Cryptology ePrint Archive: Report 2008/072
The SIP Security Enhanced by Using Pairing-assisted Massey-Omura Signcryption
Alexandre M. Deusajute and Paulo S. L. M. Barreto
Abstract: Voice over IP (or VoIP) has been adopted progressively not only by a great number of companies but also by an expressive number of people, in Brazil and in other countries. However, this crescent adoption of VoIP in the world brings some concerns such as security risks and threats, mainly on the privacy and integrity of the communication. The risks and threats already exist in the signaling process to the call establishment. This signaling process is performed by specific types of protocols, like the H.323 and SIP (Session Initiation Protocol). Among those risks and threats, we can emphasize the man-in-the-middle attack because of its high danger degree. After doing a bibliographical revision of the current SIP security mechanisms and analyzing some proposals to improve these mechanisms, we verified that the SIP vulnerability to the man-in-the-middle was not totally solved. Then we propose a new security mechanism for SIP in this paper, aiming both to be an alternative security mechanism and a solution for the vulnerability to the man-in-the-middle attack. In our proposal we use a protocol for secure information exchange -- the Massey-Omura protocol -- which, when combined with Pairing-based Cryptography (PBC), provides a better security level for SIP in all its aspects.
Category / Keywords: man-in-the-middle, Massey-Omura, pairing, SIP, VoIP
Publication Info: Actas de la X Reunión Española sobre Criptología y Seguridad de la Información
Date: received 17 Feb 2008, last revised 13 Sep 2008
Contact author: adeusajute at larc usp br
Available format(s): PDF | BibTeX Citation
Note: Due to the acceptance and presentation of the paper in the X RECSI/Spain, the paper had to be reviewed.
Version: 20080914:024539 (All versions of this report)
Short URL: ia.cr/2008/072
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]