X-Git-Url: https://git.carlh.net/gitweb/?a=blobdiff_plain;f=src%2Fdecrypted_kdm.h;h=7db2937a0910e86cb128734b1a784d0dcdcdd0c2;hb=3d53fb23efa153e10c37071a4ecac48b74c2dbd6;hp=4ac95dc6fbc867f7369dae4463f91882b9afdd8b;hpb=d927e9b913606f4fc982885c7582ecaf0e3c5a1a;p=libdcp.git

diff --git a/src/decrypted_kdm.h b/src/decrypted_kdm.h
index 4ac95dc6..7db2937a 100644
--- a/src/decrypted_kdm.h
+++ b/src/decrypted_kdm.h
@@ -1,5 +1,5 @@
 /*
-    Copyright (C) 2013-2016 Carl Hetherington <cth@carlh.net>
+    Copyright (C) 2013-2021 Carl Hetherington <cth@carlh.net>
 
     This file is part of libdcp.
 
@@ -31,30 +31,39 @@
     files in the program, then also delete it here.
 */
 
-#ifndef LIBDCP_DECRYPTED_KDM_H
-#define LIBDCP_DECRYPTED_KDM_H
 
 /** @file  src/decrypted_kdm.h
- *  @brief DecryptedKDM class.
+ *  @brief DecryptedKDM class
  */
 
+
+#ifndef LIBDCP_DECRYPTED_KDM_H
+#define LIBDCP_DECRYPTED_KDM_H
+
+
 #include "key.h"
 #include "local_time.h"
 #include "decrypted_kdm_key.h"
-#include "types.h"
 #include "certificate.h"
 #include <boost/filesystem.hpp>
 #include <boost/optional.hpp>
 
+
+struct decrypted_kdm_test;
+
+
 namespace dcp {
 
+
 class DecryptedKDMKey;
 class EncryptedKDM;
 class CertificateChain;
 class CPL;
+class ReelFileAsset;
+
 
 /** @class DecryptedKDM
- *  @brief A decrypted KDM.
+ *  @brief A decrypted KDM
  *
  *  This is a KDM that has either been decrypted by a target private key, or one which
  *  has been created (by some other means) ready for encryption later.
@@ -84,6 +93,19 @@ public:
 		std::string issue_date
 		);
 
+	/** Construct a DecryptedKDM containing a given set of keys.
+	 *  @param keys Keys to be included in the DecryptedKDM.
+	 */
+	DecryptedKDM (
+		std::string cpl_id,
+		std::map<std::shared_ptr<const ReelFileAsset>, Key> keys,
+		LocalTime not_valid_before,
+		LocalTime not_valid_after,
+		std::string annotation_text,
+		std::string content_title_text,
+		std::string issue_date
+		);
+
 	/** Create a DecryptedKDM by taking a CPL and setting up to encrypt each of its
 	 *  assets with the same symmetric key.
 	 *
@@ -93,7 +115,7 @@ public:
 	 *  @param not_valid_after End time for the KDM.
 	 */
 	DecryptedKDM (
-		boost::shared_ptr<const CPL> cpl,
+		std::shared_ptr<const CPL> cpl,
 		Key key,
 		LocalTime not_valid_before,
 		LocalTime not_valid_after,
@@ -105,23 +127,34 @@ public:
 	/** Encrypt this KDM's keys and sign the whole KDM.
 	 *  @param signer Chain to sign with.
 	 *  @param recipient Certificate of the projector/server which should receive this KDM's keys.
-	 *  @param trusted_devices Extra trusted devices which should be written to the KDM (recipient will be written
+	 *  @param trusted_devices Thumbprints of extra trusted devices which should be written to the KDM (recipient will be written
 	 *  as a trusted device automatically and does not need to be included in this list).
 	 *  @param formulation Formulation to use for the encrypted KDM.
+	 *  @param disable_forensic_marking_picture true to disable forensic marking of picture.
+	 *  @param disable_forensic_marking_audio if not set, don't disable forensic marking of audio.  If set to 0,
+	 *  disable all forensic marking; if set above 0, disable forensic marking above that channel.
 	 *  @return Encrypted KDM.
 	 */
 	EncryptedKDM encrypt (
-		boost::shared_ptr<const CertificateChain> signer,
+		std::shared_ptr<const CertificateChain> signer,
 		Certificate recipient,
-		std::vector<Certificate> trusted_devices,
-		Formulation formulation
+		std::vector<std::string> trusted_devices,
+		Formulation formulation,
+		bool disable_forensic_marking_picture,
+		boost::optional<int> disable_forensic_marking_audio
 		) const;
 
-	void add_key (std::string type, std::string key_id, Key key, std::string cpl_id);
+	/** @param type (MDIK, MDAK etc.)
+	 *  @param key_id Key ID
+	 *  @param key The actual symmetric key
+	 *  @param cpl_id ID of CPL that the key is for
+	 */
+	void add_key (boost::optional<std::string> type, std::string key_id, Key key, std::string cpl_id, Standard standard);
+
 	void add_key (DecryptedKDMKey key);
 
 	/** @return This KDM's (decrypted) keys, which could be used to decrypt assets. */
-	std::list<DecryptedKDMKey> keys () const {
+	std::vector<DecryptedKDMKey> keys () const {
 		return _keys;
 	}
 
@@ -138,14 +171,22 @@ public:
 	}
 
 private:
+
+	friend struct ::decrypted_kdm_test;
+
+	static void put_uuid (uint8_t ** d, std::string id);
+	static std::string get_uuid (unsigned char ** p);
+
 	LocalTime _not_valid_before;
 	LocalTime _not_valid_after;
 	boost::optional<std::string> _annotation_text;
 	std::string _content_title_text;
 	std::string _issue_date;
-	std::list<DecryptedKDMKey> _keys;
+	std::vector<DecryptedKDMKey> _keys;
 };
 
+
 }
 
+
 #endif