Is there a standard for encryption of traffic between IP phones?

Is there a standard for encryption of traffic between IP phones?

Is there a standard for encryption of traffic between IP phones? If no, then what options do enterprises have currently to protect the voice traffic passing via a public domain like the Internet?

    Requires Free Membership to View

    Login

    SearchUnifiedCommunications.com members gain immediate and unlimited access breaking industry news, expert advice on UC, technical guides, and more -- all at no cost. Join me on SearchUnifiedCommunications.com today!

    Kate Gerwig, Editorial Director

    By submitting your registration information to SearchUnifiedCommunications.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchUnifiedCommunications.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Yes, there are standards for encrypting the payload for voice traffic that will traverse the public Internet. As you may know, VoIP calls consist of a signaling stream, such as SIP, and a voice packet transport connection, such as Real-time Transport Protocol (RTP). For SIP, you can use several encryption schemes such as HTTP Digest authentication, TLS, S/MIME or IPSec. For RTP you can use Secure RTP (SRTP).

Given these standards, you can achieve end-to-end security or secure just the part of the call that will traverse public networks. You can also transport VoIP traffic over a VPN to achieve security.

The products you use for your IP PBX or VoIP gateway must support these protocols for you to be able to make your calls secure. In addition, your network security elements (firewalls, NATs, proxies, etc.) must also be VoIP-aware. You must also realize that encrypting voice traffic has a big performance overhead on the equipment at the endpoints and thus may be able to carry less traffic.

This was first published in June 2006