libsrtp

Download

libsrtp@lists.packetizer.com

February 2017

1 participants
2 discussions

Soliciting feedback on new AES-GCM related bug found in libSRTP 1.5.4 & 2.0.0
by Pascal Buhler (pabuhler) 23 Feb '17

23 Feb '17

Hi, The following bug was recently reported on github https://github.com/cisco/libsrtp/issues/256, this bug relates to AES-GCM on little-endian system. Fixing this bug will cause some backward compatibility issues with existing libSRTP version, but not fixing is not really an option due to interop issues with other AES-GCM implementations as well as it being a potential security problem. Current plan is to fix as part of the upcoming 2.1.0 release and then simultaneously create patch release for 1.5.x. If this bug affects your usage of libSRTP and you would like to discuss how a fix is released then please reply to this mail at libsrtp(a)lists.packetizer.com<mailto:libsrtp@lists.packetizer.com> or else comment directly on the github issue. pascal

1 0

libSRTP project has moved, this mailer is retired!
by Pascal Buhler (pabuhler) 23 Feb '17

23 Feb '17

Hi, For those that do not know already the libSRTP project has completely moved from https://sourceforge.net/projects/srtp to https://github.com/cisco/libsrtp . As part of this move the mailer's hosted on sourceforge , srtp-development(a)lists.sourceforge.net<mailto:srtp-development@lists.sourceforge.net> & srtp-users(a)lists.sourceforge.net<mailto:srtp-users@lists.sourceforge.net> can no long be maintained and so are retiring. There is a new libsrtp mailer set up at libsrtp(a)lists.packetizer.com<mailto:libsrtp@lists.packetizer.com> for general news / announcements / discussions. This is an open list, to subscribe go to https://lists.packetizer.com/mailman/listinfo/libsrtp . Bets regards Pascal, on behalf of libSRTP maintenance team.

1 0