The KDM provides the method for securely delivering content and key elements. A KDM contains the ‘keys’ to unlock the elements of a CPL for a specific device. If a DCP contains multiple CPLs, a unique KDM is required for each different CPL, and can only be generated for devices on the Trusted Device List (TDL).