[VOIPSEC] VoIP Sniffer

Fabio Pietrosanti (naif) lists at infosecurity.ch
Sun Sep 14 15:24:31 CDT 2008


Gilbert Lee wrote:
> Hi acabrera.
> I would like to protect VoIP communication from danger of eavesdropping, too.
> Most popular cipher algorithms are safe enough, but they can be
> exposed by MITM attack, as I know.
> To secure VoIP, not only knowing algorithm but also implementing by
> software is important, as I think.
> That is why I am interested in secure VoIP.
> It takes a lot of time for me to studay secure protocol algorithm used in VoIP.
>   
Yes, at the beginning it's somehow complex to understand the different 
protocols (open, standard, standard-in-progres, proprietary, 
somehow-secret), the political situation around it, the long story of 
SRTP that existed for long time without a decent end-to-end key 
agreement method!

I am working in a mobile voice end-to-end encryption software using ZRTP 
protocol, so i understand what you mean that implementing software is 
important, and to make things open and interoperable it's even more 
difficult!

Still, i would like to get some more information about the ZRTP testing 
experience that Alejandro Cabrera had, would be helpful to enanche ZRTP 
and Zfone itself.

Which was the issue with some clients?

Regards,
Fabio Pietrosanti
> Sooner or later, if possible, I would like to talk my result of studying.
> Thank you.
>
> On Fri, Sep 12, 2008 at 2:39 PM, Alejandro Cabrera Obed
> <acabrera at sintys.gov.ar> wrote:
>   
>> Dar Kyung, what you wrote is very interesting...I'm trying to secure my
>> SIP/RTP calls using ZRTP from Phill Zimerman but I don't succed at all:
>> some clients work well and some other don't. Now I'll see your sniffer.
>>
>> Please can you tell me what is the most popular mechanism nowdays to
>> secure the voip calls within an environment with IP telephones and
>> softphones ???
>>
>> Special thanks
>>
>> Alejandro
>>     




More information about the Voipsec mailing list