[VOIPSEC] Thoughts on VoIP security for Groups

[Lewis Adam-CAL022]

I'm curious how much thought the industry has given to the idea of
establishing group keys for VoIP.  This could be done with MIKEY/SRTP
(MIKEY supports establishment of a group encryption key, and this is the
path being taken by the 3GPP standards/secure MBMS) or could be done
with GDOI and IPsec (though I question the maturity of GDOI).  This
could be used in a conference bridge type scenario, where all
participating members would receive the same group encryption key; hence
allowing VoIP endpoints to encrypt the packet a single time, rather than
having to learn keys of each group member.  This would of course also
support the multicasting of the media stream as well.
 
Tx!
Adam