ISO 26429-6:2008

Overview

ISO 26429-6:2008 - "Digital cinema (D-cinema) packaging - Part 6: MXF track file essence encryption" defines how to encrypt the sensitive audio and picture essence inside D‑Cinema MXF track files. The standard specifies the syntax of encrypted non‑interleaved MXF frame‑wrapped track files and provides a reference decryption model. It mandates the use of the Advanced Encryption Standard (AES) (CBC mode per NIST SP 800‑38A) for essence encryption and optionally supports HMAC‑SHA1 for message integrity. The specification is focused on secure distribution to exhibition sites; it assumes cryptographic keys and usage rights will be made available by other systems and does not define key management.

Key topics

• Encrypted Essence Container
  Replaces the plaintext Essence Container Label with a specific Encrypted Essence Container label so receivers can quickly detect encrypted tracks and “fail fast” if decryption is not available.

• Cryptographic Framework
  Metadata structures in the MXF header that describe the algorithms, original essence label, and links to keys needed to decrypt the track file.

• Encrypted Triplets (KLV)
  Individual KLV triplets containing essence are wrapped as Encrypted Triplets. Only the value portion is encrypted, allowing independent decryption from any point in the file (random access).

• Algorithms and Modes
  Uses AES (CBC mode) for encryption and HMAC‑SHA1 (optional) for integrity verification; follows referenced standards like FIPS‑197 and NIST SP 800‑38A.

• Reference Decryption Model
  Defines processing modules and workflows for decryption and optional integrity checking but intentionally omits key distribution and rights management details.

• Scope limitations
  Limited to D‑Cinema track files; does not define a generic MXF encryption framework and does not prescribe watermarking/fingerprinting (but does not preclude them). The standard also notes possible patent claims related to its technologies.

Applications

• Secure distribution of feature films and trailers to cinemas (D‑Cinema exhibition)
• Post‑production and mastering workflows that prepare encrypted MXF track files for delivery
• Playback and server software used in cinema servers that must implement decryption and integrity verification
• Forensic and security architectures where per‑track encryption and per‑triplet random access decryption are required

Who should use it

• Film studios and content distributors securing D‑Cinema deliverables
• Cinema server and playback vendors implementing MXF decryption and integrity checks
• Post‑production houses preparing distribution masters
• Security architects and integrators designing D‑Cinema delivery chains

Related standards

• SMPTE 377M (MXF file format), SMPTE 429‑3 (Sound and Picture Track File), SMPTE 336M (KLV)
• NIST SP 800‑38A, FIPS 197 (AES), IETF RFC 2104 (HMAC), IETF RFC 2898 (PKCS#5)

Keywords: ISO 26429-6:2008, digital cinema, D‑Cinema, MXF, essence encryption, AES, HMAC‑SHA1, MXF track file, encrypted triplet, cryptographic framework.