AudioCodes Mediant 3000 User Manual page 673

User's Manual
Parameter
Web/EMS: SRTP offered
Suites
[SRTPofferedSuites]
Web: Aria Protocol
Support
[AriaProtocolSupport]
Web: Disable
Authentication On
Transmitted RTP
Packets
EMS: RTP
AuthenticationDisable Tx
[RTPAuthenticationDis
ableTx]
Web: Disable Encryption
On Transmitted RTP
Version 6.6
the SDP answer (even if the SRTPTxPacketMKISize parameter is set
to any value other than 0).
Notes:

To enable symmetric MKI, the SRTPTxPacketMKISize parameter
must be set to any value other than 0.

You can also enable MKI negotiation per IP Profile.
Defines the offered crypto suites (cipher encryption algorithms) for
SRTP.

[0] = (Default) All available crypto suites.

[1] CIPHER SUITES AES CM 128 HMAC SHA1 80 = device uses
AES-CM encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.

[2] CIPHER SUITES AES CM 128 HMAC SHA1 32 = device uses
AES-CM encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.

[4] CIPHER SUITES ARIA CM 128 HMAC SHA1 80 = device uses
ARIA encryption algorithm with a 128-bit key and HMAC-SHA1
message authentication with a 32-bit tag.

[8] CIPHER SUITES ARIA CM 192 HMAC SHA1 80 = device uses
ARIA encryption algorithm with a 192-bit key and HMAC-SHA1
message authentication with a 32-bit tag.
Notes:

For enabling ARIA encryption, use the AriaProtocolSupport
parameter.

This parameter also affects the selection of the crypto in the device's
answer. For example, if the device receives an offer with two crypto
lines containing HMAC_SHA1_80 and HMAC_SHA_32, it uses the
HMAC_SHA_32 key in its SIP 200 OK response if the parameter is
set to 2.
Enables ARIA algorithm cipher encryption for SRTP. This is an
alternative option to the existing support for the AES algorithm. ARIA is a
symmetric key block cipher algorithm standard developed by the Korean
National Security Research Institute.

[0] Disable (default)

[1] Enable
Notes:

To configure the ARIA bit-key encryption size (128 or 192 bit) with
HMAC SHA-1 cryptographic hash function, use the
SRTPofferedSuites parameter.

For ARIA encryption of SRTP, the device must be installed with the
relevant Software License Key.
Enables authentication on transmitted RTP packets in a secured RTP
session.

[0] Enable (default)

[1] Disable
Enables encryption on transmitted RTP packets in a secured RTP
673
53. Configuration Parameters Reference
Description
Mediant 3000