[VOIPSEC] Anything new on skype security?

[Randell Jesup]

Robert Moskowitz <rgm at icsalabs.com> writes:
>This is the most current paper I have found:
>
>www.simson.net/ref/2005/OSI_Skype6.pdf
>
>What is the RSA key exchange?  Any analysis of it?
>
>What mode of operation is used for the AES '256' bit cipher?
>
> From my own experience I know that skype has been refusing to expose 
>their protocols to analysis.  I have not even seen a note from any 
>respected person in the cyrpto field that they have review skype.

        Some people at columbia did a protocol analysis on it, though they
couldn't evaluate the encryption.

-- 
Randell Jesup, Worldgate (developers of the Ojo videophone), ex-Amiga OS team
rjesup at wgate.com
"The fetters imposed on liberty at home have ever been forged out of the weapons
provided for defence against real, pretended, or imaginary dangers from abroad."
		- James Madison, 4th US president (1751-1836)