eec5d8dfa0
The scheme (cenc, cbc1, cens, cbcs; the HLS methods AES-128, SAMPLE-AES, AES-256-GCM) and the key delivery (HLS key URI, Clear Key, a content protection system by its system ID) of each released key; the commitment list WKL1 derived from a CPIX document, so the proxy copies each key_commit and holds no key; the entitlement WKE1 bound to a device key and the device's proof over each request; the release decision as a pure function of signed inputs (freshness, replay, key periods, offline licences and renewals); the release ticket WKT1 for a clear delivery, so the proxy never relays a key; verification of a proxy's log. The key_release module of wai-rs (feature key_release), its unit tests, and the corpus live-conformance/keys/, generated from fixed seeds by wai_key_release_vectors and checked by tests/key_release.rs. Co-Authored-By: Claude Opus 5.5 <[email protected]>
25 lines
1.3 KiB
XML
25 lines
1.3 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<cpix:CPIX xmlns:cpix="urn:dashif:org:cpix" xmlns:pskc="urn:ietf:params:xml:ns:keyprov:pskc" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" contentId="film-0001" version="2.3">
|
|
<cpix:ContentKeyList>
|
|
<cpix:ContentKey kid="8c92350e-5042-656d-2d76-56d7afbdf00b" commonEncryptionScheme="cenc">
|
|
<cpix:Data>
|
|
<pskc:Secret>
|
|
<pskc:PlainValue>0Q8zPAA6i4wgX+a5b7oUjw==</pskc:PlainValue>
|
|
</pskc:Secret>
|
|
</cpix:Datum>
|
|
</cpix:ContentKey>
|
|
<cpix:ContentKey kid="7f2f1512-4161-1422-9ded-99cecd52be76" commonEncryptionScheme="cenc">
|
|
<cpix:Data>
|
|
<pskc:Secret>
|
|
<pskc:PlainValue>5U1XQBhOhBWn81IZnv8BOg==</pskc:PlainValue>
|
|
</pskc:Secret>
|
|
</cpix:Data>
|
|
</cpix:ContentKey>
|
|
</cpix:ContentKeyList>
|
|
<cpix:DRMSystemList>
|
|
<cpix:DRMSystem systemId="edef8ba9-79d6-4ace-a3c8-27dcd51d21ed" kid="8c92350e-5042-656d-2d76-56d7afbdf00b"/>
|
|
<cpix:DRMSystem systemId="edef8ba9-79d6-4ace-a3c8-27dcd51d21ed" kid="7f2f1512-4161-1422-9ded-99cecd52be76"/>
|
|
<cpix:DRMSystem systemId="9a04f079-9840-4286-ab92-e65be0885f95" kid="8c92350e-5042-656d-2d76-56d7afbdf00b"/>
|
|
<cpix:DRMSystem systemId="9a04f079-9840-4286-ab92-e65be0885f95" kid="7f2f1512-4161-1422-9ded-99cecd52be76"/>
|
|
</cpix:DRMSystemList>
|
|
</cpix:CPIX>
|