From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 14328446C9 for ; Thu, 22 Dec 2022 17:50:42 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 9C8CA68AF35; Thu, 22 Dec 2022 19:50:38 +0200 (EET) Received: from mail-lj1-f182.google.com (mail-lj1-f182.google.com [209.85.208.182]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 0189A68004A for ; Thu, 22 Dec 2022 19:50:31 +0200 (EET) Received: by mail-lj1-f182.google.com with SMTP id f20so2650011lja.4 for ; Thu, 22 Dec 2022 09:50:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=EIKA9hWduWK3EiFZrVBG4RytgEl0AyyNAMY0M9tuRno=; b=fGcrHLNbKjDdcxnO2KyeED9tSB+BD/j0XZZhVpdhPsDJtpp77246prfwRi9LM4+ikf LMFAgbrDweWcUiUnCtSScCPgtwPC0E+MTJJXEkoos+ZLAbOr1TDuHyxp2JzqtvqDuhm7 EkVM9g3HUv8rcO+8yjvk2r2gMhl6009cXs2kSOY79PvoBA3scqU29azMVZWsokDoQfa1 lDQR2Ta7O+1peqtvn5kp+xJpf2PTbNhk3Mizw/meaOZe2Zc9ctTkG11BlxWtNjl5zoxa TIbqP8kw8B9HZSGb44X0Xi6UyvkgqYQ4kWEIVcS9/CzFYrgHjYDF050Q4MaXg7N4zX+g c9TQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=EIKA9hWduWK3EiFZrVBG4RytgEl0AyyNAMY0M9tuRno=; b=s+azFUDLKmmU+nh/sP35Xf5WAiGHdoLU3NK3epk6dmCOTtkurnKTTqeGAQLntR8daW Hn/zDKUMYWXBc0yYwAD1gs3BehzTQa8BKQWt75I4KVmPjPZQG5ykSa26peVYTSj4C6uD HfpTldITE6tPkqUGyOakR2a5XX6QocYwyS5YAgyyJwO7VxVdefVIqKCztTwc2aElH66C Pppffc4ssXJ3NgeNas/VyyBTSISwQ11yYz/6h38/bB097d44gmjAioVoI+4rF3g2wPPa EWpm/TrrBLMUKbl4CT70UJVaAg3toxv1JsasWtgJ4VxRc+die+C1WwziHpY/UU3QI9E1 f+JQ== X-Gm-Message-State: AFqh2kqKc/yP5MOAUvOwrGnuHTFFgzHPJu/BuCwFWpxlsJmKgXcxiSbs O//TfrPw6HMGIyYCAu1wmbyLGtneYspiTR0Clc64hEAgyJM= X-Google-Smtp-Source: AMrXdXtaCR0v7nQJQwX0Tbggtza+YrDwR9DzXAIl0pBgmzb6D8FDUMa7iHqyU91ObOY4uKh2NsfgGdwxMdw+gj7+Iq4= X-Received: by 2002:a2e:86d1:0:b0:27b:5a96:6a60 with SMTP id n17-20020a2e86d1000000b0027b5a966a60mr562576ljj.75.1671731430148; Thu, 22 Dec 2022 09:50:30 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Hendrik Leppkes Date: Thu, 22 Dec 2022 18:50:16 +0100 Message-ID: To: FFmpeg development discussions and patches Subject: Re: [FFmpeg-devel] Would a crypto file be acceptable? X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: On Thu, Dec 22, 2022 at 4:53 PM Mark Gaiser wrote: > > On Thu, Dec 22, 2022 at 11:40 AM Nicolas George wrote: > > > Mark Gaiser (12022-12-21): > > > While this works just fine, it's limited in use because the cryptography > > > details have to be passed on the command line. Applications that might > > well > > > support much of ffmpeg functionality can't easily hook into the crypto > > > functionality. Take KODI for example, it allows playback of many of the > > > formats ffmpeg supports but anything with crypto just isn't possible. In > > > fact, anything that requires custom command line arguments isn't > > possible. > > > [2] > > > > > > My idea is to make a new file format that would be implemented and > > specced > > > within [1]. My proposed format would be: > > > > > > --- > > > CRYPTO-VERSION:1 > > > CRYPTO-KEY:URI:..... > > > CRYPTO-IV:URI:..... > > > encrypted_file > > > --- > > > > The concat demuxer can already contain options, and despite is name it > > can be used with a single file. > > > > Could you elaborate on how to use that:? > > The end result needs to be: > ffplay > > that needs to translate to: > ffplay crypto://encrypted_file -decryption_key $AES_KEY -decryption_iv > $AES_IV > > I briefly looked at the concat demuxer but couldn't see how to get this > desired result. > If you know how, please let me know! > Create a file like this: https://pastebin.com/hFSeXsZt The first line is so ffmpeg can probe the format, then just have a "file" line followed by any number of "option" lines. Note that options are only allowed if safe-mode is disengaged, so the app in question would have to pass "-safe 0" to the execution in some manner. But this is something you would have to ask the app to do, as this protection exists for a reason. - Hendrik _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".