On RDK platforms, native applications such as Netflix and the WPE browser achieve decode of AV content using GStreamer and decryption using OCDM in the app porting layer. For a Rialto based solution, this is still possible, Gstreamer and OCDM can be layered on Rialto, which allows these applications to leverage the ability of Rialto to isolate SoC specific behaviours into the host platform.
GStreamer pipelines can use the Rialto sink element which is provided as reference code.
Rialto also provides an implementation of the OCDM API as a reference code.
Fig 1 presents a typical implementation of the AV pipeline using this approach based on a browser-based application.

Fig 1. Rialto GStreamer AV pipeline.