We propose a framework to encrypt Baseline JPEG files directly at bitstream level, i.e., without the need to recompress them. Our approach enables encrypting more than 25 pictures per second in VGA resolution, allowing real-time operation in typical video surveillance applications. In addition, our approach preserves the length of the bitstream while being completely format-compliant. Furthermore, we show that an attack on the encryption process, which partly relies on AES, is practically infeasible.