Encryption
[The AD RMS SDK leveraging functionality exposed by the client in Msdrm.dll is available for use in Windows Server 2008, Windows Vista, Windows Server 2008 R2, Windows 7, Windows Server 2012, and Windows 8. It may be altered or unavailable in subsequent versions. Instead, use Active Directory Rights Management Services SDK 2.1, which leverages functionality exposed by the client in Msipc.dll.]
Encryption is the process that Active Directory Rights Management Services (AD RMS) uses to protect content. Decryption reverses the protection so that the content can be consumed. Currently, AD RMS uses the Advanced Encryption Standard (AES) algorithm and the electronic codebook (ECB) block cipher, or cipher-block chaining (CBC), for encryption.
You can use the DRMEncrypt function to encrypt content and the DRMDecrypt function to decrypt it. Encryption requires that the content owner create a signed issuance license that specifies who can consume content and acquire an end-user license that has either the OWNER or EDIT rights defined. Decryption requires and end-user license for which the EDIT right is defined. For more information, see Encrypting Content and Decrypting Content.
Related topics