3.1.5.2.6 Streaming AES Counter Mode
The transmitter is required to leave some transport stream packets in the clear on PIDs that are protected via Streaming AES Counter Mode and for which contain either the 4th byte of an enabled start code sequence or one or more bytes of a start code payload. The payload size is configured by a CipherDelay count on each enabled start code. In addition, the transmitter is required to include a Stream Info Table in front on every packet containing one or more detected start codes that are enabled.
The transmitter MUST ensure that no counter / offset is reused when streaming from any given content key. To accommodate this, the transmitter MAY increment the AES counter with each transition from unencrypted to encrypted content, and clear the lower 64 bits every time it puts a new count into the upper 64 bits.

Figure 9: Streaming AES Counter Mode
Start Code Detection and Cipher Delay: The transmitter MUST mark all transport stream packets encrypted using streaming AES counter mode with the transport_scrambling_control set to the value 2.
The transmitter MUST use AES Counters that leaves bit 127, of the 128 bit counter, as zero.