A method, system and program product for managing a size of a key
management block (KMB) during content distribution is provided.
Specifically, a first KMB corresponding to a first subtree of devices is
received along with content as encrypted with a title key. If a size of
the first KMB exceeds a predetermined threshold, a second subtree will be
created. A second KMB corresponding to the second subtree of devices will
then be generated. The second KMB contains an entry revoking the entire
first subtree of devices and, as such, is smaller than the first KMD. Any
compliant devices from the first subtree are migrated to the second
subtree.