Decryption Settings

This topic contains details for encoding settings related to decryption of videos.

Overview

Zencoder supports processing encrypted media files using the “encryption at rest” paradigm; we retrieve the encrypted files from your server, and only decrypt them while processing. The decrypted version of the file is removed immediately after processing, keeping your data secure.

We support both AES-128 and AES-256 encrypted files in CBC and CTR modes. Decryption parameters must be included with your job request. Decryption is enabled when either a decryption_key or decryption_key_url is specified.

decryption_method

decryption_method:String

API Versions: V2

Parent: input

Default: aes-128-cbc (if decryption_key or decryption_key_url are set)

Valid Values: "none", "aes-128-cbc", "aes-128-ctr", "aes-256-cbc", or "aes-256-ctr"

Compatible Job Types: vod

Example: aes-128-cbc

Description:

Set the decryption algorithm to use for decrypting.

  {
    "input": "s3://zencodertesting/test.mov",
    "decryption_method": "aes-128-cbc"
  }

decryption_key

decryption_key:String

API Versions: V2

Parent: input

Valid Values: A hexadecimal string of 16 octets (32 chars long, optional "0x" prefix)

Compatible Job Types: vod

Example: 1234567890abcdef1234567890abcdef

Description:

Set the decryption key to use for an encrypted input.

  {
    "input": "s3://zencodertesting/test.mov",
    "decryption_key": "1234567890abcdef1234567890abcdef"
  }

decryption_key_url

decryption_key_url:String

API Versions: V2

Parent: input

Valid Values: A URL to a file containing a 16-byte binary key

Compatible Job Types: vod

Example: http://example.com/encryption.key

Description:

The URL of a decryption key file to use, with a key in binary form (16 bytes total). This is ignored if a decryption_key is specified.
  {
    "input": "s3://zencodertesting/test.mov",
    "decryption_key_url": "http://example.com/encryption.key"
  }

decryption_password

decryption_password:String

API Versions: V2

Parent: input

Valid Values: A string

Compatible Job Types: vod

Example: super-secret-password

Description:

The password used in combination with the key to decrypt the input file.

  {
    "input": "s3://zencodertesting/test.mov",
    "decryption_password": "super-secret-password"
  }