[pjsip] Speex basic VBR and ABR support [PATCH]

Roman Imankulov roman at netangels.ru
Wed Jun 10 10:54:37 EDT 2009


Hi,

Fabio Pietrosanti (naif) wrote:
> Hi all,
> 
> please be careful in checking that speex VBR is not compatible with SRTP 
> as there are well known security vulnerability that affect SRTP when 
> used with VBR enabled codec.
> 
> If VBR is introduced please also add that kind of check to the code, 
> SRTP & VBR feature cannot be enabled at the same time because of 
> security risks:
> http://www2.computer.org/portal/web/csdl/doi/10.1109/SP.2008.21
> 
> A new internet-draft for SRTP modification for supporting without 
> security risks VBR features is in progress:
> http://bgp.potaroo.net/ietf/idref/draft-perkins-avt-srtp-vbr-audio/

Thanks, very illuminative. Interesting that the referenced IETF draft 
also suggests to disable VAD with SRTP as extreme form of VBR.

-- 
Roman Imankulov
roman at netangels.ru



More information about the pjsip mailing list