For program storage media that are written to once (i.e., EPROM, CD), the following rules shall be met:

1. (1) CD-ROM-based program storage shall:

   1. (A) Not be a rewritable disk; and
   2. (B) The session shall be closed to prevent any further writing; and

2. (2) Non-EPROM specific (including CD-ROM) program storage shall meet the following rules:

   1. (A)

      1. (i) The control program shall authenticate all critical files by employing a hashing algorithm which produces a message digest output of at least one hundred twenty-eight (128) bits at minimum, as certified by the test laboratory and agreed upon by the Arkansas Racing Commission.
      2. (ii) The message digest or digests shall be stored on a memory device (ROM-based or other medium) within the EGS.
      3. (iii) Message digests which reside on any other medium shall be encrypted, using a public/private key algorithm with a minimum of a five hundred twelve (512) bit key.
      4. (iv) However, a seven hundred sixty-eight (768) bit key is recommended, or an equivalent encryption algorithm with similar security certified by the test laboratory and agreed upon by the commission; and

   2. (B)

      1. (i) The EGS shall authenticate all critical files against the stored message digest or digests as required in subdivision (2)(A) of this section.
      2. (ii) In the event of a failed authentication after the game has been powered up, the EGS should immediately enter an error condition with the appropriate tower light signal and record the details including time and date of the error in a log.
      3. (iii) This error shall require operator intervention to clear.
      4. (iv) The game shall display specific error information and shall not clear until either the file authenticates properly, following the operator intervention, or the medium is replaced or corrected, and the device’s memory is cleared, the game is restarted, and all files authenticate correctly.
      5. (v) The values in subdivision (2) of this section will constantly be reevaluated based on technology advancements and new security methods available.

Codification Notes: “EPROMS” means erasable programmable read-only memory. "CD-ROM" means compact disc read-only memory.