Windows Vista Content Protection - Twenty Questions (and Answers)

A conversation has cropped up since the recent publication of a paper scrutinizing how Windows handles digital rights management, especially for HD video.  I've since looped back with Dave Marsh, a Lead Program Manager responsible for Windows' handling of video, to learn from him the implications involved and to learn to what extent the paper's assertions are accurate.  The following is an article Dave has put together to address the misconceptions in the paper, followed by answers to what we expect will be the most frequent questions in the minds of our customers.  Leave us a comment to let us know what you think.  -- Nick

Over the holidays, a paper was distributed that raised questions about the content protection features in Windows Vista.  The paper draws sharp conclusions about the implications of those features for our customers.  As one of the Lead Program Managers for the technologies in question, I would like to share our views on these questions.

Windows Vista includes content protection infrastructure specifically designed to help ensure that protected commercial audiovisual content, such as newly released HD-DVD or Blu-Ray discs, can be enjoyed on Windows Vista PCs.  In many cases this content has policies associated with its use that must be enforced by playback devices.  The policies associated with such content are applicable to all types of devices including Windows Vista PCs, computers running non-Windows operating systems, and standalone consumer electronics devices such as DVD players.  If the policies required protections that Windows Vista couldn't support, then the content would not be able to play at all on Windows Vista PCs.  Clearly that isn't a good scenario for consumers who are looking to enjoy great next generation content experiences on their PCs.

Associating usage policies with commercial content is not new to Windows Vista, or to the industry.  In fact, much of the functionality discussed in the paper has been part of previous versions of Windows, and hasn’t resulted in significant consumer problems – as evidenced by the widespread consumer use of digital media in Windows XP.  For example:

  • Standard definition DVD playback has required selective use of Macrovision ACP on analog television outputs since it was introduced in the 1990s.  DVD playback on and in Windows has always supported this.
  • The ability to restrict audio outputs (e.g., S/PDIF) for certain types of content has been available since Windows Millennium Edition (ME) and has been available in all subsequent versions of Windows.
  • The Certified Output Protection Protocol (COPP) was released over 2 years ago for Windows XP, and provides applications with the ability to detect output types and enable certain protections on video outputs such as HDCP, CGMS-A, and Macrovision ACP.

It's important to emphasize that while Windows Vista has the necessary infrastructure to support commercial content scenarios, this infrastructure is designed to minimize impact on other types of content and other activities on the same PC.  For example, if a user were viewing medical imagery concurrently with playback of video which required image constraint, only the commercial video would be constrained -- not the medical image or other things on the user's desktop.  Similarly, if someone was listening to commercial audio content while viewing medical imagery, none of the video protection mechanisms would be activated and the displayed images would again be unaffected.

Contrary to claims made in the paper, the content protection mechanisms do not make Windows Vista PCs less reliable than they would be otherwise -- if anything they will have the opposite effect, for example because they will lead to better driver quality control.

The paper implies that Microsoft decides which protections should be active at any given time.  This is not the case.  The content protection infrastructure in Windows Vista provides a range of à la carte options that allows applications playing back protected content to properly enable the protections required by the policies established for such content by the content owner or service provider.  In this way, the PC functions the same as any other consumer electronics device.

With that introduction, here are the top twenty questions, and answers, that aim to address some of the other points raised in the paper.

Dave Marsh - Lead Program Manager for Video

Twenty Questions and Answers

Do these content protection requirements apply equally to the Consumer Electronics industry supplied player devices such as an HD-DVD or Blu-Ray player?

Generally the requirements are equivalent for all devices.  For example, an HD-DVD or Blu-Ray disc always requires HDCP protection for DVI/HDMI outputs regardless of the type of device playing the disc.  There are some cases, such as DVD-Video, where PCs have slightly different protection requirements than CE devices, but these differences are mainly historical and as dictated by the licenses associated with the systems providing access to the content (e.g., CSS for DVD).

When are Windows Vista's content protection features actually used?

Windows Vista's content protection mechanisms are only used when required by the policy associated with the content being played.  For Windows Vista experiences, if the content does not require a particular protection, then that protection mechanism is not used.

Will the playback quality be reduced on some video output types?

Image quality constraints are only active when required by the policy associated with the content being played, and then only apply to that specific content -- not to any other content on the user's desktop.  As a practical matter, image constraint will typically result in content being played at no worse than standard definition television resolution.  In the case of HD optical media formats such as HD-DVD and Blu-Ray, the constraint requirement is 520K pixels per frame (i.e., roughly 960x540), which is still higher than the native resolution of content distributed in the DVD-Video format.  We feel that this is still yields a great user experience, even when using a high definition screen.

Will this affect things like medical imagery applications?

Image constraints only apply to protected content being played and not to the desktop as a whole; therefore, the resolution of other non-protected media, such as medical images, is not affected.

Do things such as HFS (Hardware Functionality Scan) affect the ability of the open-source community to write a driver?

No.  HFS uses additional chip characteristics other than those needed to write a driver.  HFS requirements should not prevent the disclosure of all the information needed to write drivers.

Will the Windows Vista content protection board robustness recommendations increase the cost of graphics cards and reduce the number of build options?

Everything was moving to be integrated on the one chip anyway and this is independent of content protection recommendations.  Given that cost (particularly chip cost) is most heavily influenced by volume, it is actually better to avoid making things optional through the use of external chips.  It is a happy side effect that this technology trend also reduces the number of vulnerable tracks on the board.

Will Windows Vista content protection features increase CPU resource consumption?

Yes.  However, the use of additional CPU cycles is inevitable, as the PC provides consumers with additional functionality.  Windows Vista's content protection features were developed to carefully balance the need to provide robust protection from commercial content while still enabling great new experiences such as HD-DVD or Blu-Ray playback.

Aren't there already output content protection features in Windows XP?

Yes.  Output content protections are not new requirements for commercial content.  The CSS content protection system for DVD-video discs requires output protections such as Macrovision ACP and limiting the resolution on component video outputs to standard definition.  Windows XP has supported these requirements for some time.

Is content protection something that is tied to High Definition video?

While HD content has some unique content protection requirements, many of the requirements apply to commercial content generally, independent of resolution.

What about S/PDIF audio connections?

Windows Vista does not require S/PDIF to be turned off, but Windows Vista continues to support the ability to turn it off for certain content -- a capability that has been present on the Windows platform for many years.  Additionally, in order to support the requirements of some types of content, Windows Vista supports the ability to constrain the quality of the audio component of that content.  Similar to image constraint for video, this quality constraint only applies to the audio from content whose policy requires the constraint, not to any other audio being played concurrently on the system.  As a practical matter, these audio restrictions are not widely used today.

Will Component (YPbPr) video outputs be disabled by Windows Vista's content protection?

Similar to S/PDIF, Windows Vista does not require component video outputs to be disabled, but rather enables the enforcement of the usage policy set by content owners or service providers, including with respect to output restrictions and image constraint.

Will echo cancellation work less well for premium content?

We believe that Windows Vista provides applications with access to sufficient information to successfully build high quality echo cancellation functionality.

Will it mean that there will no longer be unified graphics drivers?

The Windows Vista content protection requirements for graphics drivers will not lead to movement away from unified drivers.  In fact, all graphics drivers shipped with Windows Vista are unified drivers.

Will Windows Vista audio content protection mean that HDMI outputs can't be shown as S/PDIF outputs?

It is better if they show as different codec types, as it allows the difference to be reflected in the UI, thus providing the user help with their configuration and creating a better user experience.  The user wants to know the difference between HDMI and S/PDIF, as they are different physical connectors.

What is revocation and where is it used?

Renewal and revocation mechanisms are an important part of providing robust protection for commercial audiovisual content.  In the rare event that a revocation is required, Microsoft will work with the affected IHV to ensure that a new driver is made available, ideally in advance of the actual revocation.  Revocation only impacts a graphics driver's ability to receive certain commercial audiovisual content; otherwise, the revoked driver will continue to function normally.

Does this complicate the process of writing graphics drivers?

Adding new functionality usually introduces new complexity.  In this case, additional complexity is added to the graphics driver, but that complexity comes with the direct consumer benefit of new scenarios such as HD-DVD or Blu-Ray playback.

Will the 'tilt bit' mechanism cause problems even when the driver is not under attack from a hacker, e.g., when there are voltage spikes?

It is pure speculation to say that things like voltage fluctuations might cause a driver to think it is under attack from a hacker.  It is up to a graphics IHV to determine what they regard as an attack.  Even if such an event did cause playback to stop, the user could just press 'play' again and carry on watching the movie (after the driver has re-initialized, which takes about a second).  Again, it is important to note that this could only occur in the case of watching the highest-grade premium content, such as HD-DVD or Blu-Ray.  In practice I doubt it would ever actually happen.

Does Windows Vista's use of OMAC-authenticated communication impact graphics driver performance?

The authenticated communication mechanisms used for Protected Video Path in Windows Vista are only actively used while commercial content is playing.  This means that while there is a performance impact, it is limited to the scenarios where it is required to provide robust protection for commercial content.

Do content protection requirements mean that graphics chips have to provide hardware acceleration for video decode?

No.  The Windows Vista content protection requirements do not require that graphics hardware include hardware acceleration for decode for many years, but such support is highly recommended to improve the user experience for HD content.

Will the video and audio content protection mechanisms affect gaming on the PC?

The Windows Vista content protection features were design for commercial audiovisual content and are typically not used in game applications.  A game author would have to specifically request these features for them to impact game performance.


Comments

  1. Posted on: January 21, 2007 at 12:36AM  

    6-9 months ago I couldn't wait for Vista to arrive.

    I got my free upgrade certificate for a laptop and a PC that I just bought.

    I will send it in to get the upgrade, but until I am convinced they will never be installed.

    I was planning to purchase upgrades for my other 4 computers, now I am not.

    Until every possible risk associated with this technology is solved and known I won't install this os. I can't afford to have myself cut off at the knees for this.

    A black and white easy to read warrantee where Microsoft will give full replacement value for hardware and software that is caused to fail or degrade plus the cost of business disruption would be the only thing that would even make me reconsider.

    If anything, the post above makes me feel like an idiot for installing XP in the first place and choosing to buy a PC last year.

    Microsoft has done something for someone else's benefit, why don't you have them pay for my PC then? I bought the computer, the software, etc... They have no right to mess with it!

    When I buy something, it is mine mine mine mine! I don't want someone going in and violating what I own. This is trespassing and sabotage! If I buy a graphics card, I expect full performance 100% of the time or I demand a refund. I don't care if my graphics card is 6 years old, it better play or else I expect a full refund!

    If they don't want to sell their stinking filth on DVD, then don't, that's their choice, but what gives them the right to mess with my PC?

    They should have to give us a rebate on every purchase of either MS Software or other software that may be impacted by their scheme. They are decreasing the value of our investments in computers and other software.

  2. Posted on: January 21, 2007 at 12:44AM  

    @jamieplucinski:

    "Yes... but for how long :P The point is that any ability to disable of revoke could mean that games or other software in the future would be crippled. The fact that there is another hook in the APIs to enable premium content protection in Vista doesn't mean it'll be used for just that, and therein lies the problem."

    No wait, as long as I know by revokation it means that the drivers are:

    1) removed from the web (and replaced with newer versions)

    2) blacklisted somehow in the next hd-dvd and blu-rays distributed

    So if there are games or software that relies on content protection they will have to include a blacklist (like HD-DVDs and Blu-Rays will). The actual software you have, unless you update it, won't stop working from a day to another without reason.

    "I remember having many applications in the past demand something of my system that it didn't actually need, but used anyway. With the many web-based video services like YouTube, Soapbox and the like, how long is it until they start to load premium content onto their sites and then require that my Flash player enable premium content hooks on demand."

    Nobody ensures you that there won't websites using that protection. However people will still have the choice to not use the websites that sell DRMed content.

    "It is not just a case of how Vista will act now, it's how much more Microsoft will twist thing at the whim of Hollywood and it's never-ending stream of law suits. The fact that something like this exists now only confirms many fears about how deep Hollywood is reaching into our homes in an effort to place blame and restrict creative freedoms."

    The ACSS protection forces all the content to be outputted over HDMI (encrypted with HDCP) when the Image Token Constraint protection is turned on.

    Microsoft had no other ways to implement HDCP on windows without adding that DRM mess. And obviously in the living-room battle against Apple it would have been a bad idea for them to not include hd-dvd and blu-ray playback.

    However at least now there are good news: DRM-free audio CDs: http://lxer.com/module/newswire/view/78008/index.html

  3. Posted on: January 21, 2007 at 12:54AM  

    so, when the old drivers are pulled and replaced with new ones.

    Are my games and programs that depend on the old ones still going to work?

    If not, who pays?

  4. Posted on: January 21, 2007 at 1:02AM  

    Will Vista Automatic Updates automaticly install the replacement drivers?

    Where there be a choice on doing automatic updates without updating the drivers? If you do install the new drivers and you want to use the old drivers to make your old software work can you? Will Windows refuse to install these old drivers?

    Will I have to reboot each time?

  5. Posted on: January 21, 2007 at 1:24AM  

    This essay has essentially CONFIRMED every horrible charge leveled at Vista by Gutmann. Using a bucket full of weasel words does nothing to convince me that Vista isn't screwing the consumer--or worse, the media/medical professional--for the sake of. . . of what? At the end of the day, the most infuriating thing about this crippleware is that it was done with such a blatant disregard for the consumer without a moment's hesitation.  In what universe is it appropriate to give a content producer the power to turn off a user's hardware? How can you have no moral qualms with this?

  6. Posted on: January 21, 2007 at 1:38AM  

    Klimax rant on:

    It seems that my warning-unfortunately sent only from form on MS site not directly,was not heeded.DRM(CRAP)included in Vista even if inactive is too much.Everybody wants to be able to make a back-up of anything(PPV is not considered).I could understand rewritting entire kernel to remove old unnecessery things,which only caused problems,but rewrite it to place the worst CRAP in history,is total waste of money,time,...

    And I DO NOT call DRM added fuctionality.Even requiring signed drivers is bad.I use huge variety of hardware and vast majority of HW will never have signed drivers and no new ones will not be.And then I use Daemon virtual drives.

    May be we will see sooner or (a little bit) laterevery single protection cracked as they will use Linux based virtualization...And I hope they will crack Your Vista as quickly as possible-unnecesary CRAP removed!

    And MS should refuse Hollywood immediatelly,because CRAP takes Vista down!How quicly?Cannot guess,because it is not stiil ot there,but I told everybody to avoidVIsta as much as possible-I work in small company,so they are not going to see Vista as well...

    Klimax rant off.

  7. Posted on: January 21, 2007 at 2:30AM  

    When you posture DRM as a 'direct consumer benefit' you may as well just be saying 'It's double plus good' as you strap the rat cage to my face.

    The boldness which Microsoft infringes on the interests of their end-users by pandering to their business partners under the assumption that consumers will choke down whatever we're fed.

    I suppose in some respects we have choked down a lot in the past but the Zune, Office 2007 and Vista are all unrivaled in their inability to grasp the needs of their customers.

  8. Posted on: January 21, 2007 at 5:38AM  

    > Will the Windows Vista content protection board robustness recommendations increase the cost of graphics cards [...]

    The answer given here is evasive. I recommend to read a presentation given by ATI at WinHEC 2005, available at Microsoft's web site: http://download.microsoft.com/download/9/8/f/98f3fe47-dfc3-4e74-92a3-088782200fe7/TWEN05002_WinHEC05.ppt

    Look for these quotes (yes, all from one presentation):

    "These costs are passed on to the consumer"

    "This cost is passed on to all consumers"

    "This cost is passed on to purchasers of multimedia PC’s"

    "Costs are passed on to consumers"

    "Costs are passed on to consumers, especially early adopters"

    > If the policies required protections that Windows Vista couldn't support, then the content would not be able to play at all on Windows Vista PCs.  Clearly that isn't a good scenario for consumers who are looking to enjoy great next generation content experiences on their PCs.

    Did anyone think about those customers who couldn't care less about "[enjoying] great next generation content experiences on their PCs"? Oh yes, ATI did. They're the "all consumers", as in "This cost is passed on to all consumers."

  9. Posted on: January 21, 2007 at 6:06AM  

    It's very nice of you to link to the opposing point of view so that everybody an decide for themselves. No, really...

  10. Posted on: January 21, 2007 at 6:38AM  

    "In the case of HD optical media formats such as HD-DVD and Blu-Ray, the constraint requirement is 520K pixels per frame (i.e., roughly 960x540), which is still higher than the native resolution of content distributed in the DVD-Video format.  We feel that this is still yields a great user experience, even when using a high definition screen."

    YUM! I LOVE to get less than what I paid for, simply because I don't want my computer and monitor to pay licenses to Intel for a technology that is so weak (and misplaced) it is bordering on useless.

    "Will the Windows Vista content protection board robustness recommendations increase the cost of graphics cards and reduce the number of build options?

    Everything was moving to be integrated on the one chip anyway and this is independent of content protection recommendations.  Given that cost (particularly chip cost) is most heavily influenced by volume, it is actually better to avoid making things optional through the use of external chips.  It is a happy side effect that this technology trend also reduces the number of vulnerable tracks on the board."

    ...No. No, it wasn't about to be integrated onto one chip. And what about the license fees to Intel (for HDCP), Macrovision, etc? Clearly they increase the cost. ATI agrees (see previous post by Gonzo).

    "Will Windows Vista content protection features increase CPU resource consumption?

    Yes.  However, the use of additional CPU cycles is inevitable, as the PC provides consumers with additional functionality.  Windows Vista's content protection features were developed to carefully balance the need to provide robust protection from commercial content while still enabling great new experiences such as HD-DVD or Blu-Ray playback."

    No, downgrading of *MY* content is not "additional functionality", and it is entirely unnecessary. Nor is the protection "robust", or indeed, protective at all. If Microsoft had left it to the industry to write this crap on their own, we would still have these "great new experiences". Instead, Microsoft is bending their OS (and their PR people, apparently) to the will of another industry.

    "Will echo cancellation work less well for premium content?

    We believe that Windows Vista provides applications with access to sufficient information to successfully build high quality echo cancellation functionality."

    What on earth is that supposed to mean? Why can't Vista's echo cancellation functionality work with premium content? Does this mean premium content won't sound as good as normal, sane, content?

    "Does this complicate the process of writing graphics drivers?

    Adding new functionality usually introduces new complexity.  In this case, additional complexity is added to the graphics driver, but that complexity comes with the direct consumer benefit of new scenarios such as HD-DVD or Blu-Ray playback."

    Again, this is not new functionality and the complexity is unnecessary. It also adds cost to all consumers whether they want to play this stuff or not.

    "Do content protection requirements mean that graphics chips have to provide hardware acceleration for video decode?

    No.  The Windows Vista content protection requirements do not require that graphics hardware include hardware acceleration for decode for many years, but such support is highly recommended to improve the user experience for HD content."

    In other words, the CPU is so taken up by the pointless decoding and encoding of the "protection", that the actual *necessary* work - dealing with the video codec - has to be hardware accelerated on the video card in order to provide a smooth playback experience.

Trackbacks

  1. Posted by: Robert McLaws: Windows Vista Edition on January 20, 2007 at 3:53PM

    Dave Marsh, Microsoft's Lead Program Manager for Windows (meaning he heads up the development) explains

  2. Posted by: Lorenzo Barbieri @ UGIblogs! on January 21, 2007 at 5:54AM
  3. Posted by: Donna's SecurityFlash on January 21, 2007 at 10:13AM

    Windows Vista team respond on the recent publication of a research on how Windows handles digital rights

  4. Posted by: JD on EP on January 21, 2007 at 4:31PM

    Vista & media resolution: From this Microsoft staffer's blog, it sounds as though commercial media (like feature-films) will display at lower resolutions on Vista than it would on home-electronics gear, although non-commercial media can still display

  5. Posted by: The Daily Grind on January 22, 2007 at 5:05PM

    I wrote a little about the production problems of high-definition a while ago; now the New York Times has...

  6. Posted by: Chris Lanier's Blog on January 22, 2007 at 5:46PM

    Windows Vista Content Protection - Twenty Questions (and Answers) | In case you missed it, Microsoft...

  7. Posted by: Chris Lanier's Blog on January 22, 2007 at 5:46PM

    Windows Vista Content Protection - Twenty Questions (and Answers) | In case you missed it, Microsoft

  8. Posted by: Geek News Central Podcast on January 23, 2007 at 3:27AM

    Thanks for the new site Feedback and great show inputs. I talk a little about getting Clearwire here at the house to complement cable. Sponsors: [Save 10% off on any order at GoDaddy.com!] Use Code Todd [Try GoToMeeting free for...

  9. Posted by: Geek News Central on January 23, 2007 at 3:30AM

    Thanks for the new site Feedback and great show inputs. I talk a little about getting Clearwire here at the house to complement cable. Upcoming Tech Podcast Round Table Sponsors: [Save 10% off on any order at GoDaddy.com!] Use Code...

  10. Posted by: Doubt's Log on January 23, 2007 at 11:17AM
  11. Posted by: Peering through Windows... on January 24, 2007 at 6:26AM

    Digital Rights Management, or DRM if you are an acronym lover, has caused quite a stir over recent weeks,

  12. Posted by: Stephen Laniel’s Unspecified Bunker on January 25, 2007 at 4:49PM

    Via

    Rugen, a pretty

    insane diagnosis of all the media crippling in MS Vista.

    (Included below the fold.) Some questions: Why is Microsoft doing so much for the content industries? They have billions of dollars; why don’t they fight? Google bough

  13. Posted by: Blog Personnel De Vincent Lagrandmaison on January 27, 2007 at 9:22AM

    A la suite du rapport assassin d'un chercheur sur le système de protection des contenus audiovisuels dans Vista, l'éditeur réplique par une foire aux questions sur un blog. Microsoft vient de publier sur un de ses blogs une liste de questions-réponses

  14. Posted by: JamiePlucinski.com on January 28, 2007 at 2:10AM

    Yes, I'm going back to Windows XP, and yes I've been saying I'm going to do it for a while but have either been too lazy or too occupied with playing WoW to do it. Which really is a shame, considering I had some cool things planned for Vista this year,

  15. Posted by: vista-tecnica on February 08, 2007 at 6:37AM

    Siento tener que poner esto en este blog, pero creo que es importante que todos estemos atentos a este

  16. Posted by: /* basquiat's lovely winter riot */ on February 12, 2007 at 2:12PM

    Windows Vista includes an array of “features” that you don’t want. These features will make your computer less reliable and less secure. They’ll make your computer less stable and run slower. They will cause technical support prob

  17. Posted by: Nicholas' Blog-O-Rama on February 12, 2007 at 11:10PM
  18. Posted by: Voice Capture DSP blog on February 13, 2007 at 3:49AM

    In Professor Peter Gutmann's A Cost Analysis of Windows Vista Content Protection he raised the concern

  19. Posted by: Crazy Blog on February 14, 2007 at 5:52PM

    Hola a todos, primero quiero lanzar una pregunta, ¿pero, que le pasa al ciberespacio?, la verdad es que

  20. Posted by: Comunidade Portuguesa de Profissionais de TI on March 14, 2007 at 8:22AM

    Chegou até nós na Microsoft Portugal, uma mensagem que desde há algum tempo anda a circular de forma

  21. Posted by: blog:C3 on March 15, 2007 at 2:34PM

    De lo poco que estoy leyendo he visto aparecer mucho de esto, y no es que me esté asustando. Sólo estoy pensando cada vez más seriamente en instalar Linux de una vez por todas en la PC de casa. Y...

  22. Posted by: A Ovest di Paperino on March 24, 2007 at 9:35PM

    Vista, DRM e il libero mercato

  23. Posted by: The Coffeehouse on June 13, 2007 at 7:42AM
  24. Posted by: free web page builder on June 09, 2008 at 6:06PM

    [...] ...

  25. Posted by: Lo que se avecina « En vez del psiquiatra… on November 22, 2008 at 10:05PM

    Pingback from  Lo que se avecina « En vez del psiquiatra…