The moment you xor your one time pad (OTP) with the song to generate a ciphertext C, both OTP and C become, you could say, conditionally-colored. You're not re

The moment you xor your one time pad (OTP) with the song to generate a ciphertext C, both OTP and C become, you could say, conditionally-colored. You're not restricted in redistributing one, so long as you don't redistribute the other. If you redistribute both, even in different channels, logically that's a copyright violation unless you have sufficient controls or restrictions to prevent further redistribution until someone downstream from ending up with both and being able to recombine them. Realistically, the only reason you'd generate C and distribute both OTP and C is so that someone eventually gets them both and can reconstruct the song. Trying to claim you didn't have that intent wouldn't work in a civil context, and might not even work in a criminal context.