Skip to main content

Encryption

Encryption ensures that the call media and SIP signaling remains private during transmission. Transport Layer Security (TLS) provides encryption for SIP signaling and Secure Real-time Transport Protocol (SRTP) provides encryption for call content/media packets.

TLS​

The TLS protocol is designed to establish a secure connection between a client and a server communicating over an insecure channel. RFC 5246, the Transport Layer Security (TLS) Protocol, Version 1.2, specifies Version 1.2 of the Transport Layer Security (TLS) protocol.

Supported TLS Specifications​

  • TLS Version: TLSv1.2
  • Cipher Suites:
    • ECDHE-ECDSA-AES128-GCM-SHA256
    • ECDHE-RSA-AES128-GCM-SHA256
    • ECDHE-ECDSA-AES128-SHA256
    • ECDHE-RSA-AES128-SHA256
    • ECDHE-ECDSA-AES256-GCM-SHA384
    • ECDHE-RSA-AES256-GCM-SHA384
    • ECDHE-ECDSA-AES256-SHA384
    • ECDHE-RSA-AES256-SHA384
    • AES128-GCM-SHA256
    • AES128-SHA256
    • AES128-SHA
    • AES256-GCM-SHA384
    • AES256-SHA256
    • AES256-SHA

SRTP​

SRTP provides a framework for the encryption of RTP & RTCP. RFC 4568, Session Description Protocol (SDP) Security Description (SDES) for Media Streams, defines such a protocol specifically designed to exchange cryptographic material using a newly defined SDP crypto attribute.

Supported SRTP Specifications​

  • Crypto Suites:
    • AES_CM_128_HMAC_SHA1_80
    • AES_CM_128_HMAC_SHA1_32