The ZRTP Protocol Security Considerations

The ZRTP Protocol Security Considerations

Riccardo Bresciani;

*Student*

Scarica le slide dell'intervento

ZRTP is draft of key agreement protocol by Phil Zimmermann, which relies on a Diffie-Hellman exchange to generate SRTP session parameters, providing confidentiality and protecting against Man-in-the-Middle attacks even without a public key infrastructure or endpoint certificates. This is an analysis of the protocol performed with AVISPA and ProVerif, which tests security properties of ZRTP; in order to perform the analysis, the protocol has been modeled in HLPSL (for AVISPA) and in the applied ?-calculus (for Proverif). An improvement to gather some extra resistance against Man-in-the-Middle attacks is also proposed.

Scarica le slide dell'intervento