Re: [Openexr-devel] Securing OpenEXR

[Alexander Stohr]

 hello nicholas,

the most reasonable open aproach for making certain content
only available to their intended receivers is probably this:

use an asymetric cipher like the PGP key pairs often used for e-mail systems.
use this infrastructure to encode a lengthy pass phrase that decodes the bulk 
data.
an interesting passphrase encoding would be e.g. the 7-zip/lzma/lzma2/xz 
compression.

as you want to address multiple receivers each of them receives a separate
section specifically encoded by its public key. thats the default in PGP 
anyways.


to my best understanding OpenEXR was designed to create
a common denominator for image storage in highest quality
digital video processing professional sectors.
in fact its usage was never limited to that single setup.


what ever you can decode in an open source program
will enable people to spread that further if they want it.
any such encryption like that from above will only protect
the data from spys listening to the transfer and from
accidental leakage of still encrypted media at source,
destination or other storage in between them.
but the limit is: its not able to prevent third party access
if the key is used whilst the used system is compromised.

regards, Alex.

Am 2010-10-19 22:16, schrieb Nicholas Yue:
> Hi,
>
>    Are there mechanism (API or otherwise) in OpenEXR to ensure that a sequence of OpenEXR I prepare is readable only by the 
> intended audience?
>
> Regards
>
>
> _______________________________________________
> Openexr-devel mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/openexr-devel