Link to home
Create AccountLog in
Web Development

Web Development

--

Questions

--

Followers

Top Experts

Avatar of Gautam
Gautam🇮🇳

how to validate the communication is encrypted in the developed application

Dear Experts,

Software vendor has developed an application of web and mobile app hosted in the on-premise server for sip/voice/chat and the communication is AES 256 Symmetric Encrypted, the app is installed on the endpoint mobile devices   
How do we validate the communications are encrypted in below cases :
1. validate AES 256 encryption communication between end points to endpoints
2. validate encryption between endpoints to server
We would like to validate the communication is encrypted or not, please suggest how to do this, is there any tools or with any other methods 

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


ASKER CERTIFIED SOLUTION
Avatar of David Johnson, CDDavid Johnson, CD🇨🇦

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account

SOLUTION
Avatar of serialbandserialband🇺🇦

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

Avatar of GautamGautam🇮🇳

ASKER

The solution developed by the software vendor is for end point to endpoint encrypted communication ( the vendor has used several open-source tools/platforms to).  vendors has delivered the application for us to test and have asked us to validate if the communication is encrypted, we would like to validate on the following cases  

1. is communication of voice between endpoints to server and endpoints to endpoints are encrypted  ( app is used in endpoints- mobile devices)
2. is video communication between endpoints to endpoints are encrypted
3. is messages/chat  between endpoints to endpoints ( mobile to mobile ) is encrypted

please suggest is there different ways to check or validate communications are encrypted for above 1 to 3.

SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

Avatar of GautamGautam🇮🇳

ASKER

VOIP Software development product vendor has reverted with the following
1. All the communication between the app and server for REST interface is over HTTPS that encrypts data between device and user,

2.  The  RTP Payload of calls is being encrypted with AES 256 Encryption

3. the above can be validated through wireshark
Next,  they are planning to implement SRTP. SRTP that provides an additional layer of security


SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

Avatar of GautamGautam🇮🇳

ASKER

Sir, so as per the software developer vendor used TLS for channel encryption and  RTP Payload of calls is being encrypted with AES 256 Encryption.

I should be asking them test/validation demo for the above in additional should ask them how about the encryption of video and data and once SRTP implemented then demo the same.

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

Avatar of GautamGautam🇮🇳

ASKER

thanks,  the vendor says  implemented "RTP Payload of calls is being encrypted with AES 256 Encryption" , please help me understand on the following

1. does it mean RTP Payload of video encryption is yet to be implemented,
2. and he is not mentioned about messages
if my above understanding is correct I will be asking them as following
for now demonstrate on
1. channel encryption
2. calls encryption
and readiness duration of the migration to SRTP
please suggest



SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

Avatar of GautamGautam🇮🇳

ASKER

as per the software vendor following are the encryption algorithm used for the product development:
for voice -> encryption algorithm = AES + RSA+SRTP
for video -> encryption algorithm = AES + RSA + SRTP
for data ( file transfers) -> HTTPS (TLS 1.3)
for chat -> encryption algorithm = AES

SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

Avatar of GautamGautam🇮🇳

ASKER

thank you all, before closing this question, is it possible to test/validate encryption form for all the various channels (voice, video , chat and data transfer) through Wireshark.

Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

SOLUTION
Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Web Development

Web Development

--

Questions

--

Followers

Top Experts

Web development includes all aspects of presenting content on intranets and the Internet, including delivery development, protocols, languages and standards, server software, browser clients, databases and multimedia generation.