Full Disclosure mailing list archives
ZORG, new C++ and Java ZRTP implementation public release
From: "Fabio Pietrosanti (naif)" <lists () infosecurity ch>
Date: Wed, 12 Jan 2011 11:29:26 +0100
Milan, January 12th 2011 - PrivateWave Italia S.p.A, italian company engaged in developing technologies for privacy protection and information security in voice telecommunications, is pleased to announce the release of ZORG, a new open source ZRTP protocol implementation available for download from http://www.zrtp.org . ZRTP [1] provides end-to-end key exchange with Elliptic Curve Diffie-Hellmann 384bit and AES-256 SRTP encryption . ZORG has been originally developed and implemented in PrivateWave's PrivateGSM voice encryption products available for the following platforms: Blackberry, Nokia and iOS (iPhone) . Zorg C++ has been integrated with PJSIP open source VoIP SDK [2] and it's provided as integration patch against PJSIP 1.8.5. It has been tested on iPhone, Symbian, Windows, Linux and Mac OS X. Zorg Java has been integrated within a custom version of MJSIP [3] open source SDK on Blackberry platform and it includes memory usage optimizations required to reduce at minimum garbage collector activity. Both platforms have separated and modular cryptographic back-ends so that the cryptographic algorithms implementation could be easily swapped with other ones. ZORG is licensed under GNU AGPL and source code is available on github athttps://github.com/privatewave/ZORG. We are releasing it under open source and in coherence with our approach to security [4] as we really hope that it can be useful for the open source ecosystem to create new voice encryption systems in support of freedom of speech. More than 20 pjsip-based open source VoIP encryption software (several written in Java) could directly benefit from ZORG release. We would be happy to receive proposal of cooperation, new integration, new cryptographic back-ends, bug scouting and whatever useful to improve and let ZRTP affirm as voice encryption standard. Zorg is available from http://www.zrtp.org . [1] ZRTP: http://http://en.wikipedia.org/wiki/ZRTP [2] PJSIP: http://www.pjsip.org [3] MJSIP: http://www.mjsip.org [4] Security approach:http://www.privatewave.com/security/approch.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- ZORG, new C++ and Java ZRTP implementation public release Fabio Pietrosanti (naif) (Jan 12)