for encryption data packets, one should use GCM, CCM or EAX mode of operation to have confidentiality and integrity. What to do in case of voice packets? is it enough that audio signal gets compressed and then just encrypted instead, and hoping that if someone changes the bits of encrypted voice, the compression function will not decode the voice properly? thus there is no need to have integrity check in case of audio?

  • 1
    $\begingroup$ Authenticated Encryption is precisely there so you don't have to rely on the application layer to detect manipulation. $\endgroup$ – SEJPM Feb 15 '17 at 11:16
  • $\begingroup$ how just encryption can provide integrity? $\endgroup$ – abraza Feb 16 '17 at 10:26
  • 1
    $\begingroup$ You have good chances of producing a padding oracle that allows decryption of data if you don't use proper authentication. Just accept those 16 bytes of overhead and do it properly. $\endgroup$ – CodesInChaos Feb 16 '17 at 15:43

[H]oping that if someone changes the bits [...], the compression function will not decode the voice properly?

This is called poor man's authentication and is heavily used in full-disk encryption due to size and latency issues. The obvious downside is that you can at most hope that the application layer (ie the decoder) will notice manipulation. Depending on the actual data / audio being handled here, an attacker may very well tamper with the data and try (successfully) to manipulate it so that it decrypts to different valid audio.

What to do in case of voice packets?

Voice isn't different from data (on the most basic level) and as such you want to apply the same mechanisms at the very least.
So what you want is to use authenticated encryption like GCM, CCM or EAX, so that you can detect manipulation of the data with extremely high probability based on the return value of the decryption routine.

| improve this answer | |
  • $\begingroup$ Might want to link to JH's work on inferring VoIP contents inside IPSec tunnels due to compression. $\endgroup$ – Thomas M. DuBuisson Feb 16 '17 at 16:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.