Roku Developer Program

[cyourch]

Hi,

We need to play encrypted HLS content. The content is encrypted using PlayReady. Can this be done using the current video player? If not, will support be added to your video player to handle encrypted content? Finally, are there any developer programs that would allow native code to be included on the ROKU player?

Thanks!

Chris

[RokuKevin]

Encrypted HLS is done via AES-128 bit encryption, and is supported by Roku. This is not PlayReady.

--Kevin

[Anonymous]

As Kevin alluded to, PlayReady is not part of the HLS spec. AES-128 is part of the spec and we support that (and there are channels using it) for encrypting content via HLS.

As to native content, our SDK does not permit native code. What application do you have where that might be needed. Feel free to email me to discuss if you'd like.

Patrick

[bxthomas]

Patrick, this question is more about the key exchange mechanism than the content encryption. The HLS spec only specifies that the encryption key be sent in the clear or retrieved via a key url. Do any of your current channel partners, that are using HLS with encrypted streams, use any other method of key exchange such as playready? Or is there some other method of providing the key to the HLS player?

[RokuKevin]

We recommend and support using mutual SSL authentication for the key exchange. This will completely protect your key as the client certs assure that your server is communicating with a Roku box and the authoritative devid header assures your server is communicating with your application on the Roku box. The key download is protected via SSL.

Here's a post about setting up an apache server to authenticate the Roku client cert and devid header:
viewtopic.php?f=34&t=27562&p=171795&hilit=SSL#p171752

--Kevin

[jane91191]

Regarding to the AES-128 bit encryption for HLS streaming on Roku, if Roku fails to retrieve the AES key (for example due to key rotation), does Roku have any retry mechanism to get the new AES key?

[chaklasiyanikun]

You trying like swift language delegate method. correct? But, Roku doesn't provide anything like this. Roku's first priority regarding AES-128 right key must available on the server. Please refer to this article. It's available on the Partner knowledge center.