SPEKE v2.0 presets
SPEKE Version 2.0 supports the use of multiple, distinct encryption keys for audio and video tracks. MediaConvert uses presets to configure the encryption. The MediaConvert API defines these presets. The presets map encryption keys to specific audio or video tracks, based on the number of channels for audio tracks, and based on the video resolution for video tracks. MediaConvert uses specific combinations of audio and video encryption presets to support three different encryption scenarios:
Scenario 1: Unencrypted tracks and encrypted tracks
You can choose not to encrypt the audio or the video tracks by selecting the UNENCRYPTED preset in the Video encryption preset or the Audio encryption preset menus. You can’t select UNENCRYPTED for both audio and video presets, because doing so would mean that you don’t intend to encrypt any of the tracks at all. Also, you can’t combine UNENCRYPTED and SHARED presets for audio and video, because SHARED is a special preset. For more information, see Scenario 2: Single encryption key for all audio and video tracks.
The following list describes valid combinations of UNENCRYPTED presets:
-
UNENCRYPTED for audio tracks, and any video preset with a name that starts with
PRESET_VIDEO_ -
UNENCRYPTED for video tracks, and any audio preset with a name that starts with
PRESET_AUDIO_
Scenario 2: Single encryption key for all audio and video tracks
The SPEKE Version 2.0 SHARED preset uses a single encryption key for all audio and video tracks, as in SPEKE Version 1.0. When you select the SHARED preset, select it for both audio and video encryption.
Scenario 3: Multiple encryption keys for audio and video tracks
When you use a preset with a name that starts with PRESET_VIDEO_ or
PRESET_AUDIO_, MediaConvert encrypts the audio tracks and video tracks
with the number of encryption keys that the specific preset defines. The following tables
show how many keys MediaConvert requests from the key server and how those keys map to
tracks. If no track matches the criteria for a particular key, MediaConvert does not use
that key to encrypt any track.
MediaConvert encrypts I-frame only trickplay tracks with the key corresponding to their resolution.
In the following table, the Key name value is the value
of the ContentKeyUsageRule@IntendedTrackType attribute that MediaConvert uses in the
CPIX document. This is sent to the SPEKE server for a specific content key.
| Preset name | Number of keys | Key name | Minimum resolution | Maximum resolution |
|---|---|---|---|---|
| PRESET_VIDEO_1 | 1 | VIDEO | No minimum or maximum resolution. MediaConvert encrypts all tracks with the same key. | |
| PRESET_VIDEO_2 | 2 | SD | No minimum | <= 1024x576 |
| HD | > 1024x576 | No maximum | ||
| PRESET_VIDEO_3 | 3 | SD | No minimum | <= 1024x576 |
| HD | > 1024x576 | <= 1920x1080 | ||
| UHD | > 1920x1080 | No maximum | ||
| PRESET_VIDEO_4 | 4 | SD | No minimum | <= 1024x576 |
| HD | > 1024x576 | <= 1920x1080 | ||
| UHD1 | > 1920x1080 | <= 4096x2160 | ||
| UHD2 | > 4096x2160 | No maximum | ||
| PRESET_VIDEO_5 | 5 | SD | No minimum | <= 1024x576 |
| HD1 | > 1024x576 | <= 1280x720 | ||
| HD2 | > 1280x720 | <= 1920x1080 | ||
| UHD1 | > 1920x1080 | <= 4096x2160 | ||
| UHD2 | > 4096x2160 | No maximum | ||
| PRESET_VIDEO_6 | 4 | SD | No minimum | <= 1024x576 |
| HD1 | > 1024x576 | <= 1280x720 | ||
| HD2 | > 1280x720 | <= 1920x1080 | ||
| UHD | > 1920x1080 | No maximum | ||
| PRESET_VIDEO_7 | 3 | SD+HD1 | No minimum | <= 1280x720 |
| HD2 | > 1280x720 | <= 1920x1080 | ||
| UHD | > 1920x1080 | No maximum | ||
| PRESET_VIDEO_8 | 4 | SD+HD1 | No minimum | <= 1280x720 |
| HD2 | > 1280x720 | <= 1920x1080 | ||
| UHD1 | > 1920x1080 | <= 4096x2160 | ||
| UHD2 | > 4096x2160 | No maximum | ||
| SHARED | 1 | ALL | No minimum or maximum resolution. MediaConvert encrypts all video and audio tracks with the same key. | |
| UNENCRYPTED | 0 | N/A | MediaConvert does not encrypt any video track. | |
In the following table, the Key name value is the value
of the ContentKeyUsageRule@IntendedTrackType attribute that MediaConvert uses in the
CPIX document. This is sent to the SPEKE server for a specific content key.
| Preset name | Number of keys | Key name | Minimum number of channels | Maximum number of channels |
|---|---|---|---|---|
| PRESET_AUDIO_1 | 1 | AUDIO | No minimum or maximum number of channels. MediaConvert encrypts all audio and video tracks with the same key. | |
| PRESET_AUDIO_2 | 2 | STEREO_AUDIO | No minimum | 2 |
| MULTICHANNEL_AUDIO | > 2 | No maximum | ||
| PRESET_AUDIO_3 | 3 | STEREO_AUDIO | No minimum | 2 |
| MULTICHANNEL_AUDIO_3_6 | > 2 | <= 6 | ||
| MULTICHANNEL_AUDIO_7 | > 6 | No maximum | ||
| SHARED | 1 | ALL | No minimum or maximum number of channels. MediaConvert encrypts all audio and video tracks with the same key. | |
| UNENCRYPTED | 0 | N/A | MediaConvert does not encrypt any audio track. | |
Now you know how MediaConvert supports SPEKE Version 2.0 presets for unencrypted tracks and encrypted tracks. With these presets, you can use a single encryption key for all audio and video tracks, and multiple encryption keys for audio and video tracks.
