Formal Security Analysis of Widevine through the W3C EME Standard (USENIX Security '24)
Peer-reviewed TAMARIN formal model of the EME + Widevine license protocol across CDM versions 3.1.0–16.1.0, identifying protocol-level weaknesses.
Link
Related resources
- ETSI TS 103 799 — CPIX Publicly Available SpecificationCPIX published as a formal ETSI standard, giving a normative citation for key/DRM information exchange between packagers and key servers.
- Diving into the Depths of Widevine L3 (Neodyme)Deep security research write-up on Widevine L3 CDM internals: Frida hooking and Qiling/Unicorn emulation of OEMCrypto whitebox cryptography.
- MovieLabs Specification for Enhanced Content Protection v1.4The studio-mandated security target for premium content: hardware root of trust, secure media pipeline, forensic watermarking, sample-varia…
- DASH-IF CPIX — Content Protection Information Exchange FormatLiving specification (v2.4) defining the XML document format for exchanging content keys and DRM signaling between key servers, packagers a…
- IAMF — Immersive Audio Model and Formats SpecificationAOMedia's specification for immersive/scene-based audio delivery, with v1.1.0 approved (base-enhanced profile) and v2.0.0 in draft.
- APV Codec Specification (IETF, now RFC 9924)IETF document track for the Advanced Professional Video codec, published as RFC 9924 in February 2026.
- AMWA IS-04 — NMOS Discovery and Registration SpecificationCanonical rendered spec for NMOS registration and query APIs used to discover senders/receivers in SMPTE ST 2110 IP production networks.
- Advanced HDR by Technicolor (SL-HDR1/2/3)Vendor home for the SL-HDR family (ETSI TS 103 433), which carries an SDR base layer plus reconstruction metadata for backward-compatible H…
- EBU Tech 3373 — HLG UHDTV Colour Bar Test PatternsSpecification and downloadable TIFF/v210 HLG colour bar patterns for validating HDR production pipelines and 2SI signal paths.
- EBU TR 045 — Codec-Independent Next-Generation Audio WorkflowsEBU technical report arguing for open, codec-independent NGA production workflows and explaining the role of ADM in immersive/personalized…