Re: [Asterisk-Users] Re: Voice Encryption
Hello, I went over the code. AES128 is the only algorithm that is suppored today. More importantly there are some concerns on the vulnerability as discussed in http://lists.digium.com/pipermail/asterisk-security/2005-August/60.html. People are using UDP VPNs to satisfy customer requirements. http://lists.digium.com/pipermail/asterisk-users/2005-August/120293.html we are using plain ipsec here. From softphones, we just use operating system's native ipsec support. For hardphones, we have a custom device based on soekris board with vpn hardware encryption accelerator, which does the job for the phone. Juraj. ___ --Bandwidth and Colocation sponsored by Easynews.com -- Asterisk-Users mailing list Asterisk-Users@lists.digium.com http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
[Asterisk-Users] Re: Voice Encryption
I went over the code. AES128 is the only algorithm that is suppored today. More importantly there are some concerns on the vulnerability as discussed in http://lists.digium.com/pipermail/asterisk-security/2005-August/60.html. People are using UDP VPNs to satisfy customer requirements. http://lists.digium.com/pipermail/asterisk-users/2005-August/120293.html Thanks -Scott -- Message: 6 Date: Wed, 28 Sep 2005 19:09:17 -0500 From: Andy Hamilton [EMAIL PROTECTED] Subject: Re: [Asterisk-Users] Re: Voice Encryption To: Asterisk Users Mailing List - Non-Commercial Discussion asterisk-users@lists.digium.com Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=ISO-8859-1 Does Asterisk support encryption of voice traffic? I found following wiki that describes IAX RSA authentication. I was able to implement the public/private key authentication among three Asterisk servers connected using IAX protocol. I am not certain if voice traffic can also be encrypted among the Asterisk servers. Your help is highly appreciated. There has been a little discussion of this topic on the asterisk-security list somewhat recently. You may want to look at the message archive from August ( http://lists.digium.com/pipermail/asterisk-security/2005-August/thread.html ) as well as the one from September. Hope this offers a little help; as someone mentioned, not much documentation is out there. From the August thread: Basically it's an automatic features (CVS-HEAD only, btw) where anytime a pair of IAX peers have encryption set to yes (or, as I understand it, a mutually-agreed-upon and supported algorithm) then it just happens automagically. (Brian Capouch) -a ___ --Bandwidth and Colocation sponsored by Easynews.com -- Asterisk-Users mailing list Asterisk-Users@lists.digium.com http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
[Asterisk-Users] Re: Voice Encryption
--- From: Scott Huang [EMAIL PROTECTED] To: asterisk-users@lists.digium.com Hi, Does Asterisk support encryption of voice traffic? I found following wiki that describes IAX RSA authentication. I was able to implement the public/private key authentication among three Asterisk servers connected using IAX protocol. I am not certain if voice traffic can also be encrypted among the Asterisk servers. Your help is highly appreciated. http://www.voip-info.org/tiki-index.php?page=3DAsterisk+iax+rsa+auth Thanks in advance -Scott --- Scott: The only secure encryption scenario is one that covers point-to-point. In that case, Asterisk has little or nothing to do: all the [en|de]crypting work is done by the SIP phones at the ends. I have been investigating the issue, and AFAIK the only phone that support secure communications in the Sipura. In addition to a pair of phones, you will need the appropriate keys, which are nicely provided by Voxilla: http://voxilla.com/certrequest.php -Ramon ___ --Bandwidth and Colocation sponsored by Easynews.com -- Asterisk-Users mailing list Asterisk-Users@lists.digium.com http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] Re: Voice Encryption
Does Asterisk support encryption of voice traffic? I found following wiki that describes IAX RSA authentication. I was able to implement the public/private key authentication among three Asterisk servers connected using IAX protocol. I am not certain if voice traffic can also be encrypted among the Asterisk servers. Your help is highly appreciated. There has been a little discussion of this topic on the asterisk-security list somewhat recently. You may want to look at the message archive from August ( http://lists.digium.com/pipermail/asterisk-security/2005-August/thread.html ) as well as the one from September. Hope this offers a little help; as someone mentioned, not much documentation is out there. From the August thread: Basically it's an automatic features (CVS-HEAD only, btw) where anytime a pair of IAX peers have encryption set to yes (or, as I understand it, a mutually-agreed-upon and supported algorithm) then it just happens automagically. (Brian Capouch) -a ___ --Bandwidth and Colocation sponsored by Easynews.com -- Asterisk-Users mailing list Asterisk-Users@lists.digium.com http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
