Windows Media DRM

Windows Media DRM is a Digital Rights Management service for the Windows Media platform. It is designed to provide secure delivery of audio and/or video content over an IP network to a PC or other playback device in such a way that the distributor can control how that content is used.

WMDRM includes the following components:
* Windows Media Rights Manager (WMRM) SDK for packaging content and issuing licenses
* Windows Media Format SDK (WMF SDK) for building Windows applications which support DRM and the Windows Media format
* Windows Media DRM for Portable Devices (WMDRM-PD) for supporting offline playback on portable devices
* Windows Media DRM for Network Devices (WMDRM-ND) for streaming protected content to devices attached to a home network

How it works

In May 2007 Microsoft published the network protocol behind its license acquisition mechanism. [ [http://msdn2.microsoft.com/en-us/library/cc227964.aspx [MS-DRM] : Digital Rights Management License Acquisition Data Structure] , Microsoft Development Network Library, rev. 2.0, March 14, 2008.] According to the specification, the client software obtains a 7 byte plain-text content key K_content from the license server. The server encrypts the key before transferring it to the client with a globally predefined 160-bit ECC key, ECC₁. The server also sends a content key ID, unencrypted. The client then uses the K_content as an RC4 key to decrypt the licensed media stream.

As an anti-spoofing measure, additional fields such as playback rights and a random number are encrypted with 3 more predefined ECC key pairs either by the client or server software:
* client software ECC key pair KC,
* client machine ECC key pair KM,
* server software ECC key pair KS.

An analysis of version 2 of the DRM scheme in Windows Media Audio revealed that it was using a combination of elliptic curve cryptography key exchange, the DES block cipher, a custom block cipher dubbed MultiSwap (for MACs only), the RC4 stream cipher, and the SHA-1 hashing functionFact|date=January 2008.

Windows Media DRM is designed to be renewable, that is, it is designed on the assumption that it will be cracked and must be constantly updated by Microsoft. The result is that while the scheme has been cracked several times, it has usually not remained cracked for long.Fact|date=February 2007

"Version 1" was released in April 1999 and supported basic business rules such as expiration dates. "Version 2" was released in January 2003 and is also known as version 7.x and 9, to keep in sync with the equivalent versions of Windows Media Player. "Version 3", better known as DRM v10, was released in 2004. Earlier versions of the system have cracks available, meaning content restricted with these versions can have the protections stripped. Version 10 was cracked in early 2005, but a [http://support.microsoft.com/default.aspx?scid=kb;en-us;891122 software update] was shortly pushed which sealed the relevant hole.

Generally, these sorts of cracks have all worked in the same way to a certain extent. Rather than break the encryption itself, which is infeasible, they hook or interfere with the "black box" component as it runs to dump out the content keys or the unencrypted content from memory. These sorts of techniques are countered by Microsoft via automated Windows Updates Fact|date=February 2007, which in turn the user may choose to avoid or cancel. Since all Software DRMs ultimately rely on obfuscation rather than true security, as crackers sharpen their tools, they will also improve the speed and quality of their attacks.

Interoperability

The content delivered with the WMDRM encryption is not universally accessible but limited to those users running Microsoft Windows. Microsoft has not reached other markets yet.

The open network protocol for digital rights management, [MS-DRM] from the MCPP collection, stipulates that software developers have a right to implement the protocol outside the Microsoft's development tools and environment.

Removal

Tools have been created to strip files of Windows Media DRM, enabling them to be played on non-Janus platforms.

It was claimed that one particular tool FairUse4WM (Released on August 19, 2006)Fact|date=September 2007 written by Viodentia had the ability to strip DRM from files protected with WMDRM [cite web|url=http://www.engadget.com/2006/08/25/fairuse4wm-strips-windows-media-drm|title=Engadget FairUse4WM strips Windows Media DRM!|accessdate=2006-08-25] . However, on August 28, 2006 Microsoft released a new version of the individualized blackbox component (IBX) to prevent this particular tool from working.

Microsoft also informed partners that they are working to further resolve this issue, given that the fix was also alleged to have been circumvented within days [cite web|url=http://www.theregister.co.uk/2006/09/13/microsoft_drm_bskyb1/|title=Sky movies paused by DRM security flaw|accessdate=2006-09-13] . Microsoft also issued takedown notices to web site owners [cite web|url=http://arstechnica.com/news.ars/post/20060917-7761.html|title=Microsoft tells web site owners to take down FairUse4WM|accessdate=2006-09-17] . They soon followed up by filing lawsuits, [cite web|url=http://www.engadget.com/2006/09/26/microsoft-sues-viodenta-for-copyright-infringement/|title=Microsoft sues Viodentia for copyright infringement|accessdate=2006-09-26] although this has been disputed by the operator of the highest-ranked mirror of the utility, James Holden [cite web|url=http://jamesholden.net/2007/04/25/microsoft-didnt-issue-takedown-notices-for-fairuse4wm/|title=Microsoft Didn’t Issue Takedown Notices For FairUse4WM] , who has not received any such notices or threats.

As of October 16th, distributors using the Windows Media DRM protection, such as Sky Anytime, are up and running using a patched codec. On April 6, 2007 Microsoft dropped the charges against Viodentia as they were unable to find him to serve him with court papers [cite web|url=http://www.engadget.com/2007/04/06/microsoft-drops-case-against-fairuse4wm-creator-viodentia/ | title=Microsoft drops case against FairUse4WM creator Viodentia|accessdate=2007-04-23] .

On September 6, 2007, Microsoft updated IBX to version 11.0.6000.7000, in an attempt to thwartcircumvention efforts by variants of the original program.

As of November 28, 2007, DRM Removal under Windows XP on new installs or updated computers (i.e. those that already contain IBX version 11.0.6000.7000), is now not possible without rolling back to Windows Media Player 10. Recently, a patched version of FairUse4WM was released, allowing it to work with Windows Vista, and IBX versions lower than 11.0.6000.6324.

References

ee also

* Janus (DRM)
* Cardea (DRM)
* Windows Media

External links

*, [http://www.google.com/patents?vid=USPAT7010808&id=iRx4AAAAEBAJ&dq=Windows+Media+DRM+for+Portable+Devices Google Patent]
* [http://www.microsoft.com/windows/windowsmedia/drm/default.mspx Microsoft Windows Media DRM home page]
* [http://forum.doom9.org/showthread.php?t=114916 FairUse4WM topic-thread on doom9-net forums]