asterisk users - Oct 2015 - Asterisk encrypted authentication for clients

Hello,
I am searching for a solution to encrypt authentication from Asterisk 
server to clients. Searching srtp seem to encrypt traffic, I just want 
client authentication with encryption. Can someone point to the right 
direction? has anybody used ZRTP? experience with ZRTP?

Thanks,
_motty

Hi Motty,

Isn't the whole point of the nonce in a SIP registration to ensure the
secret doesn't go on the wire in plain-text? Is this not enough, or are you
looking to hide the username too?

(if so, fair 'nuf, just wondering why :)

Pete

Ps, if so then I think TLS is the missing part of your equation.

On 29/10/2015, at 11:54 AM, Motty <motty.cruz at gmail.com> wrote:
> Hello,
> I am searching for a solution to encrypt authentication from Asterisk
server to clients. Searching srtp seem to encrypt traffic, I just want client
authentication with encryption. Can someone point to the right direction? has
anybody used ZRTP? experience with ZRTP?
> 
> Thanks,
> _motty
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20151029/a3d21e7b/attachment.html>

On 28 October 2015 at 22:54, Motty <motty.cruz at gmail.com> wrote:
> Hello,
> I am searching for a solution to encrypt authentication from Asterisk
> server to clients. Searching srtp seem to encrypt traffic, I just want
> client authentication with encryption. Can someone point to the right
> direction? has anybody used ZRTP? experience with ZRTP?
>
> Thanks,
> _motty
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
https://wiki.asterisk.org/wiki/display/AST/SIP+TLS+Transport

-- 

Ishfaq Malik
Department: VOIP Support
Company: Packnet Limited
t: +44 (0)161 660 2350
f: +44 (0)161 660 9825
e: ish at pack-net.co.uk
w: http://www.pack-net.co.uk

Registered Address: PACKNET LIMITED, Duplex 2, Ducie House
37 Ducie Street
Manchester, M1 2JW
COMPANY REG NO. 04920552
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20151029/2a480085/attachment.html>

On 10/28/2015 06:37 PM, Pete Mundy wrote:
> Hi Motty,
>
> Isn't the whole point of the nonce in a SIP registration to ensure the 
> secret doesn't go on the wire in plain-text? Is this not enough, or 
> are you looking to hide the username too?
>
> (if so, fair 'nuf, just wondering why :)
>
> Pete
>
> Ps, if so then I think TLS is the missing part of your equation.
>
> On 29/10/2015, at 11:54 AM, Motty <motty.cruz at gmail.com 
> <mailto:motty.cruz at gmail.com>> wrote:
>
>> Hello,
>> I am searching for a solution to encrypt authentication from Asterisk 
>> server to clients. Searching srtp seem to encrypt traffic, I just 
>> want client authentication with encryption. Can someone point to the 
>> right direction? has anybody used ZRTP? experience with ZRTP?
>>
>> Thanks,
>> _motty
>
>
You want SIP over TLS.  That encrypts the signalling.  SRTP and ZRTP 
encrypt the actual voice traffic.

Cheers,

j
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20151029/3d77e9db/attachment.html>