1. A method comprising: creating a protected graphics module in a device and using a central processing unit; sending an output from a protected graphics module to the central processing unit, and said module only executable on said device; and producing an encrypted display surface in said protected graphics module that can only be decrypted by a display engine.