Skip to content

Commit f382bfe

Browse files
authored
Merge pull request #107927 from Juliako/patch-6
Update offline-widevine-for-android.md
2 parents 7367192 + 108520e commit f382bfe

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

articles/media-services/latest/offline-widevine-for-android.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -167,22 +167,20 @@ Depending on business logic of custom STS, different claims are issued in the JW
167167

168168
### Question
169169

170-
For Widevine security levels, in Googles [Widevine DRM Architecture Overview doc](https://storage.googleapis.com/wvdocs/Widevine_DRM_Architecture_Overview.pdf) documentation,
171-
it defines three different security levels. However, in [Azure Media Services documentation on Widevine license template](widevine-license-template-overview.md),
170+
For Widevine security levels, the Googles "Widevine DRM Architecture Overview" doc defines three different security levels. However, in [Azure Media Services documentation on Widevine license template](widevine-license-template-overview.md),
172171
five different security levels are outlined. What is the relationship or mapping between the two different sets of security levels?
173172

174173
### Answer
175174

176-
In Googles [Widevine DRM Architecture Overview](https://storage.googleapis.com/wvdocs/Widevine_DRM_Architecture_Overview.pdf),
177-
it defines the following three security levels:
175+
The Googles "Widevine DRM Architecture Review" doc defines the following three security levels:
178176

179177
1. Security Level 1: All content processing, cryptography, and control are performed within the Trusted Execution Environment (TEE). In some implementation models, security processing may be performed in different chips.
180178
2. Security Level 2: Performs cryptography (but not video processing) within the TEE: decrypted buffers are returned to the application domain and processed through separate video hardware or software. At level 2, however, cryptographic information is still processed only within the TEE.
181179
3. Security Level 3 Does not have a TEE on the device. Appropriate measures may be taken to protect the cryptographic information and decrypted content on host operating system. A Level 3 implementation may also include a hardware cryptographic engine, but that only enhances performance, not security.
182180

183181
At the same time, in [Azure Media Services documentation on Widevine license template](widevine-license-template-overview.md), the security_level property of content_key_specs can have the following five different values (client robustness requirements for playback):
184182

185-
1. Software-based whitebox crypto is required.
183+
1. Software-based white-box crypto is required.
186184
2. Software crypto and an obfuscated decoder is required.
187185
3. The key material and crypto operations must be performed within a hardware backed TEE.
188186
4. The crypto and decoding of content must be performed within a hardware backed TEE.

0 commit comments

Comments
 (0)