ISO/IEC INTERNATIONAL STANDARD 23009-4 Second edition 2018-10 Corrected version 2019-03 Information technology Dynamic adaptive streaming over HTTP (DASH) - Part 4: Segment encryption and authentication TechnologiesdeI'information-Diffusion enfluxadaptatif dynamique sur HTTP (DASH) - Partie 4: Cryptage et authentification des segments Reference number IEC IS0/IEC23009-4:2018(E) @IS0/IEC2018 IS0/IEC23009-4:2018(E) COPYRIGHTPROTECTEDDOCUMENT IS0/IEC2018 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting below or Iso's member body in the country of the requester. ISO copyright office CP 401 : Ch. de Blandonnet 8 CH-1214 Vernier, Geneva Phone:+4122749 0111 Fax: +41 22 749 09 47 Email: [email protected] Website: www.iso.org Published in Switzerland ii ISO/IEC 2018 - All rights reserved IS0/IEC23009-4:2018(E) Contents Page Foreword ..iv Introduction. .. 1 Scope. 2 Normative references 3 Terms,definitions, abbreviated terms and notations 3.1 Terms and definitions .1 3.2 Abbreviated terms.... 3.3 Notations. .3 4 Segment encryption and authentication .3 4.1 Segment encryption. ..3 4.2 Segment authentication 4 4.3 MPD security ..5 ..5 5 Signalling encryption and authentication 5.1 Encryption declaration .5 5.1.1 ContentProtectionelement. .5 5.1.2 SegmentEncryption element. .6 5.1.3 Licenseelement .7 5.1.4 Common cryptoperiod properties .8 5.1.5 CryptoPeriod element. 9 5.1.6 CryptoTimeline element .10 5.2 Authentication declaration. .11 5.2.1 General .11 5.2.2 ContentAuthenticity element. .12 5.2.3 URL derivation. ..12 Segment encryption. ..13 6 6.1 Segment format. .13 6.2 .13 Keysystems 6.2.1 General. .13 6.2.2 License-based key systems .13 6.3 Encryption systems. .13 6.3.1 .13 General. 6.3.2 AES-128CBCencryptionsystem .14 6.3.3 AES-128GCMencryption system .14 6.3.4 Commonencryptionsystem.. ..14 6.4 Cryptoperiods .15 6.4.1 General ..15 6.4.2 Assigning segmentsto cryptoperiods .15 6.4.3 Key derivation .16 6.4.4 IV derivation .16 6.4.5 AADderivation .17 6.5 Adding new encryption and key systems .17 7 Segment authentication. .18 7.1 General. .18 7.2 ..18 Algorithms 7.2.1 SHA-256 ..18 7.2.2 HMAC-SHA1 ..18 AnnexA (normative)XML schema. .19 AnnexB(informative)Implementationguidelines .21 Annex C (informative) MPD examples and usage .22 @ IS0/IEC 2018 - All rights reserved ili