What Is Encryption?

Two layers in a typical media service

Encryption runs a mathematical transformation over data using a key, producing ciphertext that looks like noise to anyone without that key. Media services use symmetric ciphers such as AES for the content itself, because they are fast enough to decrypt video in real time, and public-key methods to exchange keys and set up secure connections.

In practice there are two layers. Transport encryption, the HTTPS connection between the player and the server, stops anyone on the network from reading or tampering with what is sent. Content encryption is applied to the media files themselves, so the files stay protected while they sit in a delivery network's cache or if they are copied off it. Transport encryption ends when the data arrives. Content encryption only ends when a player holding the content key decrypts it.

Encryption is not DRM, and not hashing

Encryption is often used as shorthand for the whole protection stack. Digital rights management is broader: it decides who receives the key, on which kind of device, with what output restrictions and for how long. Encryption is the lock; DRM is the system that hands out keys under conditions.

Hashing is another common mix-up. A hash is a one-way summary of data, used to check integrity or identify identical files. It cannot be reversed to recover the original, and there is no key involved.

The decryption point is where piracy starts

Every encrypted film has to be decrypted before anyone can watch it. That moment, inside the player and on the way to the screen, is where most piracy happens. Attackers extract keys from weak players, capture the decoded output, or point a camera at a screen. None of these involve breaking the cipher, which in a properly configured system is not the realistic target.

So encryption tells a rights holder that the delivery path is protected. It does not tell them that the content is safe once it has been delivered.

When pirates encrypt as well

Pirate sites use HTTPS, file hosts encrypt uploads, and some messaging apps encrypt conversations end to end. That hides less than it might seem, because pirates still need to reach an audience. Public channels, search results, link indexes and player pages are visible to anyone, including an analyst. Monitoring works where the audience finds the content, and that is where evidence is captured and where notices under regimes such as the DMCA are aimed. The guide to how online piracy works covers those distribution points in more detail.