That's already part of the EME standard, implemented in the browser (so as open source as the browser is).

https://w3c.github.io/encrypted-media/#clear-key