[advocacy] DRM in OGG - A Proposal

[Vance Roussin]

>Maybe the ISRC tag would have to be signed somehow, to help establish 
>authenticity. But changing a tag could only benefit another ISRC member, who 
>would then be banned from the system. Signing could be a mark of quality 
>though

If you wish to implement a digital signature standard that allows for
tracking of so called “official encodes” then that is something that has
potential to catch on. But I hardily see how it would align artists and
listeners.

This could be done right?

1.Make a MD5 hash of only the vorbis part of the ogg stream including
vorbis stream ID, and all tags.
2.Sign it with a free (as in speech) digital signature method, and insert
it into the ogg as a separate stream.

Programs could be made so that they will see the signature and warn the
user that changing the tags or the vorbis stream in any way will invalidate
the signature if the user tries to, but still allow him to do so and/or
remove it if he wishes. And of course still play files that have no or
invalid signatures. "Unofficial" players can still play all files without
having to deal with or destroy the signature. New signatures can be added
and removed as the users sees fit and will be separate from each other so
that no matter how many different sources sign the vorbis stream any of
them can be removed without invalidating the others.

That sounds like a good idea.

>using encryption for a positive purpose 
>would mean there was little - point in breaking it.

If the encryption stops me from burning an audio CD with that material on
it. Then its going to get broken no matter how positive the purpose.

-vance

<p><p>--- >8 ----
List archives:  http://www.xiph.org/archives/
To unsubscribe from this list, send a message to 'advocacy-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.