kenzuya/unshackle
1
0
Fork 2
mirror of https://github.com/unshackle-dl/unshackle.git synced 2026-11-14 13:05:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Deployed 5ffa9a4 with MkDocs version: 1.6.1

Browse Source
This commit is contained in:
2026-10-14 15:59:38 +00:00
parent 36b2095d64
commit c90b976366
3 changed files with 390 additions and 356 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dev/service-architecture/index.html
+32
View File
@@ -1691,6 +1691,17 @@
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#decrypting-a-cbcs-file-yourself" class="md-nav__link">
<span class="md-ellipsis">
Decrypting a cbcs file yourself
</span>
</a>
</li>
<li class="md-nav__item">
@@ -2548,6 +2559,17 @@
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#decrypting-a-cbcs-file-yourself" class="md-nav__link">
<span class="md-ellipsis">
Decrypting a cbcs file yourself
</span>
</a>
</li>
<li class="md-nav__item">
@@ -3173,6 +3195,16 @@ needs:</p>
<p>You do not open CDM sessions or operate shaka-packager yourself. The <code>Widevine</code>/<code>PlayReady</code>
classes drive the CDM handshake and call the decryption backend. Your hook is only the
"send this challenge, give me back the license" step.</p>
<h3 id="decrypting-a-cbcs-file-yourself">Decrypting a cbcs file yourself<a class="headerlink" href="#decrypting-a-cbcs-file-yourself" title="Permanent link">&para;</a></h3>
<p>Some tracks cannot use the framework's decryption: a single cbcs file whose sample entries share
a zero default KID, or a sample entry whose content key no CDM can license and only a separate
process can use. For these, call <code>unshackle.core.drm.cbcs.decrypt_file(track.path, key_for)</code> from
<code>on_track_downloaded</code>. Set no <code>drm</code> on the track, so the framework does not try to license it.</p>
<p><code>key_for(track, entry)</code> gets the track layout and one protected <code>stsd</code> entry. It returns the
16-byte content key, or a <code>cbcs.SampleDecrypter</code>. A <code>SampleDecrypter</code> gets the protected bytes of
each sample of one fragment, cut to whole AES blocks, and returns plaintexts of the same lengths.
It handles full-sample cbcs only, not pattern encryption. <code>decrypt_file</code> writes the plaintext
back in place and removes the protection boxes, so the muxer reads a clear file.</p>
<h3 id="how-unshackle-chooses-a-cdm-and-finds-keys">How unshackle chooses a CDM and finds keys<a class="headerlink" href="#how-unshackle-chooses-a-cdm-and-finds-keys" title="Permanent link">&para;</a></h3>
<p>CDM selection is config-driven: the <code>cdm</code> map resolves a service tag (and optionally the
track quality or DRM type) to a device name, which <code>load_cdm</code> instantiates as a local