eec5d8dfa0
The scheme (cenc, cbc1, cens, cbcs; the HLS methods AES-128, SAMPLE-AES, AES-256-GCM) and the key delivery (HLS key URI, Clear Key, a content protection system by its system ID) of each released key; the commitment list WKL1 derived from a CPIX document, so the proxy copies each key_commit and holds no key; the entitlement WKE1 bound to a device key and the device's proof over each request; the release decision as a pure function of signed inputs (freshness, replay, key periods, offline licences and renewals); the release ticket WKT1 for a clear delivery, so the proxy never relays a key; verification of a proxy's log. The key_release module of wai-rs (feature key_release), its unit tests, and the corpus live-conformance/keys/, generated from fixed seeds by wai_key_release_vectors and checked by tests/key_release.rs. Co-Authored-By: Claude Opus 5.5 <[email protected]>
17 lines
793 B
XML
17 lines
793 B
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<cpix:CPIX xmlns:cpix="urn:dashif:org:cpix" xmlns:pskc="urn:ietf:params:xml:ns:keyprov:pskc" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" contentId="film-0005" version="2.3">
|
|
<cpix:ContentKeyList>
|
|
<cpix:ContentKey kid="04b51c5b-3f9a-bc20-7a97-47eeb105b317" commonEncryptionScheme="cenc">
|
|
<cpix:Data>
|
|
<pskc:Secret>
|
|
<pskc:EncryptedValue>
|
|
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
|
|
<xenc:CipherData>
|
|
<xenc:CipherValue>mcX/fRozqUQSZMFtO7Cj6EIa8A8tdoAsxJaurN7c5XA=</xenc:CipherValue>
|
|
</xenc:CipherData>
|
|
</pskc:EncryptedValue>
|
|
</pskc:Secret>
|
|
</cpix:Data>
|
|
</cpix:ContentKey>
|
|
</cpix:ContentKeyList>
|
|
</cpix:CPIX>
|