2.4.2 Cryptographic Requirements for Receivers
The following security requirements MUST be implemented by receivers:
The block cipher is AES with 128-bit keys supporting Electronic Code Book (ECB) and CTR [FIPS197].
The public key cryptography is 1024-bit RSA [PKCS1]. All receivers are required to have a private key and it MUST be stored in accordance with the rules detailed documented in [CR-WMDRM].
The hashing algorithm is Secure Hashing Algorithm 1 (SHA-1) [FIPS180-2].
The Hash-based Message Authentication Code (HMAC) is AES One-Key Cipher Block Chaining MAC 1 (OMAC1) [OMAC].
The receiver certificate and its certificate chain MUST be stored in a manner consistent with the rules called in [CR-WMDRM].The receiver playback and output control MUST comply with the rules documented in [CR-WMDRM].