[VOIPSEC] Anything new on skype security?

[Robert Moskowitz]

This is the most current paper I have found:

www.simson.net/ref/2005/OSI_Skype6.pdf

What is the RSA key exchange?  Any analysis of it?

What mode of operation is used for the AES '256' bit cipher?

 From my own experience I know that skype has been refusing to expose 
their protocols to analysis.  I have not even seen a note from any 
respected person in the cyrpto field that they have review skype.


Robert Moskowitz
Senior Technical Director
ICSA Labs, a division of Cybertrust, Inc.
W:      248-968-9809
F:      248-968-2824
VoIP:   248-291-0713
E:      rgm at icsalabs.com

There's no limit to what can be accomplished if it doesn't matter who 
gets the credit