Security and usability aspects of man-in-the-middle attacks on ZRTP

Journal of Universal Computer Science

Volumn 14, Issue 5, 2008, Pages 673-692

  Petraschek, Martin ^a   Hoeher, Thomas ^a   Jung, Oliver ^a   Hlavacs, Helmut ^b   Gansterer, Wilfried ^b  

^a TELECOMMUNICATIONS RESEARCH CENTER VIENNA FTW   (Austria)

^b UNIVERSITY OF VIENNA   (Austria)

Author keywords

Man in the middle attack; Security; ZRTP

Indexed keywords

EID: 44349133363     PISSN: 0958695X     EISSN: 09486968     Source Type: Journal    
DOI: None     Document Type: Conference Paper

References (15)

1. Baugher, M., McGrew, D., et al: RFC3711, The Secure Real-time Transport Protocol (SRTP), IETF, March 2004
2. Diffie, W., Hellman, M. E.: New directions in cryptography, IEEE Transactions on Information Theory, IT-22(6):644-654, November 1976
3. Ettercap: A Suite for Man in the Middle Attacks on LAN, http://ettercap.sourceforge.net
4. GSMK CryptoPhone, http://www.cryptophone.de/
5. Handley, M., Jacobson, V., Perkins, C.: RFC 4566, SDP: Session Description Protocol, IETF, July 2006
6. Juola, P., Zimmermann, P.: Whole-Word Phonetic Distances and the PGPfone Alphabet, Proceedings of the International, Conference of Spoken Language Processing, 1996
7. Minisip: A Multi-Platform Open Source SIP client, www.minisip.org
8. PGP Wordlist, http://en.wikipedia.org/wiki/PGP\_Words
9. Rescorla, E., McGrew, D., Fischl, J., Tschofenig, H.: DTLSSRTP, Proceedings of the 68th Internet Engineering Task Force, Prague, Czech Republic, 2007
10. Robin, J., Schwartz, A.: CS 259 Security Protocols - Final Project Report, Analysis of ZRTP, Standford University, March 2006
11. Rosenberg, J., Schulzrinne, H., et al.: RFC3261, SIP: Session Initiation Protocol, IETF, June 2002
12. The Zfone Project, www.zfoneproject.org
13. Whalen, S., et al.: An Introduction to ARP Spoofing, rootsecure.net, April 2001
14. O'Whielacronx, Z.: Human-oriented base-32 encoding, http://zooko.com/ repos/z-base-32/base32/DESIGN
15. Zimmermann, P., Johnston, A., Callas, J.: ZRTP: Media Path Key Agreement for Secure RTP, draft-zimmermann-avt-zrtp-06, March 2008