
Every year, India holds its breath for NEET, the single gateway exam through which 23 lakh aspirants compete for roughly 1 lakh medical seats. Cancellation of NEET 2026 following a paper leak has only reinforced what the 2024 scandal exposed: these are not freak incidents but the logical outcome of a broken supply chain.
The problem is physical paper - printed days in advance, transported in sealed trunks across a vast and unequal country, handled by hundreds of middlemen, and exposed to corruption at every step. There is, however, a solution hiding in plain sight.
When a major studio releases a blockbuster today, no physical print travels to any theatre. Instead, an encrypted digital cinema package (DCP) is transmitted to projection servers at each multiplex days in advance. The decryption key, Key Delivery Message (KDM), is released separately, synched to showtime. Without the key, the file is gibberish. With it, the film plays. Pirates can steal the file. But they cannot screen it without the key. This 2-layer architecture has made pre-release leaks of theatrical prints nearly extinct.
NEET needs exactly this architecture. Here's how it would work:
National Testing Agency (NTA) encrypts the final paper using military-grade AES-256 encryption and transmits the ciphertext to a secured local terminal at every one of the roughly 4,500 exam centres, beginning 60 mins before the examination.
The decryption key, a time-stamped OTP, is released through a separate, centralised channel to authorised centre superintendents 10 mins before exam starts. Only when both elements exist simultaneously at the terminal does the paper become readable. Stealing the encrypted file in transit buys a criminal nothing. Intercepting the OTP buys nothing either. The two must meet, briefly, inside a tamper-evident, CCTV-monitored local terminal. And by the time they do, candidates are seated and supervised.
There are challenges. But they aren't insurmountable.
Huge print orders Printing 23 lakh question papers across 4,500 centres in under 30 mins is an engineering nightmare. But it's achievable. A high-speed duplex laser printer can produce 60-80 pages a min. Place 4-6 such printers at each centre. A set of, say, 500 candidates at one centre requires 500 booklets of 48 pages each - effectively 500 jobs of a single document.
At 70 pages a minute across 5 printers, that's a print run completed in under 25 mins. This is not speculative. GoI and states run similarly scaled operations for voter ID printing, ration card distribution, and Class 10 board mark sheets.
Connectivity NIC operates a dedicated, government-controlled leased-line network that connects district collectorates, courts and registration offices. BSNL's national fibre backbone reaches most tier-2 and tier-3 cities. Where neither reaches, a bonded dual-SIM 4G router - running on two separate telecom operators simultaneously for redundancy - provides more than sufficient bandwidth for an encrypted PDF of a few megabytes. The file size of a NEET paper is smaller than a single Instagram reel.
Terminal hardware Terminals must be tamper-proof, air-gapped after receipt, capable of driving multiple printers, and built with hardware security modules (HSMs) that prevent the decrypted file from ever being copied or exported. This is the design philosophy used in payment terminals and EVMs. ECIL, which manufactures India's EVMs, could prototype and manufacture 4,500 such terminals in a single procurement cycle.
Each unit would have a hardware-enforced 'print-only' mode. Once decryption occurs, the paper spools to printers and the decrypted content is never written to any storage medium. Print, destroy the key, begin the exam.
Bang for the buck Cost is a one-time capital investment, not an annual expense. Spread over even 5 yrs of examination cycles, per-candidate cost is negligible compared to the crores spent on coaching ecosystems, repeated exams, legal battles and cost of shattered trust.
India's examination ecosystem is on trial. Every leaked paper is not just a question of fairness, but of whether the state can protect the life outcomes of its young people. Like the digital cinema industry, India must redesign the chain, not just the locks.
The writer is former secretary, GoI.