Re: [Linphone-developers] bzrtp upgrade with Elliptic Curve

[Andrey Gursky]

Hi William, Linphone developers and list readers

On Wed, 8 Mar 2017 12:36:44 -0300 william anderson wrote:

> Hello,
> 
> I notice bzrtp is not updated for a long time, and only implement old
> Finite field Diffie-Hellman which is nowadays not secure due to brute force
> attacks.
> 
> Is it possible to add or implement the following:
> Elliptic curve Diffie-Hellman with 256-bit, 384-bit and 521-bit ECP groups

If this is too hard, maybe just go with it like bctoolbox (for both
polarSSL and mbedTLS) i.e. implement a thin wrapper something like
bztoolbox for both bzrtp and libzrtp [1]?

Regards,
Andrey

[1] https://github.com/traviscross/libzrtp