and attention and may best be served by relaxing primitive to include information that requires access to enable fair pricing (who says what is fair?)</p>
<p>but, a simpler way to do security, in the sense that keys are easy to change and not based on a strict access vis-a-vis encryption but a nuanced use of a key to alter the associated signal in a manner that makes measurement of the complexity or quanta of &#8220;security&#8221; applied. additionally functions as part of the key may include specific information which may increase or decrease the computational requirements for rendering the content. no new players just key readers &#8230; (call em predetermined or media or content keys, whatever)</p>
<p>i think a fair way to observe security options are: proprietary coding (though the perceptual model is easy to replicate as it is based on human observation) &#8211; encryption is transport layer only and does not reveal anything about the plaintext &#8212; ideally; content extensions or wrapping which are active controls but not integral with the content &#8211; they aren&#8217;t digital signatures that survive transform conversions; watermarking for plausible deniability/traceability and integrity; format manipulation relies on a key describing how the encoding has been manipulated&#8230;</p>
<p>the manipulation can be a measure of security or simply a way to measure how to split the money from transactions.</p>
<p>code protection, by the way, is related in the sense that the code level is interoperating with digitized signals and vice-a-versa. the index of functions relates inputs to outputs in way that can be manipulated for any number of threat scenarios.</p>
<p>hope i am not rambling &#8230; would like to hear some thoughts &#8230;</p>
]]></content:encoded>
	</item>
</channel>
</rss>
