[asterisk-users] SRTP vs ZRTP in Asterisk

[Olle E Johansson]

27 mar 2007 kl. 10.48 skrev Tim Panton:

>
> On 26 Mar 2007, at 22:32, Michael Graves wrote:
>
>> Hi All,
>>
>> I've been reading about Phil Zimmermann's ZRTP encryption scheme for
>> SIP clients. This seems attactive but I don't use soft phones. I'm
>> guessing that we'd need ZRTP support in Asterisk in
>> order to use it to secure calls from hard phones.
>>
>> There seem to be issues with SRTP key exhange between various  
>> devices.
>> So much so that the IETF is working on a standardization project.  
>> ZRTP,
>> which is one of the proposals before the
>> IETF,  overcomes this. Since Zimmermann has open sourced the  
>> protocol I
>> would hope that it could be implemented in Asterisk without too much
>> trouble.
>>
>> Does the current work on SRTP extend into ZRTP?
>
> At Etel I heard Phil Zimmermann say that he had a working  
> implementation
> of ZRTP for asterisk in the lab.
>

We are working on the legal issues as well as issues on how to integrate
this properly, both from a code standpoint and a security standpoint.

/O