OTT Divan - some light reading, page-158

The DRM industry also operates to a number of different standrads and solutions so its fragmented as well. Considering the current state of deployment for each DRM, an operator service will typically want to implement 2 or 3 DRMs to make sure they address all the types of endpoints in the best way.

There is a tradeoff between the complexity of the service logic and the complexity on the client side to reach a certain level of user experience on the various client devices. CMAF contains within it a new Common Encryption standard that starts to standardize current industry issues around DRM encryption formats.

Common Encryption (CENC) - ISO/IEC 23001-7: 2016 - a standard means of encrypting media content payload using AES-128bit encryption and then supplying header information so that multiple concurrent DRM systems can be used to decrypt the content. This prevents separate silos of content being needed to support the myriad of DRM solutions available today which, unfortunately, are not converging at the same rate as the file containers.

The CENC is a subset of CMAF and that’s why Scot mentioned both in what he is doing.