Hi, Does the recent news about the flaws in the ZRTPCPP library (http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses- in.html) impact the Freeswitch implementation of ZRTP in any way? Appreciate this is fairly fresh news, so in a way it's more of an FYI! Thanks.
If it is vulnerable, that would pose a security risk for months. But is somehow limited as fs is rarely used in trusted mitm mode which implies processing of the zrtp key material. On Jul 2, 2013 12:20 AM, "Ben" <ben122uk@gmail.com> wrote:
Hi,****
** **
Does the recent news about the flaws in the ZRTPCPP library ( http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-i...) impact the Freeswitch implementation of ZRTP in any way?****
** **
Appreciate this is fairly fresh news, so in a way it’s more of an FYI!****
** **
Thanks.****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
FS doesn¹t use that lib for ZRTP... We use libzrtp written in C On 7/1/13 4:17 PM, "Ben" <ben122uk@gmail.com> wrote:
Hi,
Does the recent news about the flaws in the ZRTPCPP library (http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-i... .html) impact the Freeswitch implementation of ZRTP in any way?
Appreciate this is fairly fresh news, so in a way it¹s more of an FYI!
Thanks.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Ken http://www.FreeSWITCH.org http://www.ClueCon.com http://www.OSTAG.org irc.freenode.net #freeswitch
participants (3)
-
Ben
-
Daniel Ivanov
-
Ken Rice