Custom Encryption Keys for HLS AES Encryption

[Naveen Kumar]

Hey Folks,
Our use case involves using Ant Media Server for WebRTC Ingest and HLS Output. We want to use HLS encryption, but the encryption keys will be provided by the client(i.e from the frontend), which will be different for every user doing the stream.
I went through the article of how to use HLS AES encryption in the guides, but it seems we need to provide a KEY_INFO file which will contain a single key, however we want that at run-time when the user starts doing the stream, the key will be provided by the frontend of the application which shall be used for HLS AES Ecnryption.
Is there any solution for achieving the same.

Reference: https://antmedia.io/unknown-5-webrtc-stream-features/ - 2nd point.

Thanks in advance.

[Connessione]

On 3/31/2023 at 10:26 PM, Naveen Kumar said:

Hey Folks,
Our use case involves using Ant Media Server for WebRTC Ingest and HLS Output. We want to use HLS encryption, but the encryption keys will be provided by the client(i.e from the frontend), which will be different for every user doing the stream.
I went through the article of how to use HLS AES encryption in the guides, but it seems we need to provide a KEY_INFO file which will contain a single key, however we want that at run-time when the user starts doing the stream, the key will be provided by the frontend of the application which shall be used for HLS AES Ecnryption.
Is there any solution for achieving the same.

Reference: https://antmedia.io/unknown-5-webrtc-stream-features/ - 2nd point.

Thanks in advance.

At a glance, It seems to be a server wide setting and not a per webapp or per session setting. Which is why it cannot be different for each client.

[Naveen Kumar]

15 minutes ago, Connessione said:

At a glance, It seems to be a server wide setting and not a per webapp or per session setting. Which is why it cannot be different for each client.

So, can it be considered that Ant Media Server does not allow to do so, however I believe building our own media server would allow building a solution to specify encryption keys for HLS AES encryption per client.

[Connessione]

Well building your own media server only for AES encryption would seem a little far fetched 😉. If you write to support they can tell you if this kind of feature can be added through paid development or not. I know several media serves and I understand most of them use one key through. What you are asking for is sort of like DRM.

Other than this if your aim is just security there are other means as well.  If you have less number of publishers you can even have separate servers for separate publishers and have separate keys for them. One server one key.