Add support for encrypted WebM files as defined in the RFC.

media/webm/webm_cluster_parser.cc

Index: media/webm/webm_cluster_parser.cc
diff --git a/media/webm/webm_cluster_parser.cc b/media/webm/webm_cluster_parser.cc
index be5e724c14af8d4f0dc23c4f1d98b7e401a031be..312beab3f79705b49f401ac74952c5f19ae92543 100644
--- a/media/webm/webm_cluster_parser.cc
+++ b/media/webm/webm_cluster_parser.cc
@@ -5,12 +5,34 @@
 #include "media/webm/webm_cluster_parser.h"
 
 #include "base/logging.h"
+#include "base/sys_byteorder.h"
 #include "media/base/data_buffer.h"
 #include "media/base/decrypt_config.h"
 #include "media/webm/webm_constants.h"
 
 namespace media {
 
+// Generates a 16 byte CTR counter block. The CTR counter block format is a
+// CTR IV appended with a CTR block counter. |iv| is a CTR IV. |iv_size| is
+// the size of |iv| in bytes. Returns counter block on success. Returns empty
+// string on failure.
+static std::string GenerateCounterBlock(const uint8* iv, int iv_size) {
+  if (iv_size <= 0 || iv_size > WebMClusterParser::kDecryptionKeySize)

[ddorwin, 2012/07/13 00:48:00]

so we do have a specific key size. are we not spec compliant?

[fgalligan1, 2012/07/13 21:40:41]

We have a specific key size. I.e. 128 bits. We have a specific Counter Block
size. I.e. 16 bytes because we specify CTR and 128 bit key encryption. We also
specify an IV size of 8 bytes. At first I had this in aes_decryptor and left in
general because CENC supports 8 and 16 byte counter blocks (though they call
them IVs which screws up the terms.) But now that this is in the muxer and we
specify 8 bytes for the IV I will check that.

+    return std::string();
+
+  char counter_block_data[WebMClusterParser::kDecryptionKeySize];
+
+  // Set the IV.
+  memcpy(counter_block_data, iv, iv_size);
+
+  // Set block counter to all 0's.
+  memset(counter_block_data + iv_size,
+         0,
+         WebMClusterParser::kDecryptionKeySize - iv_size);
+
+  return std::string(counter_block_data, WebMClusterParser::kDecryptionKeySize);
+}
+
 WebMClusterParser::WebMClusterParser(int64 timecode_scale,
                                      int audio_track_num,
                                      int video_track_num,
@@ -193,15 +215,35 @@ bool WebMClusterParser::OnBlock(int track_num, int timecode,
   base::TimeDelta timestamp = base::TimeDelta::FromMicroseconds(
       (cluster_timecode_ + timecode) * timecode_multiplier_);
 
+  // Every encrypted Block has an HMAC and IV prepended to it. Current encrypted
+  // WebM request for comments specification is here
+  // http://wiki.webmproject.org/encryption/webm-encryption-rfc
+  bool encrypted = track_num == video_.track_num() &&
+                   video_encryption_key_id_.get();
+  // If encrypted skip past the HMAC. Encrypted buffers must include the IV and
+  // the encrypted frame because the decryptor will verify this data before
+  // decryption. The HMAC and IV will be copied into DecryptConfig.
+  int offset = (encrypted) ? kWebMHmacSize : 0;
+
   // The first bit of the flags is set when the block contains only keyframes.
   // http://www.matroska.org/technical/specs/index.html
   bool is_keyframe = (flags & 0x80) != 0;
   scoped_refptr<StreamParserBuffer> buffer =
-      StreamParserBuffer::CopyFrom(data, size, is_keyframe);
+      StreamParserBuffer::CopyFrom(data + offset, size - offset, is_keyframe);
+
+  if (encrypted) {
+    uint64 network_iv;
+    memcpy(&network_iv, data + kWebMHmacSize, sizeof(network_iv));
+    const uint64 iv = base::NetToHost64(network_iv);
+
+    std::string webm_iv =

[ddorwin, 2012/07/13 00:48:00]

not really an IV anymore is it?

[fgalligan1, 2012/07/13 21:40:41]

Done.

+        GenerateCounterBlock(reinterpret_cast<const uint8*>(&iv), sizeof(iv));

[ddorwin, 2012/07/13 00:48:00]

Why did you move this logic here? Is this what ISO does?

[fgalligan1, 2012/07/13 21:40:41]

Yeah. And ISO can generate 2 different types of counter blocks, but they will
still be used the same and will be 16 bytes. Also the generation of the counter
block is defined by WebM spec.

 
-  if (track_num == video_.track_num() && video_encryption_key_id_.get()) {
     buffer->SetDecryptConfig(scoped_ptr<DecryptConfig>(new DecryptConfig(
-        video_encryption_key_id_.get(), video_encryption_key_id_size_)));
+        video_encryption_key_id_.get(), video_encryption_key_id_size_,
+        reinterpret_cast<const uint8*>(webm_iv.data()), webm_iv.size(),
+        data, kWebMHmacSize,
+        sizeof(iv))));
   }
 
   buffer->SetTimestamp(timestamp);