Secure Internet Telephony
summary
Demonstrates how unprotected SIP-based VoIP calls can be captured and recorded using Ethereal (Wireshark) and then explains how Kphone 4.2 was extended to secure calls by adding SRTP for encrypted media and MIKEY for end-to-end key establishment using RSA. Describes using DNS-stored public keys in DomainKeys format (generated with OpenSSL and pasted into DNS TXT records) so Kphone can automatically fetch peers’ keys via SIP URIs to enable authentication and prevent eavesdropping and SPIT.
AI-written summary · about
related talks
30mAttacking Encrypted VOIP Protocols
53mVoIP Wars: the Phreakers Awaken
30mMITM On PSTN: Novel Methods For Intercepting Phone Calls
33mVoLTE Phreaking
21mHanging on the Telephone: Hacking VoIP
29mAuthentiCall: Efficient Identity and Content Authentication for Phone Calls
01h 02mVoIP Wars: Attack of the Cisco Phones
45mVoice Security - Get Up to Speed on This Attack Vector