ZRTP: Media Path Key Agreement for Unicast Secure RTP

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 115
Abstract: This document defines ZRTP, a protocol for media path Diffie-Hellman exchange to agree on a session key and parameters for establishing unicast Secure Real-time Transport Protocol (SRTP) sessions for Voice over IP (VoIP) applications. The ZRTP protocol is media path keying because it is multiplexed on the same port as RTP and does not require support in the signaling protocol. ZRTP does not assume a Public Key Infrastructure (PKI) or require the complexity of certificates in end devices. For the media session, ZRTP provides confidentiality, protection against man-in-the-middle (MiTM) attacks, and, in cases where the signaling protocol provides end-to-end integrity protection, authentication. ZRTP can utilize a Session Description Protocol (SDP) attribute to provide discovery and authentication through the signaling channel. To provide best effort SRTP, ZRTP utilizes normal RTP/AVP (Audio-Visual Profile) profiles. ZRTP secures media sessions that include a voice media stream and can also secure media sessions that do not include voice by using an optional digital signature. This document is not an Internet Standards Track specification; it is published for informational purposes.
Publication Date: 2011-04-01
Status Note: Informational
DOI: 10.17487/RFC6189
Link: https://doi.org/10.17487/RFC6189
Author(s): Philip Zimmermann
Alan Johnston
Jon Callas

Latest version of IETF RFC 6189

Document Versions — IETF RFC 6189

▶ IETF RFC 6189 (2011-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST FIPS 140-2 [Superseded]
NIST FIPS 180-3 [Withdrawn]
NIST.FIPS.186 — DSS EXTERNAL
NIST FIPS 197 [Superseded]
NIST FIPS 198-1 [Active]
NIST SP 800-38A [Active, Amended]
NIST.SP.800-56A — NIST EXTERNAL
NIST.SP.800-90 — NIST800.90 EXTERNAL
NIST.SP.800-108 — 800-108 EXTERNAL
Schneier, B., Kelsey, J., Whiting, D., Hall, C., and N. Ferguson, "Twofish: A 128-Bit Block Cipher", June 1998, < http://www.schneier.com/paper-twofish-paper.html >. EXTERNAL
Ferguson, N., Lucks, S., Schneier, B., Whiting, D., Bellare, M., Kohno, T., Callas, J., and J. Walker, "The Skein Hash Function Family, Version 1.3 - 1 Oct 2010", <ht tp://www.skein-hash.info/sites/default/files/ skein1.3.pdf>. EXTERNAL
"PGP Word List", December 2010, < http://en.wikipedia.org/ w/index.php?title=PGP_word_list&oldid=400752943 >. EXTERNAL
"NSA Suite B Cryptography", NSA Information Assurance Directorate, NSA Suite B Cryptography. EXTERNAL
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 3526 [Active*]
IETF RFC 3550 [Active*]
IETF RFC 3711 [Active*]
IETF RFC 4231 [Active*]
IETF RFC 4566 [Superseded*]
IETF RFC 4880 [Superseded*]
IETF RFC 4960 [Superseded*]
IETF RFC 5114 [Active*]
IETF RFC 5479 [Active*]
IETF RFC 5759 [Active*]
IETF RFC 6188 [Active*]

Bibliographic Reference(s)

NIST.SP.800-57-PART1 — NIST.800-57-Part1.2006 EXTERNAL
NIST.SP.800-131A — NIST-SP800-131A EXTERNAL
Ferguson, N. and B. Schneier, "Practical Cryptography", Wiley Publishing, 2003. EXTERNAL
"The Two Generals' Problem", March 2011, < http:// en.wikipedia.org/w/ index.php?title=Two_Generals%27_Problem&oldid=417855753 >. EXTERNAL
Wing, D. and H. Kaplan, "SIP Identity using Media Path" , Work in Progress, February 2008. EXTERNAL
Jivsov, A., "ECC in OpenPGP" , Work in Progress, March 2011. EXTERNAL
Saint-Andre, P., "Use of ZRTP in Jingle RTP Sessions", XSF XEP 0262, August 2010. EXTERNAL
Zimmermann, P., "Zfone Project", 2006, < http://www.philzimmermann.com/zfone >. EXTERNAL
"Debian Security Advisory - OpenSSL predictable random number generator", May 2008, < http://www.debian.org/security/2008/dsa-1571 >. EXTERNAL
Juola, P., "Isolated Word Confusion Metrics and the PGPfone Alphabet", Proceedings of New Methods in Language Processing, 1996. EXTERNAL
Sunshine, J., Egelman, S., Almuhimedi, H., Atri, N., and L. Cranor, "Crying Wolf: An Empirical Study of SSL Warning Effectiveness", USENIX Security Symposium 2009, < http://lorrie.cranor.org/pubs/sslwarnings.pdf >. EXTERNAL
Juola, P. and P. Zimmermann, "Whole-Word Phonetic Distances and the PGPfone Alphabet", Proceedings of the International Conference of Spoken Language Processing (ICSLP-96), 1996. EXTERNAL
Perrig, A., Canetti, R., Tygar, J., and D. Song, "The TESLA Broadcast Authentication Protocol", October 2002, <h ttp://www.ece.cmu.edu/~adrian/projects/tesla-cryptobytes/ tesla-cryptobytes.pdf>. EXTERNAL
Perkins, C. and J. Valin, "Guidelines for the use of Variable Bit Rate Audio with Secure RTP", Work in Progress, December 2010. EXTERNAL
"The Skein Hash Function Family - Web site", < http://www.skein-hash.info/ >. EXTERNAL
Blossom, E., "The VP1 Protocol for Voice Privacy Devices Version 1.2", < http://www.comsec.com/vp1-protocol.pdf >. EXTERNAL
Zimmermann, P., "PGPfone", July 1996, < http://philzimmermann.com/docs/pgpfone10b7.pdf >. EXTERNAL
"Cryptographic Hash Algorithm Competition", NIST Computer Security Resource Center Cryptographic Hash Project. EXTERNAL
McGrew, D., "AES-GCM and AES-CCM Authenticated Encryption in Secure RTP (SRTP)", Work in Progress, January 2011. EXTERNAL
Wright, C., Ballard, L., Coull, S., Monrose, F., and G. Masson, "Spot me if you can: Uncovering spoken phrases in encrypted VoIP conversations", Proceedings of the 2008 IEEE Symposium on Security and Privacy 2008, < http://cs.jhu.edu/~cwright/oakland08.pdf >. EXTERNAL
IETF RFC 1191 [Active*]
IETF RFC 1981 [Superseded*]
IETF RFC 3261 [Active*]
IETF RFC 3514 [Active*]
IETF RFC 3824 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 4251 [Active*]
IETF RFC 4474 [Superseded*]
IETF RFC 4475 [Active*]
IETF RFC 4567 [Active*]
IETF RFC 4568 [Active*]
IETF RFC 4579 [Active*]
IETF RFC 5117 [Superseded*]
IETF RFC 5245 [Superseded*]
IETF RFC 5764 [Active*]
IETF RFC 5869 [Active*]
IETF RFC 6090 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6189.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6189, ZRTP: Media Path Key Agreement for Unicast Secure RTP. Available at https://doi.org/10.17487/RFC6189

Snippet:

IETF RFC 6189, ZRTP: Media Path Key Agreement for Unicast Secure RTP. Available at https://doi.org/10.17487/RFC6189

HTML (ISO 690 compliant)

Preview:

IETF RFC 6189, ZRTP: Media Path Key Agreement for Unicast Secure RTP. Available at https://doi.org/10.17487/RFC6189

Snippet:

<span class="citation"><cite>IETF RFC 6189</cite>, ZRTP: Media Path Key Agreement for Unicast Secure RTP. Available at <a href="https://doi.org/10.17487/RFC6189" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6189</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6189, ZRTP: Media Path Key Agreement for Unicast Secure RTP
doi: 10.17487/RFC6189
url: https://doi.org/10.17487/RFC6189

Snippet:

<li>
<cite id="bib-rfc6189">IETF RFC 6189</cite>, ZRTP: Media Path Key Agreement for Unicast Secure RTP
<span class="doi">10.17487/RFC6189</span>
</li>

Referenced By

IETF RFC 6562 [Active*]
IETF RFC 6679 [Active*]
IETF RFC 7201 [Active*]
IETF RFC 7983 [Active*]
IETF RFC 8844 [Active*]
IETF RFC 9443 [Active*]