That's the large problem here. If you wanted to get the content out, it would be more effective to obtain a HDCP master key, since that one is embedded in a lot of deployed physical devices and thus cannot be easily changed (AFAIK). A CDM in a webbrowser can be updated today and content distributors could stop using the old key tomorrow already.

If the reversing and reimplementation happens outside of the US you can avoid the DMCA issue entirely. Or take steps to publish anonymously.

You probably should also give up on going to any conferences on US soil in the future.

That's true, they treated Sklyarov most unfairly, given that it was entirely legal in his home country.