Security in Kiax

Help
mic_sed
2006-02-06
2013-04-25
  • mic_sed
    mic_sed
    2006-02-06

    Please can you tell me, if Kiax has some security mechanisms for media-stream and signaling data?
    Thanks

     
    • Emo
      Emo
      2006-02-06

      Kiax supports only MD5 based authentication. It uses IAX2 protocol using a modified version of iaxclient (iaxclient.sourceforge.net) that currently has no encryption mechanisms. In IAX2 signaling and media are passed through a single channel using UDP datagrams. Theoretically you should be able to implement encryption on packet level and use the same mechanisms in your asterisk server and the clients. Currently there is no standard way of doing this..

       
      • Robert Clayton
        Robert Clayton
        2006-12-28

        I noticed that:

        As of asterisk version 1.2.4 (maybe before) there is a rather undocumented channel encryption feature included in chan_iax2. After successful authentication the whole channel including control data and voice data is encrypted with AES128.

        As noted in:
        http://www.voip-info.org/wiki/view/IAX+encryption

        Is this supported?

         
        • Emo
          Emo
          2006-12-29

          It is not. It is not supported by libiaxclient and until it gets there officially kiax will likely not support it..

          Greetings,
          Emil