[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Demexp-dev] zPhone of Philip Zimmermann

From: David MENTRE
Subject: [Demexp-dev] zPhone of Philip Zimmermann
Date: Fri, 3 Feb 2006 10:04:10 +0100


Philip Zimmermann, author of PGP, works on secure VoIP (Voice over IP)
and is starting to make some noise about his zPhone (temporary name):

No much precise information right now, however :
  - it should be "OpenSource" (but Free Software???) ;

  - it uses an new approach (to my knowledge) to authentication and

   1. generate a session key with Diffie Hellman protocol,

   2. generate a fingerprint that users see on their screen and that
they can check by voice over the phone,

   3. this fingerprint is reused from one session to the other one
between 2 people, so that confidentiality and authentication from
session 1 to n is guaranteed by checking the fingerprint at session n;

 - no key server, neither centralised (PKI) or distributed (Web of Trust);

 - works within RTP protocol (UDP voice data stream) and an IETF draft
is prepared.

I find this approach very interesting, especially regarding end user
aspects (no key to generate, very simple, should work with NATs,

Of course, one should know more details (patents?) to make one precise
idea of it.

Best wishes,

reply via email to

[Prev in Thread] Current Thread [Next in Thread]