eec5d8dfa0
The scheme (cenc, cbc1, cens, cbcs; the HLS methods AES-128, SAMPLE-AES, AES-256-GCM) and the key delivery (HLS key URI, Clear Key, a content protection system by its system ID) of each released key; the commitment list WKL1 derived from a CPIX document, so the proxy copies each key_commit and holds no key; the entitlement WKE1 bound to a device key and the device's proof over each request; the release decision as a pure function of signed inputs (freshness, replay, key periods, offline licences and renewals); the release ticket WKT1 for a clear delivery, so the proxy never relays a key; verification of a proxy's log. The key_release module of wai-rs (feature key_release), its unit tests, and the corpus live-conformance/keys/, generated from fixed seeds by wai_key_release_vectors and checked by tests/key_release.rs. Co-Authored-By: Claude Opus 5.5 <[email protected]>
47 lines
2.4 KiB
XML
47 lines
2.4 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<cpix:CPIX xmlns:cpix="urn:dashif:org:cpix" xmlns:pskc="urn:ietf:params:xml:ns:keyprov:pskc" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" contentId="channel-0003" version="2.3">
|
|
<cpix:ContentKeyList>
|
|
<cpix:ContentKey kid="924698c3-59ad-3e89-0d5b-e75bed61d6c2" commonEncryptionScheme="cbcs">
|
|
<cpix:Data>
|
|
<pskc:Secret>
|
|
<pskc:PlainValue>sJTXjDHzwf+3WnBeszMSBg==</pskc:PlainValue>
|
|
</pskc:Secret>
|
|
</cpix:Data>
|
|
</cpix:ContentKey>
|
|
<cpix:ContentKey kid="8d1504c7-e59d-9462-9fed-63ad7e27b44a" commonEncryptionScheme="cbcs">
|
|
<cpix:Data>
|
|
<pskc:Secret>
|
|
<pskc:PlainValue>yAfs90wJAKLYnxYK+n+vaA==</pskc:PlainValue>
|
|
</pskc:Secret>
|
|
</cpix:Data>
|
|
</cpix:ContentKey>
|
|
<cpix:ContentKey kid="01e0a684-e472-167e-b200-c53a878e6f6f" commonEncryptionScheme="cbcs">
|
|
<cpix:Data>
|
|
<pskc:Secret>
|
|
<pskc:PlainValue>bt8nqfo+UDux+Y9mQypQ2w==</pskc:PlainValue>
|
|
</pskc:Secret>
|
|
</cpix:Data>
|
|
</cpix:ContentKey>
|
|
</cpix:ContentKeyList>
|
|
<cpix:DRMSystemList>
|
|
<cpix:DRMSystem systemId="94ce86fb-07ff-4f43-adb8-93d2fa968ca2" kid="924698c3-59ad-3e89-0d5b-e75bed61d6c2"/>
|
|
<cpix:DRMSystem systemId="94ce86fb-07ff-4f43-adb8-93d2fa968ca2" kid="8d1504c7-e59d-9462-9fed-63ad7e27b44a"/>
|
|
<cpix:DRMSystem systemId="94ce86fb-07ff-4f43-adb8-93d2fa968ca2" kid="01e0a684-e472-167e-b200-c53a878e6f6f"/>
|
|
</cpix:DRMSystemList>
|
|
<cpix:ContentKeyPeriodList>
|
|
<cpix:ContentKeyPeriod id="p1" index="1" start="2026-10-25T00:00:00Z" end="2026-10-25T01:00:00Z"/>
|
|
<cpix:ContentKeyPeriod id="p2" index="2" start="2026-10-25T01:00:00Z" end="2026-10-25T02:00:00Z"/>
|
|
<cpix:ContentKeyPeriod id="p3" index="3" start="2026-10-25T02:00:00Z" end="2026-10-25T03:00:00Z"/>
|
|
</cpix:ContentKeyPeriodList>
|
|
<cpix:ContentKeyUsageRuleList>
|
|
<cpix:ContentKeyUsageRule kid="924698c3-59ad-3e89-0d5b-e75bed61d6c2" intendedTrackType="ALL">
|
|
<cpix:KeyPeriodFilter periodId="p1"/>
|
|
</cpix:ContentKeyUsageRule>
|
|
<cpix:ContentKeyUsageRule kid="8d1504c7-e59d-9462-9fed-63ad7e27b44a" intendedTrackType="ALL">
|
|
<cpix:KeyPeriodFilter periodId="p2"/>
|
|
</cpix:ContentKeyUsageRule>
|
|
<cpix:ContentKeyUsageRule kid="01e0a684-e472-167e-b200-c53a878e6f6f" intendedTrackType="ALL">
|
|
<cpix:KeyPeriodFilter periodId="p3"/>
|
|
</cpix:ContentKeyUsageRule>
|
|
</cpix:ContentKeyUsageRuleList>
|
|
</cpix:CPIX>
|