In most streaming video workflows, the option to encrypt video is a processing step between the output of the video encoder and the input of the distribution platform. The operations that are often combined are segmentation of video streaming into delivery packets, running encryption over those packets and building of a manifest file that references both the packets and the identifiers necessary for video players to request a playback license. The overall operation is often termed “packaging”. When DRM is used, the actual key values are requested from the DRM service (which assures appropriate randomization etc.) and are paired with the content identifiers to be used to retrieve those keys at playback. Wherever the keys are generated, the storage of those keys is wholly trusted to the DRM service. See the overview of our Universal DRM service. While it makes the most sense from a security perspective to have video stored in a protected format at the origin of a CDN , there are also examples of Just In Time (JIT) packaging systems, where the various packaging steps are triggered in real-time by end-user device requests and where, because of this real-time treatment, the process can adapt to specific device requirements.