Re: [Linphone-developers] Call encryption SAS key

[Dharmendra Baghel]

Hi All,

Thanks for reply with such help full information.

i have one more issue when i used linphone sdk in an app and submit  my app on app store. they  rejected with following response related to VOIP background mode functionality.

"We found that your app uses a voip background mode service but does not include functionality that requires that mode to run persistently. This behavior is not in compliance with the App Store Review Guidelines. "

i could not understand what functionality we have missed. so please help and give me some suggestion for this issue.

Thanks & Regards,

Dharmendra Baghel

On Fri, Dec 12, 2014 at 4:53 PM, Johan Pascal <address@hidden> wrote:

Hi,
SAS is not a key but an authentication string allowing to avoid MiM attack when using ZRTP. SAS is actually the translation into a readable format of the hash of some part of the crypto material generated using ZRTP(see ZRTP rfc for more details).

SAS shall be validated by the call participants, each one giving to the other a part of the displayed SAS and being able to check the peer SAS matches his.

There are 2 possibilities of SAS representation, 4 characters or 2 words picked from a words list. Currently bzrtp implement the 4 characters representation only. There is no effect on the security, the 2 words display purpose is to make easier the oral SAS checking.

Johan

On 10/12/14 07:55, Dharmendra Baghel wrote:

Hi  All,


Can be change or increase SAS key length. currently its length is 6 char
and i want to increase it to 16 char for more security. how it is
possible to change size. please let me know as soon as possible.
/





Thanks & Regards,/*/

/*
*/Dharmendra Baghel/*


_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers