Bug 22952

Summary: ZRTP support for end-to-end encryption of RTP
Product: Telepathy Reporter: Josh Triplett <josh>
Component: generalAssignee: Telepathy bugs list <telepathy-bugs>
Status: RESOLVED MOVED QA Contact: Telepathy bugs list <telepathy-bugs>
Severity: normal    
Priority: medium CC: a9016009, ashaman, daniel.scharon, david.alston, david, devurandom, lists, mcatanzaro, vulcain
Version: unspecified   
Hardware: Other   
OS: All   
See Also: https://bugzilla.gnome.org/show_bug.cgi?id=589778
Whiteboard:
i915 platform: i915 features:

Description Josh Triplett 2009-07-26 09:50:52 UTC
ZRTP provides end-to-end encryption of RTP, without using SIP or similar for negotiation or key exchange.  I'd love to see support for this in Telepathy, in a way that both SofiaSIP and Gabble can use.

GNU ZRTP and the libZRTP SDK both provide libraries implementing ZRTP.

Several other clients have support for ZRTP, such as Twinkle; these should interoperate with any other implementation of ZRTP.

I don't know if any client yet supports ZRTP for XMPP/Jingle calls; that would prove particularly useful.
Comment 1 Christoph Anton Mitterer 2012-01-13 17:01:09 UTC
Hi.

Is this already in progress? Would be required for many things, e.g. https://bugzilla.gnome.org/show_bug.cgi?id=589778

Cheers,
Chris.
Comment 2 Andre Klapper 2012-01-20 14:27:35 UTC
*** Bug 28056 has been marked as a duplicate of this bug. ***
Comment 3 Aaron Whitehouse 2012-01-21 22:34:59 UTC
Jitsi provides a good example of a ZRTP implementation, with ZRTP working for both SIP and XMPP/Jingle:
http://jitsi.org/index.php/Documentation/ZrtpFAQ
http://jitsi.org/index.php/Main/Features

Some background information on this is here:
https://wiki.ubuntu.com/secureVOIP

There is also the nightlies of cSIPSIMPLE (https://code.google.com/p/csipsimple/), which implements ZRTP for SIP calls on Android.
Comment 4 Aaron Whitehouse 2012-02-19 01:31:33 UTC
I am really interested in this and would be prepared to throw a small amount of money at pushing it through the various stages required to get zRTP-secured XMPP/Jingle calls in Empathy. (At the moment I'm using Jitsi, which isn't anywhere near as nice to use as Empathy.)

From the many comments that I have seen around generally, I would expect others to be the same. Perhaps you could establish a BidForFix to have this feature implemented and see if people are interested in financing it?
Comment 5 david.alston 2012-12-12 22:10:30 UTC
I'm also very interested in this feature.

ZRTP has protection against main-in-the-middle attacks and is very easy to use.


Here are some links that could be helpful as a starting place..

ZRTP Protocol information..
http://en.wikipedia.org/wiki/ZRTP
http://www.voip-info.org/wiki/view/ZRTP

Other ZRTP Clients..
http://www.twinklephone.com/
https://jitsi.org/

Some ZRTP libraries..
http://www.gnutelephony.org/index.php/GNU_ZRTP
http://www.icall.com/developers/open-zrtp
Comment 6 Asha'man 2014-03-06 09:50:59 UTC
I started a bounty for the addition of ZRTP support to Telepathy.
https://freedomsponsors.org/core/issue/464/support-end-to-end-encryption-and-authentication
Comment 7 Dennis Schridde 2014-09-09 04:34:20 UTC
Any news?
Comment 8 daniel.scharon 2014-11-17 11:56:25 UTC
it's supported now within farstream: https://bugs.freedesktop.org/show_bug.cgi?id=52481
Comment 9 daniel.scharon 2016-10-26 15:16:39 UTC
regarding ZRTP there is also this GStreamer-plugin: https://github.com/wernerd/gstzrtp
Comment 10 diane 2016-10-27 17:45:32 UTC
(In reply to daniel.scharon from comment #9)
> regarding ZRTP there is also this GStreamer-plugin:
> https://github.com/wernerd/gstzrtp

Neat. Thank you for adding the link
Comment 11 GitLab Migration User 2019-12-09 11:21:29 UTC
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/telepathy/telepathy-spec/issues/149.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.