Re: [Ekiga-devel-list] ZRTP and SIP/H.323 security

[Craig Southeren <craigs postincrement com>]

Alexey H. wrote:
> I'd like to understand how much security is supported in Ekiga.
>
> Ekiga declares to have H.323 security (H.235 Annex D, new name is "H.235.1 Baseline security profile").
> Is it its own implementation ?

OPAL (which is used by Ekiga) implements authentication via H.235 using 
several different hash methods. These all confirm to standards.

Media encryption as per H.235 is not implemented.
> What about SIP security ?

OPAL implements SIP message integrity, and SIP register authentication. 
It does not implement SIP media encryption.

> I just read here http://en.wikipedia.org/wiki/ZRTP
> that Ekiga supports ZRTP and ZRTP can be used for
> both SIP and H.323 based communications.
>
> So, are both 2 kinds of VoIP secured in Ekiga ?

OPAL has low level support for SRTP and ZRTP. This support is being 
extended into full Ekiga application support for ZRTP, but this work is 
not yet available.

   Craig

-----------------------------------------------------------------------
 Craig Southeren          Post Increment – VoIP Consulting and Software
 craigs postincrement com au                   www.postincrement.com.au

 Phone:  +61 243654666      ICQ: #86852844
 Fax:    +61 243656905      MSN: craig_southeren hotmail com
 Mobile: +61 417231046      Jabber: craigs jabber org

 "Science is the poetry of reality." Richard Dawkins