Adobe 65029121 Administration Guide - Page 119

Scramble tool

Get Adobe 65029121 - Flash Media Streaming Server PDF manuals and user guides
UPC - 883919169231
View all Adobe 65029121 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 119 highlights

FLASH MEDIA SERVER 4.5 CONFIGURATION AND ADMINISTRATION 115 Administering the server Scramble tool The scramble tool obfuscates data on disk to prevent people who have access to the system from reading sensitive information. Protected HTTP Dynamic Streaming (PHDS) and Protected HTTP Live Streaming (PHLS) use the scramble tool to obfuscate credential passwords and the content encryption key. To create a new content encryption key, use the scramble tool. The scramble tool uses AES-128 and a hard-coded key to obfuscate data. The data is unscrambled using the same hardcoded key. The key is a random sequence of bytes generated by the scramble tool. Important: The hard-coded key can be retrieved from source code. It's a good idea to use additional techniques to secure the data as well. The scramble tool is installed to the following location: rootinstall/tools/scramble The scramble tool supports the following options: Option Description -scramble Takes an input string from the command line, encrypts it, and prints out a Base64 encoded string. Use this option to encrypt credential passwords.This option assumes that the string to scramble is already Base64 encoded. The tool doesn't decode the string. -randCode Generates a sequence of random bytes. Specify the sequence length in the command line parameter.The output is formatted as a C++ array initialization code snippet.The installer uses this option to generate the scrambling key and IV that are hard-coded in the scrambler tool and the unscrambling utility function. -randBase64 Generates a sequence of random bytes. Specify the sequence length in the command line parameter.The output is a Base64 string encoding the random data.Use this option to generate a content encryption key. Use the output of this command as the input for the -scramble option. Combining those two commands generates data in the same format as the -KeyGen option. -KeyGen [-f ] Generates a sequence of random bytes, Base64 encodes it, encrypts the resulting string and prints out a Base64 encoded string of the result. Specify the sequence length in the command line parameter. Use the -f option to redirect the output to an output file. The Flash Media Server installer uses this option to generate a unique PHDS and PHLS content encryption key. For example, the following command outputs a 16 byte key: scramble -KeyGen 16 -f server.key Last updated 11/28/2012

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
115
FLASH
MEDIA
SERVER
4.5
CONFIGURATION
AND
ADMINISTRATION
Administering the server
Last updated 11/28/2012
Scramble tool
The scramble tool obfuscates data on disk to prevent people who have access to the system from reading sensitive
information. Protected HTTP Dynamic Streaming (PHDS) and Protected HTTP Live Streaming (PHLS) use the
scramble tool to obfuscate credential passwords and the content encryption key. To create a new content encryption
key, use the scramble tool.
The scramble tool uses AES-128 and a hard-coded key to obfuscate data. The data is unscrambled using the same hard-
coded key. The key is a random sequence of bytes generated by the scramble tool.
Important:
The hard-coded key can be retrieved from source code. It’s a good idea to use additional techniques to secure
the data as well.
The scramble tool is installed to the following location:
rootinstall
/tools/scramble
The scramble tool supports the following options:
For example, the following command outputs a 16 byte key:
scramble -KeyGen 16 -f server.key
Option
Description
-scramble <string-to-
scramble>
Takes an input string from the command line, encrypts it, and prints out a
Base64 encoded string. Use this option to encrypt credential passwords.This
option assumes that the string to scramble is already Base64 encoded. The
tool doesn't decode the string.
-randCode <number-of-
bytes>
Generates a sequence of random bytes. Specify the sequence length in the
<number-of-bytes>
command line parameter.The output is formatted as a
C++ array initialization code snippet.The installer uses this option to generate
the scrambling key and IV that are hard-coded in the scrambler tool and the
unscrambling utility function.
-randBase64 <number-of-
bytes>
Generates a sequence of random bytes. Specify the sequence length in the
<number-of-bytes>
command line parameter.The output is a Base64 string
encoding the random data.Use this option to generate a content encryption
key. Use the output of this command as the
<string-to-scramble>
input
for the
-scramble
option. Combining those two commands generates data
in the same format as the -
KeyGen
option.
-KeyGen <number-of-
bytes> [-f <output-
file>]
Generates a sequence of random bytes, Base64 encodes it, encrypts the
resulting string and prints out a Base64 encoded string of the result.
Specify the sequence length in the
<number-of-bytes>
command line
parameter.
Use the
-f
option to redirect the output to an output file.
The Flash Media Server installer uses this option to generate a unique PHDS
and PHLS content encryption key.