At the Black Hat Briefings conference in Las Vegas yesterday, Phil Zimmermann demonstrated his latest creation; secure voice over IP connections.
The software application called Zfone, uses the Shtoom softphone and the Diffie-Hellman key agreement protocol. Zimmermann demonstrated the session-based encryption tool that allows two users on each end of a SIP-based VoIP connection to verify each other’s identity.
As VoIP services grow, the demand for security will be the one of the major concerns for implementation in the enterprise. When VoIP is transmitted over Wi-Fi connections, encryption should be mandatory.
According to Gartner research, 97% of new phone systems to be installed in North America over the next two years will be VoIP-based or use a combination of traditional PTSN and VoIP technology.
Skype doesn’t explain how their service works, you don’t know if your calls are encrypted or not says Zimmermann. He believes his approach will give his product added incentive to users over Skype. People will know what kind of encryption they are using and can generally feel safe about conducting their business over the software.