Details
Description
When libsrtp can be updated to use openssl and a version of libsrtp that supports AES-GCM:
http://jira.freeswitch.org/browse/FS-5422
FreeSWITCH will already be able to realize some performance improvements with CPUs that support AES-NI. However, the real win is using AES-GCM mode:
https://github.com/cisco/libsrtp/pull/34
http://tools.ietf.org/html/draft-ietf-avtcore-srtp-aes-gcm-10
https://crypto.stanford.edu/RealWorldCrypto/slides/gueron.pdf
I'm told there is already a patch to implement this for pjsip. It would be nice to get this implemented in FreeSWITCH as well.
http://jira.freeswitch.org/browse/FS-5422
FreeSWITCH will already be able to realize some performance improvements with CPUs that support AES-NI. However, the real win is using AES-GCM mode:
https://github.com/cisco/libsrtp/pull/34
http://tools.ietf.org/html/draft-ietf-avtcore-srtp-aes-gcm-10
https://crypto.stanford.edu/RealWorldCrypto/slides/gueron.pdf
I'm told there is already a patch to implement this for pjsip. It would be nice to get this implemented in FreeSWITCH as well.