The best way to achieve encryption so that it is still viewed by your server (asterisk) as RTP is to XOR the RTP payload (not including the RTP headers). XOR does not alter the length of the payload so it gets sent out as a perfectly formatted RTP packet. The catch is if the other end is not one of your XOR capable handsets (eg. a PSTN Gateway) then your RTP session would simply produce unrecognizable noise. -joegen sangram desai wrote: > Thanks Saul for the information. > > Yes, SRTP is the standard way for RTP encryption. > But then in order to support SRTP, we will need to configure/change > our server from Asterisk to any other SRTP supported server like > FreeSWITCH. We want to avoid it as far as possible due to short > deadlines. > So is it possible if we encrypt/Decrypt the RTP data directly at > client ends(at WM Handsets in our case) without involving server > configurations using PJSIP? > If yes then how it can be done? > Thanks. > On Thu, Jan 7, 2010 at 6:23 PM, Saul Ibarra Corretg? > <saul at ag-projects.com <mailto:saul at ag-projects.com>> wrote: > > Hi, > > > On 7/1/10 1:38 PM, sangram desai wrote: > > Hi, > We are currently using PJSIP on windows mobile handsets using > Asterisk > as SIP/Media Server. > We need to encrypt/decrypt the voice data for transmission of > RTP packets. > Is it necessary to enable SRTP for this? Because, as far as > possble we > need to avoid the Server Settings configuration changes. > If its possible then how to achieve it? > Thanks in advance, > > > SRTP is the standard way of achieving RTP encryption. PJSIP does > support this, but Asterisk doesn't currently support it. There a > branch in which SRTP support is being worked on, but it's quite > abandoned right now AFAIK and it's not reliable for anything else > than playing with it. > > You may want to do p2p calls to test SRTP or use a SRTP-capable > SIP/Media server like FreeSWITCH. > > > Regards, > > -- > Sa?l Ibarra Corretg? > AG Projects > > _______________________________________________ > Visit our blog: http://blog.pjsip.org <http://blog.pjsip.org/> > > pjsip mailing list > pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> > http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org > > > ------------------------------------------------------------------------ > > _______________________________________________ > Visit our blog: http://blog.pjsip.org > > pjsip mailing list > pjsip at lists.pjsip.org > http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >
