Click here to learn
about this Sponsor:
Home  |  News  |  Articles  |  Polls  |  Forum

Keywords: Match:
GPL VoIP libraries, softphone gain enhanced security
Oct. 04, 2006

The GNU telephony project reports that GPL-licensed implementations of two key security protocols are available for use in Linux-based VoIP (voice-over-IP) devices and softphones. Additionally, a GPL-licensed softphone based on the new implementations is already available for download, testing, and use.

The two new security protocol implementations include:
  • SRTP (secure real-time protocol, aka, RFC 3711), a way of encrypting the voice channel or bearer channel in VoIP calls

  • ZRTP, a method of encrypting voice data using self-generated keys, rather than keys from certificate authorities


Zfone on Mac
(Click to enlarge)
ZRTP was invented by Phil Zimmermann, and was previously implemented in Zimmerman's Zfone project. By using self-generated keys accessible neither to the user, nor to any certificate authority, ZRTP appears aimed at closing two potential backdoors through which call streams might otherwise be surreptitiously monitored.

The new GPL-licensed implementation of ZRTP takes the form of a libzrtpcpp library that appears to work with ccRTP 1.5, a free software implementation of SRTP. Together, the two libraries can do much to help engineers develop "secure and intercept-free voice and video communication services," the GNU telephony project suggests.

High-security softphone

Additionally, a GPL-licensed softphone based on ccRTP and libzrtpcpp is already available for download, testing, and use. The Twinkle phone, available now for Linux, and distributed as part of SUSE Linux, offers basic SIP-based softphone features, along with some advanced features such as KDE integration, direct ALSA as well as OSS driver compatibility, and various agile calling capabilities.


An older Twinkle build's main screen
(Click to enlarge)

Availability

ccRTP 1.5, libzrtpcpp 0.9.0, and Twinkle 0.9 are available now. More details about the role of ccRTP and libzrtpcpp in the larger context of the GNU telephony project may be available on the project's Secure Call initiative page.

For general background on VoIP security, don't miss this vendor-neutral whitepaper from encyption technology provider Certicom.



Related Stories:


(Click here for further information)


FUEL Database on MontaVista Linux
Whether building a mobile handset, a car navigation system, a package tracking device, or a home entertainment console, developers need capable software systems, including an operating system, development tools, and supporting libraries, to gain maximum benefit from their hardware platform and to meet aggressive time-to-market goals.

Breaking New Ground: The Evolution of Linux Clustering
With a platform comprising a complete Linux distribution, enhanced for clustering, and tailored for HPC, Penguin Computing¿s Scyld Software provides the building blocks for organizations from enterprises to workgroups to deploy, manage, and maintain Linux clusters, regardless of their size.

Data Monitoring with NightStar LX
Unlike ordinary debuggers, NightStar LX doesn¿t leave you stranded in the dark. It¿s more than just a debugger, it¿s a whole suite of integrated diagnostic tools designed for time-critical Linux applications to reduce test time, increase productivity and lower costs. You can debug, monitor, analyze and tune with minimal intrusion, so you see real execution behavior. And that¿s positively illuminating.

Virtualizing Service Provider Networks with Vyatta
This paper highlights Vyatta's unique ability to virtualize networking functions using Vyatta's secure routing software in service provider environments.

High Availability Messaging Solution Using AXIGEN, Heartbeat and DRBD
This white paper discusses a high-availability messaging solution relying on the AXIGEN Mail Server, Heartbeat and DRBD. Solution architecture and implementation, as well as benefits of using AXIGEN for this setup are all presented in detail.

Understanding the Financial Benefits of Open Source
Will open source pay off? Open source is becoming standard within enterprises, often because of cost savings. Find out how much of a financial impact it can have on your organization. Get this methodology and calculator now, compliments of JBoss.

Embedded Hardware and OS Technology Empower PC-Based Platforms
The modern embedded computer is the jack of all trades appearing in many forms.

Data Management for Real-Time Distributed Systems
This paper provides an overview of the network-centric computing model, data distribution services, and distributed data management. It then describes how the SkyBoard integration and synchronization service, coupled with an implementation of the OMG¿s Data Distribution Service (DDS) standard, can be used to create an efficient data distribution, storage, and retrieval system.

7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.

 


Got a HOT tip?   please tell us!
Free weekly newsletter
Enter your email...
Click here for a profile of each sponsor:
PLATINUM SPONSORS
GOLD SPONSORS
(Become a sponsor)

ADVERTISEMENT
(Advertise here)

Check out the latest Linux powered...

mobile phones!

other cool
gadgets



BREAKING NEWS

• FPGAs shrink for mobile devices
• Tiny Bluetooth access point runs Linux
• Appliances use Pentium M SoC
• Laser-guided French robots run Linux
• GPL compliance guide published
• PMPs run Linux on ARM Cortex
• Linux to gain anti-virus software
• Intel aims x86 at digital TVs
• Intel unveils dual-core Atom
• Linux powers MID-like nav device
• Virtualization technology targets MIDs
• Open-source phone getting WiFi sign-on port
• Streaming media player targets netbooks, nettops
• Intel announces high-speed SSDs
• Dell embeds Linux in enterprise laptops


Most popular stories -- past 90 days:
• Open source phone goes mass-market
• Updated! Linux Mobile Phones Showcase
• World's cheapest Linux-based laptop?
• Garmin Nav devices run Gnome Linux
• First Atom-based notebook runs Linux
• ARM9 board boots Debian in 0.69 seconds
• Open source camera records geotagged video to SATA HDD
• Linux-friendly Beagle fetches $150
• "PDA phone" runs Linux
• Intel offers $80 "Little Falls" Atom mobo
• Netflix Player runs Linux


DesktopLinux headlines:
• Linux to gain anti-virus software
• Linux gains backup utility
• Testing Lenny
• HP offers Linux on low-end mini-notes
• Dell shipping five Hardy Heron systems
• IBM pushes "Microsoft-free" desktops
• Unified communications groupware comes to Linux
• Lightweight GNOME alternative emerges
• Freespire lives! Goes back to Debian
• gOS 3.0 goes Gadget crazy


Also visit our sister site:


Sign up for LinuxDevices.com's...

news feed

Home  |  News  |  Articles  |  Polls  |  Forum  |  About  |  Contact
 

Ziff Davis Enterprise Home | Contact Us | Advertise | Link to Us | Reprints | Magazine Subscriptions | Newsletters
Tech RSS Feeds | White Papers | ROI Calculators | Tech Podcasts | Tech Video | VARs | Channel News

Baseline | Careers | Channel Insider | CIO Insight | DesktopLinux | DeviceForge | DevSource | eSeminars |
eWEEK | Enterprise Network Security | LinuxDevices | Linux Watch | Microsoft Watch | Mid-market | Networking | PDF Zone |
Publish | Security IT Hub | Strategic Partner | Web Buyer's Guide | Windows for Devices

Developer Shed | Dev Shed | ASP Free | Dev Articles | Dev Hardware | SEO Chat | Tutorialized | Scripts |
Code Walkers | Web Hosters | Dev Mechanic | Dev Archives | igrep

Use of this site is governed by our Terms of Service and Privacy Policy. Except where otherwise specified, the contents of this site are copyright © 1999-2008 Ziff Davis Enterprise Holdings Inc. All Rights Reserved. Reproduction in whole or in part in any form or medium without express written permission of Ziff Davis Enterprise is prohibited. Linux is a registered trademark of Linus Torvalds. All other marks are the property of their respective owners.