Re: Secure telephones

2004-07-19 Thread Dave Howe
Jack Lloyd wrote: Well, nothing stopping you from treating your datagram-based VPN (ie, DTLS) as an IP tunnel, and doing TCP-like stuff on top of it to handle the IM and file transfer. Actually I'm working on something rather like that now, which may or not get finished soon. *lol* aren't we all.

Re: Secure telephones

2004-07-18 Thread Bill Stewart
At 11:45 AM 7/17/2004, Thomas Shaddack wrote: Pondering construction of a secure telephone. (Or at least a cellphone in general. The user interfaces and features available on virtually all the mass-market phones suck, to put it very very mildly, not even mentioning If you're trying to build a

Re: Secure telephones

2004-07-18 Thread Thomas Shaddack
On Sun, 18 Jul 2004, Bill Stewart wrote: If you're trying to build a usable cellphone, you've got much more stringent design criteria than a deskphone. I am painfully aware of it. You've got packaging requirements that force you into serious industrial design if you want something

Re: Secure telephones

2004-07-18 Thread Thomas Shaddack
On Sat, 17 Jul 2004, Steve Schear wrote: How about building a secure cell phone using GnuRadio as a core? That way you have maximum control afforded by the protocols. Several reasons valid at this moment (though I suppose (and hope) the situation will improve in next couple years). There is

Re: Secure telephones

2004-07-18 Thread Dave Howe
Thomas Shaddack wrote: The easiest way is probably a hybrid of telephone/modem, doing normal calls in analog voice mode and secure calls in digital modem-to-modem connection. The digital layer may be done best over IP protocol, assigning IP addresses to the phones and making them talk over TCP

Re: Secure telephones

2004-07-18 Thread Jack Lloyd
On Sun, Jul 18, 2004 at 07:31:59PM +0100, Dave Howe wrote: OpenVPN is of course built on SSL, and can use either X509 certificates or a preshared key for authentication. Sadly, there is no convenient way to use DNS-SEC key records for OpenVPN. How well is VoIP going to work over SSL/TLS

Re: Secure telephones

2004-07-18 Thread Dave Howe
Jack Lloyd wrote: How well is VoIP going to work over SSL/TLS (ie, TCP) though? you can do SSL over UDP if you like - I think most VPN software is UDP only, while OpenVPN has a fallback TCP mode for cases where you can't use UDP (and TBH there aren't many) I've never used any VoIP-over-TCP

Re: Secure telephones

2004-07-18 Thread Jack Lloyd
On Sun, Jul 18, 2004 at 08:53:35PM +0100, Dave Howe wrote: That may have just been an artifact of a bad implementation, though. DTLS might be a better pick for securing VoIP. There's also SRTP. The strength of a pure VPN solution is that you aren't limited to *just* VoIP - you can transfer

Re: Secure telephones

2004-07-18 Thread Thomas Shaddack
On Sat, 17 Jul 2004, Steve Schear wrote: How about building a secure cell phone using GnuRadio as a core? That way you have maximum control afforded by the protocols. Several reasons valid at this moment (though I suppose (and hope) the situation will improve in next couple years). There is

Re: Secure telephones

2004-07-18 Thread Thomas Shaddack
On Sun, 18 Jul 2004, Bill Stewart wrote: If you're trying to build a usable cellphone, you've got much more stringent design criteria than a deskphone. I am painfully aware of it. You've got packaging requirements that force you into serious industrial design if you want something

Re: Secure telephones

2004-07-18 Thread Bill Stewart
At 11:45 AM 7/17/2004, Thomas Shaddack wrote: Pondering construction of a secure telephone. (Or at least a cellphone in general. The user interfaces and features available on virtually all the mass-market phones suck, to put it very very mildly, not even mentioning If you're trying to build a

Re: Secure telephones

2004-07-18 Thread Steve Schear
At 11:45 AM 7/17/2004, Thomas Shaddack wrote: Pondering construction of a secure telephone. (Or at least a cellphone in general. The user interfaces and features available on virtually all the mass-market phones suck, to put it very very mildly, not even mentioning that there's no access to their

Re: Secure telephones

2004-07-18 Thread Jack Lloyd
On Sun, Jul 18, 2004 at 08:53:35PM +0100, Dave Howe wrote: That may have just been an artifact of a bad implementation, though. DTLS might be a better pick for securing VoIP. There's also SRTP. The strength of a pure VPN solution is that you aren't limited to *just* VoIP - you can transfer

Re: Secure telephones

2004-07-18 Thread Dave Howe
Thomas Shaddack wrote: The easiest way is probably a hybrid of telephone/modem, doing normal calls in analog voice mode and secure calls in digital modem-to-modem connection. The digital layer may be done best over IP protocol, assigning IP addresses to the phones and making them talk over TCP

Re: Secure telephones

2004-07-18 Thread Dave Howe
Jack Lloyd wrote: How well is VoIP going to work over SSL/TLS (ie, TCP) though? you can do SSL over UDP if you like - I think most VPN software is UDP only, while OpenVPN has a fallback TCP mode for cases where you can't use UDP (and TBH there aren't many) I've never used any VoIP-over-TCP

Re: Secure telephones

2004-07-18 Thread Jack Lloyd
On Sun, Jul 18, 2004 at 07:31:59PM +0100, Dave Howe wrote: OpenVPN is of course built on SSL, and can use either X509 certificates or a preshared key for authentication. Sadly, there is no convenient way to use DNS-SEC key records for OpenVPN. How well is VoIP going to work over SSL/TLS

Secure telephones

2004-07-17 Thread Thomas Shaddack
Pondering construction of a secure telephone. (Or at least a cellphone in general. The user interfaces and features available on virtually all the mass-market phones suck, to put it very very mildly, not even mentioning that there's no access to their firmware (so no chance of audit), poor or