An apparatus for manipulating a selectively encrypted data stream in a manner consistent with certain embodiments has a filter that selects a set of packets from the selectively encrypted data stream based upon packet identifier values to produce a stream of packets having clear packets and encrypted packets. A packet substituter inserts a clear version of the encrypted packets into the stream of packets in place of the encrypted packets to produce a stream of clear data. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract without departing from the invention.