Secure Real-Time Transport Protocol (Srtp) - Yealink W60P Administrator's Manual

Administrator's Guide for W60P DECT IP Phones
Click Browse to select the certificate (*.pem and *.cer) from your local system.
2.
Click Upload to upload the certificate.
3.

Secure Real-Time Transport Protocol (SRTP)

Secure Real-Time Transport Protocol (SRTP) encrypts the RTP during VoDECT IP phone calls to
avoid interception and eavesdropping. The parties participating in the call must enable SRTP
feature simultaneously. When this feature is enabled on both phones, the type of encryption to
utilize for the session is negotiated between the DECT IP phones. This negotiation process is
compliant with
When a user places a call on the enabled SRTP phone, the DECT IP phone sends an INVITE
message with the RTP encryption algorithm to the destination phone. As described in
3711, RTP streams may be encrypted using an AES (Advanced Encryption Standard) algorithm.
Example of the RTP encryption algorithm carried in the SDP of the INVITE message:
m=audio 11780 RTP/SAVP 0 8 18 9 101
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:NzFlNTUwZDk2OGVlOTc3YzNkYTkwZWVkMTM1YWFj
a=crypto:2 AES_CM_128_HMAC_SHA1_32
inline:NzkyM2FjNzQ2ZDgxYjg0MzQwMGVmMGUxMzdmNWFm
a=crypto:3 F8_128_HMAC_SHA1_80 inline:NDliMWIzZGE1ZTAwZjA5ZGFhNjQ5YmEANTMzYzA0
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:9 G722/8000
a=fmtp:101 0-15
a=rtpmap:101 telephone-event/8000
a=ptime:20
a=sendrecv
The callee receives the INVITE message with the RTP encryption algorithm, and then answers
the call by responding with a 200 OK message which carries the negotiated RTP encryption
algorithm.
414
RFC 4568.
RFC