Products
Products
Video Hosting
Upload and manage your videos in a centralized video library.
Image Hosting
Upload and manage all your images in a centralized library.
Galleries
Choose from 100+templates to showcase your media in style.
Video Messaging
Record, and send personalized video messages.
CincoTube
Create your own community video hub your team, students or fans.
Pages
Create dedicated webpages to share your videos and images.
Live
Create dedicated webpages to share your videos and images.
For Developers
Video API
Build a unique video experience.
DeepUploader
Collect and store user content from anywhere with our file uploader.
Solutions
Solutions
Enterprise
Supercharge your business with secure, internal communication.
Townhall
Webinars
Team Collaboration
Learning & Development
Creative Professionals
Get creative with a built in-suite of editing and marketing tools.
eCommerce
Boost sales with interactive video and easy-embedding.
Townhall
Webinars
Team Collaboration
Learning & Development
eLearning & Training
Host and share course materials in a centralized portal.
Sales & Marketing
Attract, engage and convert with interactive tools and analytics.
"Cincopa helped my Enterprise organization collaborate better through video."
Book a Demo
Resources
Resources
Blog
Learn about the latest industry trends, tips & tricks.
Help Centre
Get access to help articles FAQs, and all things Cincopa.
Partners
Check out our valued list of partners.
Product Updates
Stay up-to-date with our latest greatest features.
Ebooks, Guides & More
Customer Stories
Hear how we've helped businesses succeed.
Boost Campaign Performance Through Video
Discover how to boost your next campaign by using video.
Download Now
Pricing
Watch a Demo
Demo
Login
Start Free Trial
Widevine DRM operates through 3 components: the License Server , the Client , and the Content Provider’s Backend . The license server issues decryption keys to authenticated clients. The client, embedded in devices or browsers, handles decryption and playback. The content provider’s backend integrates with Widevine to encrypt and package media. Widevine supports multiple encryption schemes, including AES-128 (CENC) and AES-256 (CBCS) . The system enforces key rotation and secure key exchange to prevent unauthorized access. Each content segment is encrypted with a unique key, and the client fetches keys during playback. Encryption and Key Management Widevine uses a multi-layered key hierarchy to secure content. The Content Key encrypts the media, while a Key Encryption Key (KEK) protects the Content Key. The license server delivers the Content Key after validating the client’s credentials and device security level. const encryptionConfig = { scheme: 'cenc', key_id: '7e456567-e89b-12d3-a456-426655440000', key: '3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d', iv: '1234567890abcdef1234567890abcdef' }; Explanation : scheme : Specifies the encryption standard (e.g., cenc for AES-128 CTR mode). key_id : Unique identifier for the Content Key. key : The AES encryption key in hexadecimal format. iv : Initialization vector for cipher block chaining. License Acquisition and Policy Enforcement The client requests a license from the Widevine server, which validates the device’s security level (e.g., hardware-backed key storage). The server enforces policies like expiration time, output protection, and device binding. Widevine supports persistent and non-persistent licenses, depending on the content owner’s requirements. Widevine in Mobile Video Streaming and Playback Protection Integration with Mobile Platforms Widevine integrates with Android MediaDRM and iOS FairPlay Streaming (via Google’s Shaka Player). On Android, it leverages hardware-backed Trusted Execution Environment (TEE) for secure key storage and decryption. The Content Decryption Module (CDM) handles cryptographic operations within the TEE. MediaDrm mediaDrm = new MediaDrm(UUID.fromString('edef8ba9-79d6-4ace-a3c8-27dcd51d21ed')); String licenseUrl = 'https://license.widevine.com/acquire'; mediaDrm.getKeyRequest(sessionId, initData, 'video/mp4', MediaDrm.KEY_TYPE_STREAMING, null); Explanation : UUID : Widevine’s unique DRM system identifier. licenseUrl : Endpoint for key requests. KEY_TYPE_STREAMING : Indicates the key is for streaming (not offline). Secure Playback Pipeline Widevine enforces secure playback by decrypting content in protected surfaces (e.g., hardware-protected video paths). It prevents screen capture and enforces HDCP for high-resolution playback. The CDM ensures keys are never exposed to the application layer, reducing attack surfaces. Adaptive Streaming and Multi-DRM Support Widevine works with DASH and HLS streaming protocols, supporting adaptive bitrate switching. It operates alongside other DRMs in multi-DRM deployments. Content providers use manifest files to signal DRM requirements.
ABCD1234...
Explanation : schemeIdUri : Identifies Widevine’s DRM system. cenc:pssh : Contains initialization data for license requests. Performance and Security Trade-offs Widevine balances security and performance by offloading decryption to hardware. Mobile devices use hardware-accelerated AES decryption to minimize battery impact. The system supports L1 (hardware-secured), L2 (software-secured), and L3 (basic software) security levels, with L1 being the most secure.