Stream Encryption

Streams can be encrypted end-to-end, using fixed-key AES encryption. There are multiple options for encrypting the stream payload:

• Zixi Feeder output – Zixi Feeder can encrypt outputs using a fixed key (AES 128, AES 192, AES 256) which can be entered into the output settings or automatically generated. 
• Zixi Broadcaster input – input streams can be encrypted by Zixi Broadcaster using a fixed key (AES 128, AES 192, AES 256), which can be entered into the input settings or automatically generated.

Zixi Broadcaster can be configured to decrypt contribution streams using a matching key, or to securely forward encrypted streams to Receivers. This enables you to transmit the stream end-to-end with only the edge applications being able to see or analyze the traffic.  

To encrypt an output stream in Zixi Feeder:

1. In the Zixi Feeder navigation, click Outputs.
2. Click + New Output.
3. In the Type field select Push to Broadcaster.
4. Fill in the output details as needed.
5. At the bottom, select the Show all Settings checkbox.
6. Select the Advanced Properties checkbox.
7. In the Encryption Type field, select AES 128, AES 192, AES 256 for fixed key or Automatic for automatically system-generated encryption.
8. If you have selected one of the fixed key encryptions, enter your own encryption key into the Key field or click Generate to have the system automatically generate a key.
   The identical key should be used to decrypt the stream on the other end. 
   
9. Click OK.

To encrypt an input stream in Zixi Broadcaster/ZEC:

1. In the Zixi Broadcaster navigation, click Inputs.
2. Click + New Input.
3. Select the desired input type (Push, Pull etc.).
4. Fill in the input details as needed.
5. At the bottom, select the Enable Encryption checkbox.
6. In the Encryption Type field, select AES 128, AES 192 or AES 256 for fixed key encryption.
7. In the Encryption Key field, enter your own key or click Generate to have the system automatically generate a key. The identical key should be used to decrypt the stream on the other end. 
   
8. Click OK.

To decrypt an input stream in Zixi Broadcaster/ZEC:

1. In the Zixi Broadcaster navigation, click Inputs.
2. Click + New Input.

3. Select the desired input type.

   Decryption is only supported for Zixi protocol Push or Pull inputs.

4. Fill in the input details as needed.
5. At the bottom, select the Decrypt Stream checkbox.
6. In the Decryption Type field, select AES 128, AES 192 or AES 256 for fixed key decryption.
7. In the Decryption Key field, enter the exact same key that was used to encrypt the stream. 
    
8. Click OK.

To decrypt a stream in Zixi Receiver: 

1. In the Zixi Receiver navigation, click Inputs. 
2. Click + New Input.
3. Select Pull.
4. Fill in the input details as needed.
5. At the bottom, in the Decryption type field, select from the drop-down list AES 128, AES 192 or AES 256 for fixed decryption or None if no decryption is needed.
6. In the Decryption key field, enter the exact same key that was used to encrypt the stream.
   
   
   
7. Click OK.