trixter http://www.0xdecafbad.com
2005-May-23 15:11 UTC
[Asterisk-Users] OT: recover complete AES keys
According to this article it is possible to recover the complete AES encryption key by monitoring traffic (ie sniffing). I have not yet had time to review this method to see if it requires a bunch of special situations to occur or not. They state that its based on the AES algorithm and not the specific algorithm which indicates that anything that does AES can potentially be compromised (including some cryptophones, and other applications). Anyone using AES to secure their VoIP traffic (VPN for example) may want to look for alternatives. http://www.eweek.com/article2/0,1759,1818238,00.asp?kc=EWRSS03129TX1K0000614 -- Trixter http://www.0xdecafbad.com UK +44 870 340 4605 Germany +49 801 777 555 3402 US +1 360 207 0479 or +1 516 687 5200 FreeWorldDialup: 635378 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20050523/ee385169/attachment.pgp