Widevine Quarterly Partner Update - Q4 2018

12/10/18

Shaka Embedded for iOS

Shaka Player Embedded is a framework that runs Shaka Player in native (C++) apps. This gives a cross-platform interface to Shaka Player allowing native apps to use the player. Your native apps can now be built with the same features, behavior, and API as your Shaka-based web apps.

https://github.com/google/shaka-player-embedded

In addition to the C++ API, we provide a high-level wrapper for iOS called ShakaPlayerView which can be used from either Objective-C or Swift.

This is an open beta. We would love to have your feedback on what we've built, but we are not yet feature-complete for v1.0. Please file issues and questions on github.

Chrome Browser

Chrome 68 introduces support for CMAF. Please see Widevine’s CMAF specification for more information.

Chrome on Android is a Widevine L1 implementation as it leverages the built-in CDM on Android OS.

The Widevine Browser CDM includes support for Verified Media Path (VMP). VMP provides a method to verify the authenticity of the browser framework. For browser deployments, this will provide an additional signal to determine if a browser-based implementation is reliable and secure.

All Widevine browser-based integrations (vendors and browser-based applications) must support VMP.

For content providers, the proxy integration guide has been updated with information about VMP and how to issue licenses.

Supported Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome stable releases to ensure that the latest updates are applied.

Widevine CDM for Chrome 58 (or earlier) is no longer supported.

Revocation Date Chrome Browser Version(s) CDM Version Windows CDM Version Mac OS X CDM Version Linux CDM Version ChromeOS
July 31, 2018 58 or earlier 1.4.8.970 1.4.8.970 1.4.8.977 1.4.8.977
Jan 8, 2019 59 to 61 1.4.8.984 1.4.8.984 1.4.8.1000

1.4.8.1008

1.4.8.1000

1.4.8.1008

Nov 1, 2019 62 to 68 1.4.9.1029 1.4.9.1029 1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

4.10.1158.0

1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

Current 69 or later 4.10.1185.0 or newer 4.10.1185.0 or newer 4.10.1185.0 or newer 4.10.1185.0 or newer

Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 2 to 6 weeks Every 6 weeks Annual per Android release End of Quarter End of Quarter End of Quarter

Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2

Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.

Training Program (CWIP)

Available sessions in 2019:

  • March 18 - 20 in Bangalore, India.
  • May 21 - 23 in London, UK.
  • July 15 - 17 in Singapore.

Widevine Quarterly Partner Update - Q3 2018

09/05/18

IBC 2018

Widevine is participating at IBC 2018 (Sept 13 - 18) in Amsterdam as part of the Google presence in Hall 14. Please reach out to meet-widevine@google.com to arrange a discussion.

Content Survey

Widevine is conducting a survey for future planning. We would appreciate additional data points to help guide our future planning. This survey closes on Sept 30, 2018.

Widevine CAS

Widevine CAS is now available for the Android TV platform, starting from Android TV Pie. Operating on the same model as Widevine DRM, our CAS solution has no fees across both client and server products.

Please contact us if we can assist with your integration or implementation questions.

Chrome Browser

Chrome 68 introduces support for CMAF. Please see Widevine’s CMAF specification for more information.

Chrome on Android is a Widevine L1 implementation as it leverages the built-in CDM on Android OS.

Widevine CDM for Chrome 58 (or earlier) are no longer supported.

Chrome includes support for Verified Media Path (VMP). VMP provides a method to verify the authenticity of a device platform. For browser deployments, this will provide an additional signal to determine if a browser-based implementation is reliable and secure.

The proxy integration guide has been updated with information about VMP and how to issue licenses. Widevine recommends our browser-based integrations (vendors and browser-based applications) add support for VMP.

CDM Source and OEMCrypto

The upcoming CE CDM 15 (due Q4 2018) will require C++11 support.

Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.

Training Program (CWIP)

The next training sessions in 2018 are scheduled for:

  • Oct 2 - 5 in Brussels, Belgium.